1 2009-11-23 10:56 millert
3 * match.c: cmnd_matches() already deals with negation so
4 _cmndlist_matches() does not need to do so itself. Fixes a bug
5 with negated entries in a Cmnd_List.
7 2009-11-22 11:12 millert
9 * sudo.c: Don't exit() from open_sudoers, just return NULL for all
12 2009-11-22 09:54 millert
14 * toke.c, toke.l: Add missing extern def for parse_error
16 2009-11-20 19:11 millert
18 * toke.c, toke.l: Avoid a parse error when #includedir doesn't find
19 any files. Closes bug #375
21 2009-11-20 19:03 millert
23 * Makefile.in: Include sudo.man.pl and sudoers.man.pl in the
26 2009-11-04 09:42 millert
28 * configure, configure.in: Fix a few typos in the descriptions;
29 from Jeff Makey Only do the check for
30 krb5_get_init_creds_opt_free() taking two arguments if we find
31 krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
32 positive when using our own krb5_get_init_creds_opt_free which
33 takes only a single argument.
35 2009-11-03 09:58 millert
37 * configure, configure.in: Remove a spurious comma in the kerb5
40 2009-11-03 09:51 millert
42 * auth/kerb5.c: Call krb5_get_init_creds_opt_init() in our emulated
43 krb5_get_init_creds_opt_alloc() for MIT kerberos.
45 2009-09-30 09:50 millert
47 * sudo_edit.c: Always update the stashed mtime of the temp file
48 instead of using what we have for the original because the time
49 resolution of the filesystem the temporary is on may not match
50 that of the filesystem that holds the original. Should fix bz
51 #371 found by Philippe Levan.
53 2009-09-24 21:11 millert
55 * configure, configure.in, sudoers.man.pl, sudoers.pod: Substitute
56 in default value for secure_path
58 2009-09-24 20:31 millert
60 * sudo.pod: Mention that the password must be followed by a newline
63 2009-08-07 10:21 millert
65 * auth/pam.c: Set PAM_RUSER and PAM_RHOST early so they can be used
66 during authentication. Based on a patch from Jamie Beverly.
68 2009-08-07 09:25 millert
70 * match.c: Close dir before returning if strlcpy() reports
71 overflow. From Martynas Venckus.
73 2009-07-18 09:55 millert
75 * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
78 2009-07-12 17:17 millert
80 * mkdefaults: If no arg assume def_data.in
82 2009-07-11 21:27 millert
84 * README, WHATSNEW: Update for 1.7.2
86 2009-07-11 21:12 millert
90 2009-06-30 08:41 millert
92 * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
93 quotes around a colon in Runas_Spec definition. From Elias
96 2009-06-29 09:36 millert
98 * redblack.c: In rbrepair, re-color the root or the first non-block
99 node we find to be black. Re-coloring the root is probably not
100 needed but won't hurt.
102 2009-06-29 09:35 millert
104 * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
106 2009-06-26 16:40 millert
108 * redblack.c: When repairing the tree, don't touch the root node.
110 2009-06-25 08:44 millert
112 * set_perms.c: Protect call to setegid in runas_setup with #ifdef
113 HAVE_SETEUID. Reported by Josef Schmid.
115 2009-06-23 14:29 millert
117 * sudoers.pod: Document that we accept env_pam-style environment
120 2009-06-23 14:24 millert
122 * env.c: Adapt to accept pam_env-style /etc/environment which
123 allows shell-style lines such as: export EDITOR="/usr/bin/vi"
125 2009-06-23 12:22 millert
127 * sudoers.pod: Make it clear that env_delete only works when
128 !env_reset. From Loïc Minier
130 2009-06-15 17:19 millert
132 * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
135 2009-06-15 17:18 millert
137 * Makefile.in: build the .cat page in the current working dir, not
140 2009-06-15 09:10 millert
142 * env.c: Return EINVAL in setenv() if var is NULL or the empty
143 string to match glibc behavior.
145 2009-06-13 16:52 millert
147 * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
150 2009-06-11 16:29 millert
152 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
153 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
156 2009-06-09 10:08 millert
158 * INSTALL: Document --with-libvas and --with-libvas-rpath
160 2009-05-29 09:43 millert
162 * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
163 and key paths may be a directory or a file. However, version 5.0
164 of the SDK only seems to support using a directory. If
165 ldapssl_clientauth_init fails and the cert or key paths look like
166 they could be files, strip off the last path element and try
169 2009-05-29 09:40 millert
171 * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
174 2009-05-26 20:49 millert
176 * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
177 non-Unix group support from Quest, as reworked by me.
179 2009-05-26 20:47 millert
183 2009-05-26 20:46 millert
185 * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
188 2009-05-25 08:02 millert
190 * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
191 fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
192 logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
193 pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
194 sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
195 testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
196 auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
199 2009-05-24 08:33 millert
201 * interfaces.c, lbuf.c: Minor fixes for Minix-3
203 2009-05-22 06:37 millert
205 * set_perms.c: Handle getgroups() returning 0. Also add missing
206 check for HAVE_GETGROUPS.
208 2009-05-19 17:24 millert
210 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
211 version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
212 via AC_INIT in configure.
214 2009-05-18 06:33 millert
216 * set_perms.c: Remove group setting code in setusercontext case, we
217 will do it ourselves later on in runas_setup. Set the gid after
218 initgroups/setgroups is called, since on Mac OS X it seems to
221 2009-05-17 18:19 millert
223 * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
224 vasgroups.c: Initial bits of non-unix group support using Quest
225 Authentication Services
227 2009-05-17 16:52 millert
229 * toke.c, toke.l: Accept %:foo as a non-Unix group
231 2009-05-17 16:22 millert
233 * toke.c, toke.l: Allow user/group to be double quoted in the case
234 of non-Unix groups which contain spaces.
236 2009-05-11 12:47 millert
238 * match.c: Don't allow the user to specify the default runas user
239 if their sudoers entry only allows them to run as a group.
241 2009-05-10 07:59 millert
243 * sudo.c: Must call audit_success before we change uids.
245 2009-05-10 07:52 millert
247 * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
248 set_perm to not exit on failure and use this in the logging
251 2009-05-10 07:33 millert
253 * parse.c: In -l mode, if the user is only allowed to run as a
254 group, display the user's name, not root's before the allowed
257 2009-05-09 21:00 millert
259 * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
260 effect of setting the runas user to root unilaterally.
262 2009-05-08 16:19 millert
264 * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
267 2009-05-08 13:07 millert
269 * pwutil.c: Only cache by the method we fetched for pwd and grp
270 lookups. Previously we cached both by namd and id but this can
271 cause problems for entries that share the same id. Also add more
272 info in the error message in case the insert fails (which should
275 2009-04-30 15:04 millert
277 * sudoers.pod: Add a clarification from Nick Sieger
279 2009-04-25 12:49 millert
281 * env.c: Inline the setting of the environment string.
283 2009-04-24 14:53 millert
285 * env.c: setenv(3) in Linux treats a NUL value as the empty string
286 setenv(3) in BSD doesn't return an error if the name has '=' in
287 it, it just treats the '=' as end of string.
289 2009-04-22 16:32 millert
291 * toke.c, toke.l: Not all systems have d_namlen
293 2009-04-20 13:53 millert
295 * sudoers.pod: Fix up some pod2html issues.
297 2009-04-19 14:09 millert
299 * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
300 from a diff from Quest Software.
302 2009-04-19 09:01 millert
304 * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
307 2009-04-19 08:56 millert
309 * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
312 2009-04-18 19:37 millert
314 * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
315 #includedir, ignore any file containing a dot
317 2009-04-18 19:25 millert
319 * Makefile.in, version.h: Bump version
321 2009-04-18 19:25 millert
323 * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
324 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
325 visudo.c: Implement #includedir directive. Files in an
326 includedir are not edited by visudo unless they contain a syntax
329 2009-04-18 12:06 millert
333 2009-04-18 10:27 millert
335 * WHATSNEW: Forgot umask_override
337 2009-04-18 09:25 millert
339 * ChangeLog, TODO: sync
341 2009-04-16 08:22 millert
343 * visudo.c: Rewind stream if we fdopen sudoers since it may not be
344 at the beginning. Set the keepopen flag on already-open files
345 too so the lexer doesn't close them out from under us.
347 2009-04-16 08:18 millert
349 * visudo.c: Print the proper file name when there is a parse error
352 2009-04-11 07:45 millert
356 2009-04-10 16:59 millert
358 * configure, configure.in: Fix a warning when --without-ldap is
361 2009-04-05 12:25 millert
363 * alias.c, parse.h, visudo.c: Store aliases that we remove during
364 check_aliases in a freelist and free them at the end so we don't
367 2009-03-28 09:30 millert
369 * visudo.c: Check aliases in -c mode too.
371 2009-03-28 09:09 millert
373 * alias.c, parse.h, visudo.c: Make alias_remove return the alias
374 struct instead of freeing it directly. Fixes a use after free in
375 alias_remove_recursive, the only consumer.
377 2009-03-28 09:07 millert
379 * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
380 -> alias_find for consistency.
382 2009-03-27 19:29 millert
384 * visudo.c: When checking for unused aliases, recurse if the alias
385 points to another alias.
387 2009-03-16 12:11 millert
389 * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
390 support will be done later after some refactoring.
392 2009-03-14 12:02 millert
394 * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
396 2009-03-13 21:04 millert
398 * configure, configure.in: Only check for
399 ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
400 compilation with ldapux.
402 2009-03-11 20:03 millert
404 * fileops.c: fix char subscript
406 2009-03-11 19:19 millert
408 * Makefile.in: remove errant carriage returns
410 2009-03-11 19:01 millert
412 * audit.c, env.c: fix K&R compilation
414 2009-03-11 12:12 millert
416 * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
417 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
420 2009-03-10 17:34 millert
422 * config.h.in: Add missing HAVE_BSM_AUDIT
424 2009-03-10 17:21 millert
426 * WHATSNEW: Add 1.7.1 features
428 2009-03-10 17:10 millert
430 * INSTALL: Mention --with-netsvc
432 2009-03-10 17:08 millert
434 * sudoers.ldap.pod: Document netsvc.conf support
436 2009-03-10 16:44 millert
438 * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
439 sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
441 2009-03-08 16:57 millert
443 * configure, config.h.in, configure.in, env.c: Add
444 --enable-env-debug flag to enable environment sanity checks.
446 2009-03-08 11:51 millert
448 * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
450 2009-03-07 17:10 millert
452 * env.c: Only sync environ for putenv, setenv, and unsetenv. We
453 need to make sure that sudo_putenv and sudo_setenv only modify
454 env.envp, not environ.
456 2009-03-02 14:19 millert
458 * env.c: Really fix UNSETENV_VOID
460 2009-03-02 14:18 millert
462 * env.c: Fix unsetenv when UNSETENV_VOID
464 2009-03-02 08:00 millert
466 * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
468 2009-03-02 07:36 millert
470 * ldap.c: tivoli-based ldap does not have ldapssl_err2string
472 2009-03-02 07:30 millert
476 2009-03-01 16:20 millert
478 * config.h.in, configure, configure.in, ldap.c: Add support for
479 Tivoli-based LDAP start TLS as seen in AIX. Untested.
481 2009-03-01 08:52 millert
483 * env.c: Add sanity checks for setenv/unsetenv
485 2009-02-28 20:17 millert
487 * Makefile.in: Include bsm_audit.h in the tarball
489 2009-02-28 20:00 millert
491 * Makefile.in, version.h: bump version for sudo 1.7.1
493 2009-02-28 19:58 millert
495 * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
496 sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
497 calls to setenv/unsetenv and provide our own
498 setenv/unsetenv/putenv that operates on own env pointer. Make
499 sync_env() inline in setenv/unsetenv/putenv functions.
501 2009-02-25 07:33 millert
503 * sudo.c: Make "sudoedit -h" work as expected
505 2009-02-25 07:21 millert
507 * auth/pam.c: Make sure def_prompt is always defined. This is a
508 workaround for pam configs that prompt for a password in the
509 session but don't have an auth line. A better fix is to expand
510 the sudo prompt earlier and set def_prompt to that when
513 2009-02-25 06:17 millert
515 * sudo.pod: Mention that the helper for -A may be graphical.
517 2009-02-25 06:16 millert
519 * TROUBLESHOOTING: Document what happens if there is no tty.
521 2009-02-25 06:05 millert
523 * sudo.c: cosmetic changes
525 2009-02-25 05:47 millert
527 * term.c: Fix term_restore
529 2009-02-24 20:23 millert
531 * sudo.c: Fix "sudo -k" with no other args
533 2009-02-24 08:04 millert
535 * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
536 be specified in conjunction with a command or another option that
537 may require authentication.
539 2009-02-23 09:18 millert
541 * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
542 from Diego E. 'Flameeyes'
544 2009-02-23 09:15 millert
546 * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
548 2009-02-21 17:03 millert
550 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
551 Implement umask_override
553 2009-02-21 16:51 millert
557 2009-02-21 16:49 millert
559 * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
562 2009-02-21 08:43 millert
564 * audit.c: Need to include compat.h
566 2009-02-21 08:37 millert
568 * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
569 sudo.c: Make audit_success and audit_failure generic functions in
570 preparation for integrating linux audit support.
572 2009-02-21 08:06 millert
574 * term.c: remove duplicate include
576 2009-02-20 16:13 millert
578 * bsm_audit.c: Add missing include
580 2009-02-20 15:55 millert
582 * sudo.c: May need to update the runas user after parsing
583 command-based defaults.
585 2009-02-18 10:53 millert
587 * glob.c: Add missing pair of braces introduced with character
590 2009-02-15 15:53 millert
592 * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
593 Rename pwstars to pwfeedback
595 2009-02-10 20:25 millert
597 * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
599 2009-02-10 20:18 millert
601 * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
602 sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
605 2009-02-10 19:58 millert
607 * term.c: This is new code, no DARPA notice.
609 2009-02-10 14:04 millert
611 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
612 simple_glob -> fast_glob
614 2009-02-10 09:39 millert
616 * match.c: g/c unused var
618 2009-02-10 08:09 millert
620 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
621 simple_glob option to use fnmatch() instead of glob(). This is
622 useful when you need to specify patterns that reference network
625 2009-02-10 07:58 millert
627 * tgetpass.c: add term_* proto
629 2009-02-10 07:51 millert
631 * sudoers.pod: mention glob()
633 2009-02-09 07:59 millert
635 * tgetpass.c: Delete any pwstars we wrote after the user hits
636 return. That way there is no record on screen as to the user's
639 2009-02-08 10:27 millert
641 * term.c: Move terminal setting bits from tgetpass.c to term.c
643 2009-02-07 19:50 millert
645 * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
646 tgetpass.c: Add pwstars sudoers option that causes sudo to print
647 a star every time the user presses a key.
649 2009-02-03 10:10 millert
651 * Makefile.in: Fix up F<> brokenness for visudo.man.in and
654 2009-01-27 11:54 millert
656 * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
657 not -1, to indicate no limit. From Mark Janssen.
659 2009-01-17 17:36 millert
661 * toke.c, toke.l: Comments that begin with #- should not be parsed
664 2009-01-08 19:13 millert
666 * sudo.c: Do not try to set the close on exec flag if we didn't
667 actually open sudoers.
669 2008-12-19 12:40 millert
673 2008-12-14 17:40 millert
677 2008-12-09 18:48 millert
679 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
680 enters ^C at the password prompt.
682 2008-12-09 16:13 millert
684 * configure.in, configure: Don't try to build sudo_noexec.so on
685 HP-UX with the bundled compiler as it cannot generate shared
688 2008-12-09 15:55 millert
690 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
693 2008-12-09 08:49 millert
695 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
696 it clear that we are not short-circuiting on last match. When
697 pwcheck is 'all', initialize nopass to TRUE and override it with
698 the first non-TRUE entry.
700 2008-12-08 10:02 millert
702 * parse.c: Do not short circuit pseudo commands when we get a match
703 since, depending on the settings, we may need to examine all
706 2008-12-03 15:58 millert
708 * sudoers.cat, sudoers.man.in: regen
710 2008-12-03 15:57 millert
712 * sudoers.pod: hostnames may also contain wildcards
714 2008-12-03 15:40 millert
716 * Makefile.in: remove stamp-* files and linux core files in clean
719 2008-12-02 12:30 millert
721 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
722 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
724 2008-11-26 15:10 millert
726 * configure, configure.in: correctly enable SIA on Digital UNIX
728 2008-11-25 20:06 millert
732 2008-11-25 20:05 millert
736 2008-11-25 12:01 millert
738 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
739 ttys we may still have /dev/tty available to us.
741 2008-11-24 10:09 millert
743 * sudoers.cat, sudoers.man.in: regen
745 2008-11-24 10:08 millert
747 * sudoers.pod: fix typos; Markus Lude
749 2008-11-24 07:08 millert
753 2008-11-23 19:42 millert
757 2008-11-23 19:41 millert
759 * toke.l: Fix matching of a line that only consists of a comment
762 2008-11-22 13:17 millert
764 * auth/pam.c: MacOS pam will retry conversation function if it
765 fails so just treat ^C as an empty password.
767 2008-11-22 10:12 millert
769 * visudo.c: When checking for alias use, also check defaults
772 2008-11-22 10:01 millert
774 * redblack.c: unused var
776 2008-11-22 09:42 millert
778 * redblack.c: Replace my rbdelete with Emin's version (which
781 2008-11-19 12:01 millert
783 * testsudoers.c: malloc debugging
785 2008-11-19 07:37 millert
787 * visudo.c: malloc options in devel mode for visudo too
789 2008-11-18 10:57 millert
791 * sudo.c: fix compilation on non-C99; from Theo
793 2008-11-18 10:50 millert
795 * visudo.c: fix check_aliases
797 2008-11-18 08:29 millert
799 * alias.c: when destroying an alias, free the correct data pointer
801 2008-11-18 07:54 millert
803 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
805 2008-11-15 13:34 millert
807 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
810 2008-11-15 13:34 millert
812 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
813 'option' for command line options (not flag)
815 2008-11-14 06:18 millert
817 * INSTALL: Add note on configuring HP-UX pam
819 2008-11-11 13:28 millert
821 * check.c, sudo.c: Move tty checks into check_user() so we only do
822 them if we actually need a password.
824 2008-11-11 12:34 millert
826 * sudo.c: Don't error out if no tty or askpass unless we actually
827 need to authenticate.
829 2008-11-10 15:20 millert
833 2008-11-10 08:07 millert
835 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
838 2008-11-09 15:18 millert
840 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
842 2008-11-09 09:15 millert
844 * gram.c, toke.c: regen
846 2008-11-09 09:13 millert
848 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
849 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
850 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
851 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
852 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
853 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
854 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
855 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
856 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
857 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
858 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
861 2008-11-09 08:48 millert
863 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
865 2008-11-08 10:40 millert
867 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
868 far past the end, resulting in a NUL being written immediately
869 after the buffer end.
871 2008-11-08 10:31 millert
873 * UPGRADE, WHATSNEW: add sections on tgetpass changes
875 2008-11-08 10:30 millert
877 * tgetpass.c: Treat EOF w/o newline as an error.
879 2008-11-07 17:42 millert
881 * parse.c: Fix "sudo -v" when NOPASSWD is set.
883 2008-11-07 12:45 millert
885 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
886 longer treat an empty password at the prompt as special. To quit
887 out of sudo you now need to hit ^C at the password prompt.
889 2008-11-06 21:07 millert
891 * sudoers.cat, sudoers.man.in: regen
893 2008-11-06 21:06 millert
895 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
896 will now refuse to run if no tty is present unless the new
897 visiblepw sudoers flag is set.
899 2008-11-05 19:42 millert
901 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
902 RLIM_SAVED_MAX not defined
904 2008-11-05 19:40 millert
906 * aix.c: fix fallback value for RLIM_SAVED_MAX
908 2008-11-05 19:14 millert
910 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
913 2008-11-05 19:08 millert
915 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
916 authenticate() as it may not be correct for the user we are
917 running the command as.
919 2008-11-05 19:05 millert
921 * isblank.c: Add isblank() function for systems without it. Needed
922 for POSIX character class matching in fnmatch.c and glob.c.
924 2008-11-05 11:02 millert
926 * TROUBLESHOOTING: expound on sudo and cd
928 2008-11-04 15:52 millert
932 2008-11-04 15:46 millert
934 * sudoers.cat, sudoers.man.in: regen
936 2008-11-04 15:45 millert
938 * sudoers.pod: mention defauts parse order
940 2008-11-03 13:19 millert
942 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
943 function for systems without it. Needed for POSIX character
944 class matching in fnmatch.c and glob.c.
946 2008-11-03 12:54 millert
948 * Makefile.in: add emul/charclass.h to HDRS
950 2008-11-02 14:08 millert
954 2008-11-02 14:06 millert
956 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
957 update_defaults into defaults.c and call it properly from visudo
960 2008-11-02 09:51 millert
962 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
963 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
966 2008-11-02 09:45 millert
968 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
969 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
970 has non-standard entries.
972 2008-11-02 09:35 millert
976 2008-11-02 09:28 millert
978 * match.c: Short circuit glob() checks if basename(pattern) !=
979 basename(command). Refactor code that checks for a command in a
980 directory and use it in the glob case if the resolved pattern
983 2008-11-01 09:20 millert
985 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
986 setting runas defaults until after runaspw/gr is setup.
988 2008-10-29 13:26 millert
990 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
991 allocating host/domain name since some systems do not include
992 space for the NUL in the size. Also manually NUL-terminate
993 buffer from gethostname() since POSIX is wishy-washy on this.
995 2008-10-26 17:13 millert
997 * sudo.c, sudoers.pod: When setting the umask, use the union of the
998 user's umask and the default value set in sudoers so that we
999 never lower the user's umask when running a command.
1001 2008-10-26 16:43 millert
1003 * sudo.c: Don't try to read from a zero-length sudoers file.
1004 Remove the bogus Solaris work-around for EAGAIN. Since we now
1005 use fgetc() it should not be a problem.
1007 2008-10-25 09:22 millert
1009 * parse.c: In update_defaults() check the return value of
1010 user*_matches against ALLOW so we don't inadvertantly match on
1013 2008-10-24 09:52 millert
1015 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1016 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1017 regen man pages; no more hyphenation
1019 2008-10-24 09:49 millert
1021 * sudo.c: Don't error out on a zero-length sudoers file. With the
1022 advent of #include the user could create a situation where sudo
1025 2008-10-23 12:06 millert
1027 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
1028 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
1029 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
1030 Add configure tests to handle all the cases.
1032 2008-10-08 17:28 millert
1034 * sudo.pod: resort ENVIRONMENT
1036 2008-10-08 17:09 millert
1038 * sudoers.pod: document sudoers_locale
1040 2008-10-08 16:56 millert
1042 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
1043 uses in preference to VISUAL or EDITOR
1045 2008-10-08 14:27 millert
1047 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
1048 sudo-specific characters. Allows character classes to be used in
1051 2008-10-03 16:02 millert
1053 * lbuf.c: fix typo in non-C89 function declaration
1055 2008-10-03 15:56 millert
1057 * sudoers.pod: Mention POSIX characters classes now that out
1058 fnmatch() and glob() support them.
1060 2008-10-03 15:55 millert
1062 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
1063 UTF8) with [A-Za-z] which is locale agnostic.
1065 2008-10-03 10:02 millert
1067 * parse.h: use __signed char if we are going to assign a negative
1068 value since on Power, char is unsigned by default
1070 2008-10-03 09:59 millert
1072 * configure, configure.in, config.h.in: Add tests for __signed char
1075 2008-10-03 09:19 millert
1077 * aix.c: Fix AIX limit setting. getuserattr() returns values in
1078 disk blocks rather than bytes. The default hard stack size in
1079 newer AIX is RLIM_SAVED_MAX. From Dale King.
1081 2008-09-26 17:13 millert
1083 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1084 to included glob(3) and fnmatch(3).
1086 2008-09-16 08:28 millert
1088 * emul/fnmatch.h: Remove UCB advertising clause and some
1089 compatibility defines.
1091 2008-09-14 16:07 millert
1093 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1094 re-invoking itself or sudo. This allows one to set EDITOR to
1095 sudoedit without getting into an infinite loop of sudoedit
1096 running itself until the path gets too big.
1098 2008-09-13 20:45 millert
1100 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1101 sudoers_locale Defaults option to override the default sudoers
1104 2008-09-13 14:09 millert
1106 * sudo.c: Set locale to system default except for during sudoers
1109 2008-09-12 09:34 millert
1111 * match.c: Redo change in 1.34 to use pointer arithmetic.
1113 2008-09-11 07:06 millert
1115 * match.c: Fix a dereference (read) of a freed pointer. Reported
1116 by Patrick Williams.
1118 2008-08-23 19:09 millert
1120 * sudo.c: Set locale to "C" to avoid interpretation issues with
1121 character ranges in sudoers. May want to make the locale a
1122 sudoers option in the future.
1124 2008-08-20 07:45 millert
1126 * config.h.in: we no longer use setproctitle
1128 2008-08-20 07:41 millert
1130 * sudo.h: remove #if 1
1132 2008-08-20 07:40 millert
1134 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1137 2008-07-12 08:53 millert
1139 * gram.c: regen with yacc skeleton bug fixed
1141 2008-07-12 08:48 millert
1143 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1145 2008-07-02 06:27 millert
1147 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1148 passwd entry used for running commands as a uid not listed in the
1149 passwd database. Fixes an issue with some PAM modules.
1151 2008-07-01 07:57 millert
1153 * sudo.c: Error out in -i mode if the user has no shell. This can
1154 happen when running commands as a uid with no password entry.
1156 2008-06-26 07:49 millert
1158 * toke.c, toke.l: Better fix for line continuation inside double
1159 quotes. Now accepts whitespace between the backslash and the
1160 newline like the main lexer.
1162 2008-06-25 14:31 millert
1164 * toke.c, toke.l: Fix line continuation in strings. It was only
1165 being honored if preceded by whitespace.
1167 2008-06-22 16:19 millert
1169 * config.h.in, configure, configure.in, logging.c: Replace the
1170 double fork with a fork + daemonize.
1172 2008-06-21 14:59 millert
1174 * env.c, sudo.c: The -i flag should imply env_reset. This got
1175 broken in sudo 1.6.9.
1177 2008-06-20 20:34 millert
1179 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1180 is waited for. Instead of having a SIGCHLD handler, use the
1181 double fork trick to orphan the child that opens the pipe to
1182 sendmail. Fixes a problem running su on some Linux distros.
1184 2008-06-20 17:16 millert
1186 * configure, configure.in: Fix configure test for dirfd() on Linux
1187 where DIR is opaque.
1189 2008-06-17 17:42 millert
1191 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1192 QNX still has this problem we'll need to revisit this again.
1194 2008-06-10 21:13 millert
1196 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1197 the mailer. If we only block the signal it may be delivered
1198 later when we unblock. Also, there is no need to block SIGCHLD
1199 since we no longer do the double fork. The normal SIGCHLD
1200 handler is sufficient.
1202 2008-06-08 17:37 millert
1204 * configure, configure.in: Add description for NO_PAM_SESSION, from
1207 2008-06-06 09:36 millert
1209 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1211 2008-05-18 13:54 millert
1213 * configure, configure.in: Redo the test for dgettext() in a way
1214 that hopefully will work around the libintl_dgettext() undefined
1217 2008-05-11 09:21 millert
1219 * schema.ActiveDirectory: change filename in comment
1221 2008-05-10 09:18 millert
1223 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1224 sudoers.ldap.pod: Reference schema.ActiveDirectory
1226 2008-05-09 14:49 millert
1228 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1230 2008-05-09 14:48 millert
1232 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1234 2008-05-09 14:01 millert
1236 * schema.ActiveDirectory: Active Directory schema by Chantal
1237 Paradis and Eric Paquet
1239 2008-05-08 17:54 millert
1241 * parse.c: remove an XXX that was fixed
1243 2008-05-08 12:53 millert
1247 2008-05-08 12:49 millert
1249 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1250 mode. This fixes a problem where the tag value printed was
1251 influenced by defaults set in the first pass through the parser.
1253 2008-05-03 21:29 millert
1255 * Makefile.in, sudo.psf: No point in packaging the TODO file
1257 2008-05-03 21:24 millert
1261 2008-05-02 20:53 millert
1263 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1264 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1265 Defaults option that is similar to /etc/environment on some
1268 2008-05-02 16:38 millert
1270 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1271 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1272 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1275 2008-05-02 16:37 millert
1277 * UPGRADE: initial valgrind pass done
1279 2008-04-23 08:30 millert
1281 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1284 2008-04-11 10:03 millert
1286 * ldap.c: define LDAPS_PORT if the system headers do not
1288 2008-04-10 14:54 millert
1290 * gram.c, gram.y: Fix another memory leak in init_parser().
1292 2008-04-10 12:51 millert
1294 * configure, configure.in: There was a missing space before the
1295 ldap libs in SUDO_LIBS for some configurations.
1297 2008-04-10 11:28 millert
1299 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1300 leaks pointed out by valgrind.
1302 2008-04-07 14:39 millert
1304 * sudo.c: fix "sudo -s" broken by mode/flags breakout
1306 2008-04-07 14:26 millert
1308 * configure, configure.in: remove duplicate check for dgettext
1310 2008-04-05 15:54 millert
1312 * aix.c: Fall back to default stanza if no user-specific limit is
1315 2008-04-02 15:56 millert
1317 * snprintf.c: include stdint.h if present
1319 2008-04-02 15:28 millert
1321 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1323 2008-04-01 19:18 millert
1325 * sudoers.ldap.pod: fix cut and pasto
1327 2008-03-31 11:24 millert
1329 * pwutil.c: Add #ifdef PURITY
1331 2008-03-30 17:36 millert
1333 * auth/bsdauth.c: remove useless cast
1335 2008-03-27 19:07 millert
1339 2008-03-27 19:04 millert
1343 2008-03-27 19:01 millert
1345 * sudo.h: Split MODE_* defines into primary and flags.
1347 2008-03-26 13:11 millert
1349 * aix.c: It turns out the logic for getting AIX limits is more
1350 convoluted than I realized and differs depending on whether the
1351 soft and/or hard limits are defined.
1353 2008-03-23 10:18 millert
1355 * Makefile.in, configure, configure.in: Back out AIX-specific
1356 change to set the sudo_noexec path to the .a file, we do really
1357 want to use the .so file. Since libtool doesn't do that
1358 correctly, just install the .so file ourselves in the Makefile.
1360 2008-03-23 10:12 millert
1362 * install-sh: If the file given to install is a path, only use the
1363 basename of the file when building the destination path.
1365 2008-03-18 16:08 millert
1367 * sudo.c: parse_args() cleanup: Sort command line options in the
1368 getopt() switch The -U option requires a parameter Normalize a
1369 few ISSET calls Split mode into mode and flags and retire the
1370 now-obsolete excl variable
1372 2008-03-18 16:04 millert
1374 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1375 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1377 2008-03-18 15:59 millert
1379 * sudo.c: Move version printing, etc. into a separate function.
1381 2008-03-18 15:57 millert
1383 * sudo.c: Don't try to cleanup nsswitch if it has not been
1386 2008-03-17 11:09 millert
1388 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1389 a problem executing the mailer.
1391 2008-03-14 08:11 millert
1393 * configure.in, configure: AIX shared libs end in .a, not .so.
1395 2008-03-13 07:34 millert
1397 * env.c: Preserve HOME by default too. Matches documentation and
1400 2008-03-12 19:42 millert
1402 * sudo.c: Use getopt() to parse the command line. We need to be
1403 able to intersperse env variables and options yet still honor
1404 "--"" which complicates things slightly.
1406 2008-03-06 14:46 millert
1410 2008-03-06 14:43 millert
1412 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1414 2008-03-06 14:32 millert
1416 * config.guess, config.sub: update from libtool-1.5.26 distribution
1418 2008-03-06 13:18 millert
1420 * aix.c, sudo.h: attempt to fix compilation errors on AIX
1422 2008-03-06 13:08 millert
1424 * Makefile.in: fix typo in last commit
1426 2008-03-06 13:07 millert
1428 * Makefile.in: Add WHATSNEW file to the distribution
1430 2008-03-06 12:43 millert
1432 * visudo.c: use warningx instead of fprintf(stderr, ...)
1434 2008-03-06 12:31 millert
1436 * list.c: add DEBUG to list2tq
1438 2008-03-06 12:28 millert
1440 * ChangeLog, TODO: sync
1442 2008-03-06 12:21 millert
1444 * WHATSNEW: mention mailfrom
1446 2008-03-06 12:19 millert
1448 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1449 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1450 using a combination of getuserattr() and setrlimit(). Currently
1453 2008-03-05 16:52 millert
1455 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1456 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1457 sets the value of the From: field in the warning/error mail. If
1458 unset the login name of the invoking user is used.
1460 2008-03-05 16:18 millert
1462 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1465 2008-03-05 15:19 millert
1467 * gram.c, gram.y: When adding a default, only call list2tq() once
1468 to do the list to tq conversion. It is not legal to call list2tq
1469 multiple times on the same list since list2tq consumes and
1470 modifies the list argument.
1472 2008-03-05 09:38 millert
1474 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1477 2008-03-05 09:36 millert
1479 * WHATSNEW: mention askpass
1481 2008-03-04 17:20 millert
1483 * sudo.c: Error out if both -A and -S are specified Error out if -A
1484 is specified but no askpass is configured
1486 2008-03-04 17:16 millert
1488 * configure, configure.in: we are not going to ship a sudo-specific
1491 2008-03-03 14:30 millert
1493 * sudo.h: fix definition of TGP_ASKPASS
1495 2008-03-03 13:54 millert
1497 * def_data.c, def_data.in: make askpass boolean-capable
1499 2008-03-03 13:53 millert
1501 * INSTALL: document --with-askpass
1503 2008-03-02 19:27 millert
1505 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1506 sudoers.ldap.cat, visudo.cat: regen
1508 2008-03-02 17:31 millert
1510 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1512 2008-03-02 09:31 millert
1514 * check.c, configure, configure.in, def_data.c, def_data.h,
1515 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1516 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1517 running a helper program to read the password when no tty is
1518 present (or when specified with the -A flag). TODO: docs.
1520 2008-03-02 08:38 millert
1522 * def_data.c, def_data.in: add missing printf format to SELinux
1523 role and type strings
1525 2008-02-27 09:26 millert
1527 * INSTALL, configure, configure.in: Disable use of
1528 gss_krb5_ccache_name() by default and add
1529 --enable-gss-krb5-ccache-name configure option to enable it. It
1530 seems that gss_krb5_ccache_name() doesn't work properly with some
1531 combinations of Heimdal and OpenLDAP.
1533 2008-02-22 15:33 millert
1535 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1536 add a call to setkeycreatecon() (though this is probably
1537 insufficient). From Dan Walsh.
1539 2008-02-22 15:19 millert
1541 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1542 conversation function may be called for non-password reading
1543 purposes so we must be careful not to use def_prompt in cases
1544 where it may not be set.
1546 2008-02-20 12:00 millert
1548 * selinux.c: Don't free the new tty context, we need to keep it
1549 around when we restore the tty context after the command
1552 2008-02-19 16:04 millert
1554 * selinux.c: s/newrole/sudo/
1556 2008-02-19 13:21 millert
1558 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1559 if we have login.conf support
1561 2008-02-18 11:05 millert
1563 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1564 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1567 2008-02-18 10:53 millert
1569 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1570 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1571 lines partaining to login.conf, BSD auth and SELinux and only
1572 enable them if pertinent.
1574 2008-02-18 10:42 millert
1576 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1577 Remove the =cut on the first line (above the copyright notice) to
1578 quiet pod2man. Also remove the hackery in the FILES section and
1579 just deal with the fact that there will a newline between each
1582 2008-02-17 08:19 millert
1584 * Makefile.in: run sudo.man.pl when generating sudo.man.in
1586 2008-02-17 08:11 millert
1588 * configure, configure.in, sudo.man.pl: comment out SELinux manual
1589 bits unless --with-selinux was specified
1591 2008-02-17 08:04 millert
1593 * sudoers.pod: document role and type defaults for SELinux
1595 2008-02-16 20:26 millert
1597 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1598 Document "sudo -ll" and make "sudo -l -l" be equivalent.
1600 2008-02-15 15:23 millert
1602 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1603 Fixes compilation problems on Debian GNU/kFreeBSD.
1605 2008-02-13 17:17 millert
1607 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1608 rewrite of verify_krb_v5_tgt()
1610 2008-02-13 07:28 millert
1612 * logging.c, logging.h, sudo.c: Remove dependence on
1613 VALIDATE_NOT_OK in logging functions. Split log_auth() into
1614 log_allowed() and log_denial() Replace mail_auth() with
1615 should_mail() and a call to send_mail()
1617 2008-02-10 18:06 millert
1619 * ldap.c: Add debugging so we can tell if the krb5 ccache is
1622 2008-02-10 17:34 millert
1624 * INSTALL: mention --with-selinux
1626 2008-02-09 09:48 millert
1630 2008-02-09 09:43 millert
1632 * selinux.c: add Sudo tag
1634 2008-02-09 09:30 millert
1636 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1637 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1638 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1639 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1640 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1641 toke.l: Add support for SELinux RBAC. Sudoers entries may
1642 specify a role and type. There are also role and type defaults
1643 that may be used. To make sure a transition occurs, when using
1644 RBAC commands are executed via the new sesh binary. Based on
1645 initial changes from Dan Walsh.
1647 2008-02-08 08:18 millert
1649 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1650 list (sudo -ll) support for printing verbose LDAP and sudoers
1651 file entries. Still need to update manual.
1653 2008-02-03 10:43 millert
1655 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1656 output for file and ldap based sudoers and use lbufs for both.
1657 The ldap output does not currently include options that cannot be
1658 represented as tags. This will be remedied in a long list output
1661 2008-01-27 16:37 millert
1663 * set_perms.c: Use a specific error message for errno == EAGAIN
1664 when setuid() et al fails. On Linux systems setuid() will fail
1665 with errno set to EAGAIN if changing to the new uid would result
1666 in a resource limit violation.
1668 2008-01-27 16:34 millert
1670 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1671 family of syscalls causes the nroc resource limit to be checked.
1672 The limits will be reset by pam_limits.so when PAM is used. In
1673 the non-PAM case the nproc limit will remain unlimited but there
1674 doesn't seem to be a way around that other than having sudo parse
1675 /etc/security/limits.conf directly.
1677 2008-01-27 16:31 millert
1679 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1682 2008-01-23 06:33 millert
1684 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1685 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1686 from going into config.h. Avoid single quotes in variable
1687 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1688 of bash they will end up literally in the resulting define.
1690 2008-01-21 13:22 millert
1692 * README.LDAP: mention --with-nsswitch=no
1694 2008-01-21 11:43 millert
1696 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1699 2008-01-21 11:07 millert
1701 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1702 if we can find it. Needed for the ldapssl_set_strength defines
1705 2008-01-21 10:02 millert
1707 * TODO, sudoers.ldap.pod: sync
1709 2008-01-21 10:01 millert
1711 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1712 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1715 2008-01-21 10:00 millert
1717 * Makefile.in: Use 78n line length when formatting cat pages.
1719 2008-01-21 09:50 millert
1721 * README.LDAP: Remove redundant info that is now in
1724 2008-01-20 16:18 millert
1726 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1727 Reorganize the first section a bit. Substitute the proper path
1730 2008-01-20 10:17 millert
1732 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1733 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1734 Move schema into EXAMPLES
1736 2008-01-20 10:15 millert
1738 * configure.in, configure: Substitute values for ldap.conf,
1739 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1741 2008-01-19 20:35 millert
1743 * configure, configure.in: substitute for sudoers.ldap.man
1745 2008-01-19 20:34 millert
1747 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1750 2008-01-19 20:25 millert
1752 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1753 some of the missing pieces. Still needs some reorganization and
1756 2008-01-19 15:06 millert
1758 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1759 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1760 Currently, much of the information is adapted from README.LDAP.
1762 2008-01-18 17:32 millert
1764 * pwutil.c: When copying gr_mem we must guarantee that the storage
1765 space for gr_mem is properly aligned. The simplest way to do
1766 this is to simply store gr_mem directly after struct group. This
1767 is not a problem for gr_passwd or gr_name as they are simple
1770 2008-01-18 16:47 millert
1772 * ldap.c: Fix a typo/thinko in one of the calls to
1773 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1775 2008-01-17 15:44 millert
1777 * config.h.in, configure, configure.in, ldap.c: include
1778 <mps/ldap_ssl.h> in ldap.c if available
1780 2008-01-16 18:20 millert
1782 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1785 2008-01-16 13:03 millert
1787 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1788 echo) to guarantee that any pending output is discarded
1790 2008-01-15 17:18 millert
1792 * sudoers: no longer need to specify SETENV when user has sudo ALL
1794 2008-01-15 09:40 millert
1796 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1797 group option, renaming old -g to -G Add set_runasgr() and
1798 set_runaspw() and use them
1800 2008-01-15 09:23 millert
1802 * sudo.h, sudo.c: Make set_runaspw static void
1804 2008-01-15 09:17 millert
1806 * testsudoers.c, visudo.c: g/c set_runaspw stub
1808 2008-01-15 07:28 millert
1810 * configure, configure.in: Don't add -llber twice.
1812 2008-01-14 06:40 millert
1816 2008-01-13 15:39 millert
1820 2008-01-13 14:57 millert
1822 * configure, configure.in: Fix check that determines whether -llber
1825 2008-01-13 14:22 millert
1827 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1828 netscape-based LDAP, use ldapssl_set_strength() to implement the
1829 checkpeer ldap.conf option.
1831 2008-01-13 09:49 millert
1833 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1834 to use the cred cache, which is what krb5_verify_user() does.
1835 Better cleanup on failure.
1837 2008-01-12 12:40 millert
1839 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1840 krb5_verify_user() does.
1842 2008-01-09 14:58 millert
1844 * gram.c: The U suffix on constants is an ANSI feature
1846 2008-01-09 12:08 millert
1848 * configure.in, configure: Add check for ber_set_option() in -llber
1850 2008-01-06 19:02 millert
1852 * README.LDAP: default if no nsswitch.conf is files only
1854 2008-01-06 17:28 millert
1856 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1858 2008-01-06 12:32 millert
1860 * README.LDAP: timelimit and bind_timelimit
1862 2008-01-06 08:54 millert
1866 2008-01-06 07:56 millert
1868 * ldap.c: Move ldap.secret reading into a separate function.
1870 2008-01-05 19:09 millert
1872 * check.c: user_runas -> runas_pw
1874 2008-01-05 18:59 millert
1878 2008-01-05 18:59 millert
1880 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1881 the password prompt. Based on a patch from Patrick Schoenfeld.
1883 2008-01-05 18:25 millert
1885 * ldap.c: Check strlcpy() return values.
1887 2008-01-05 18:12 millert
1889 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1891 2008-01-05 16:35 millert
1893 * README.LDAP: Make it clear that host and uri can take multiple
1894 parameters. URI is now supported for more than just openldap
1895 nsswitch.conf does't accept "compat"
1897 2008-01-05 16:27 millert
1899 * sudo.c: comment cleanup and update (c) year
1901 2008-01-05 16:25 millert
1903 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1904 parse.c to sudo_nss.c. This should make it possible to build an
1905 LDAP-only sudo binary.
1907 2008-01-05 13:27 millert
1909 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1910 multiple sudoers sources by passing in the previous return value
1911 to the next in the chain
1913 2008-01-05 13:26 millert
1915 * gram.y: Free up parser data structures in sudo_file_close().
1917 2008-01-05 08:13 millert
1919 * gram.c, parse.c: Free up parser data structures in
1922 2008-01-05 07:59 millert
1924 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1925 ldap_create() instead of deprecated ldap_init() Use
1926 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1928 2008-01-05 07:56 millert
1930 * config.h.in, configure, configure.in: Add check for
1931 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1933 2008-01-04 09:56 millert
1935 * configure.in, configure, config.h.in: add check for ldap_create
1937 2008-01-03 16:11 millert
1939 * config.h.in, configure, configure.in, ldap.c: Add
1940 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1941 dn using the mechanism appropriate for the LDAP SDK in use. Use
1942 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1943 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1946 2008-01-03 16:02 millert
1948 * lbuf.c: include unistd.h
1950 2008-01-03 11:05 millert
1952 * config.h.in, configure.in: fix typo in mtim_getnsec
1954 2008-01-02 15:29 millert
1956 * config.h.in, configure.in, configure: add check for st__tim in
1957 struct stat as used by SCO
1959 2008-01-02 11:05 millert
1961 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1963 2008-01-02 10:09 millert
1965 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1967 2008-01-01 19:04 millert
1969 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1970 ldap_str2dn() and ldap_rdn2str().
1972 2008-01-01 18:37 millert
1974 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1975 of the deprecated ldap_get_values()/ldap_value_free().
1977 2008-01-01 17:07 millert
1979 * TODO, ChangeLog: sync
1981 2008-01-01 17:06 millert
1983 * gettime.c, sudo.c: Remove some already fixed XXXs
1985 2008-01-01 17:03 millert
1987 * ldap.c: Same return value as non-existent sudoers if LDAP was
1990 2008-01-01 16:52 millert
1992 * sudo.pod: mention /etc/environment
1994 2008-01-01 16:42 millert
1996 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1999 2008-01-01 16:42 millert
2001 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
2004 2008-01-01 16:25 millert
2006 * ldap.c: When building up a query don't list groups in the aux
2007 group vector that are the same as the passwd file group. On most
2008 systems the first gid in the group vector is the same as the
2011 2008-01-01 14:01 millert
2013 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
2014 to disable user ldaprc and system defaults that could affect how
2017 2008-01-01 13:21 millert
2019 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
2020 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
2021 --with-nsswitch to allow users to specify nsswitch.conf path or
2022 disable it. If --with-nsswitch=no but --with-ldap, order is
2023 LDAP, then sudoers. Fix --with-ldap-conf-file and
2024 --with-ldap-secret-file
2026 2008-01-01 13:12 millert
2028 * parse.c: Honor def_ignore_local_sudoers
2030 2007-12-31 16:44 millert
2032 * ldap.c: no longer need to check def_ignore_local_sudoers here
2034 2007-12-31 16:36 millert
2036 * parse.c: Refactor group vector resetting into a function and also
2037 call it from display_cmnd. Stop after the first sucessful match
2038 in display_cmnd. Print a newline between each display_privs
2041 2007-12-31 16:23 millert
2043 * parse.c: fix double free introduced in rev 1.218
2045 2007-12-31 16:10 millert
2047 * ldap.c: belt and suspenders; zero out result after freeing it
2049 2007-12-31 15:04 millert
2051 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
2052 reading into a separate function, sudo_parseln(), which removes
2053 comments, leading/trailing whitespace and newlines. May want to
2054 rethink the use of sudo_parseln() for /etc/ldap.secret
2056 2007-12-31 14:26 millert
2058 * parse.c, sudo.c: Make the inability to read the sudoers file a
2059 non-fatal error if there are other sudoers sources available.
2060 sudoers_file_lookup now returns "not OK" if sudoers was not
2063 2007-12-31 14:24 millert
2065 * ldap.c: make it clear that the global options are from LDAP
2067 2007-12-31 14:13 millert
2069 * logging.c: allocate proper amount of space for error string
2071 2007-12-31 10:24 millert
2073 * sudo_nss.c, sudo_nss.h: actual sudo nss code
2075 2007-12-31 10:08 millert
2077 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2080 2007-12-31 07:54 millert
2082 * defaults.c, parse.c, testsudoers.c, visudo.c: move
2083 update_defaults() to parse.c
2085 2007-12-31 07:39 millert
2087 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2088 Use nsswitch to hide some sudoers vs. ldap implementation details
2089 and reduce the number of #ifdef LDAP TODO: fix display routines
2092 2007-12-28 11:20 millert
2094 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2095 First cut at nsswitch.conf support. Further reorganizaton and
2096 related changes are forthcoming.
2098 2007-12-21 16:53 millert
2100 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2101 and /etc/environment file. Still needs to be documented and
2102 should probably only applies to OSes that have it (AIX and Linux,
2105 2007-12-21 16:20 millert
2107 * ldap.c: include limits.h
2109 2007-12-20 10:02 millert
2111 * WHATSNEW: reword LDAP SASL
2113 2007-12-19 16:40 millert
2117 2007-12-19 16:39 millert
2119 * README.LDAP: Add an example sudoRole, clarify netscape vs.
2122 2007-12-19 14:42 millert
2124 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2126 2007-12-19 14:28 millert
2128 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2129 for ldaps support instead of trying to do it manually with
2130 ldap_init() + ldapssl_install_routines(). Use tls_cert and
2131 tls_key for cert7.db and key3.db respectively. Don't print
2132 debugging info for options that are not set. Add warning if
2133 start_tls specified when not supported.
2135 2007-12-19 14:25 millert
2137 * ldap.c: fix compilation on solaris
2139 2007-12-19 14:23 millert
2141 * Makefile.in: add missing .h and .c files for missing lib objs
2143 2007-12-18 09:54 millert
2145 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2147 2007-12-17 20:10 millert
2149 * ldap.c: fix compilation on Solaris
2151 2007-12-17 10:14 millert
2153 * configure, configure.in: fix typo
2155 2007-12-17 08:08 millert
2157 * README.LDAP: try to clear up which variables are for OpenLDAP and
2158 which are for netscape-derived SDKs
2160 2007-12-17 07:31 millert
2162 * config.h.in, configure, configure.in, ldap.c: Add support for
2163 "ssl on" in both netscape and openldap flavors. Only the
2164 OpenLDAP flavor has been tested.
2166 2007-12-17 07:28 millert
2168 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2169 log_error() instead of calling sudo_ldap_close() directly.
2170 ldap_conn can now be static to sudo.c
2172 2007-12-16 20:02 millert
2174 * sudo.c: ld -> ldap_conn
2176 2007-12-16 14:42 millert
2178 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2180 2007-12-16 14:08 millert
2182 * ldap.c: Distinguish between LDAP conf settings that are
2183 connection-specific (which take an ld pointer) and those that are
2184 default settings (which do not).
2186 2007-12-14 16:46 millert
2188 * ldap.c: Improved warnings on error.
2190 2007-12-14 15:59 millert
2192 * ldap.c: Make ldap config table driven and set the config *after*
2193 we open the connection.
2195 2007-12-13 16:41 millert
2197 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2199 2007-12-13 09:13 millert
2201 * configure, configure.in: some operating systems need to link with
2202 -lkrb5support when using krb5
2204 2007-12-10 17:12 millert
2206 * WHATSNEW: minor update
2208 2007-12-10 10:56 millert
2210 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2212 2007-12-07 19:17 millert
2214 * TODO, ChangeLog: sync
2216 2007-12-07 19:09 millert
2218 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2221 2007-12-03 11:36 millert
2223 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2224 can now take an optional command.
2226 2007-12-02 12:13 millert
2228 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2229 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2230 that will cause the prompt to be overridden in all cases. This
2231 flag is also set when the user specifies the -p flag.
2233 2007-12-01 19:51 millert
2235 * sudo.c: Move setting of login class until after sudoers has been
2236 parsed. Set NewArgv[0] for -i after runas_pw has been set.
2238 2007-12-01 19:34 millert
2240 * configure, configure.in: Move the dgettext check.
2242 2007-12-01 11:22 millert
2244 * config.h.in, configure, configure.in, auth/pam.c: Add basic
2245 support for looking up the string "Password: " in the PAM
2246 localized text db. This allows us to determine whether the PAM
2247 prompt is the default "Password: " one even if it has been
2250 TODO: concatenate non-std PAM prompts and user-specified sudo
2253 2007-11-27 18:40 millert
2255 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2256 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2257 home-grown attempt that was insufficient.
2259 2007-11-27 12:13 millert
2261 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2264 2007-11-25 19:26 millert
2266 * set_perms.c: Don't assume runas_pw is set; it may not be in the
2269 2007-11-25 08:07 millert
2271 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2272 restore group vector for PERM_ROOT if we previously changed it.
2273 Stash the runas group vector so we don't have to call initgroups
2274 more than once. Also add no-op check to check_perms.
2276 2007-11-21 15:11 millert
2278 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2279 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2280 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2281 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2282 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2283 visudo.cat, visudo.man.in: Add support for runas groups. This
2284 allows the user to run a command with a different effective
2285 group. If the -g option is specified without -u the command will
2286 be run as the current user (only the group will change). the -g
2287 and -u options may be used together. TODO: implement runas group
2288 for ldap improve runas group documentation add
2291 2007-11-21 15:02 millert
2293 * configure, configure.in: fix setting of mandir
2295 2007-11-21 14:26 millert
2297 * sudo.pod, sudoers.pod: document that ALL implies SETENV
2299 2007-11-21 13:50 millert
2301 * ldap.c: s/setenv_ok/setenv_implied/g
2303 2007-11-21 13:44 millert
2305 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2307 2007-11-21 13:26 millert
2309 * ldap.c: use strcmp, not strcasecmp when comparing ALL
2311 2007-11-21 11:41 millert
2313 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2314 file-based sudoers this does affect all the commands in the
2317 2007-11-21 11:05 millert
2319 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2320 SETENV tag but, unlike an explicit tag, it is not passed on to
2321 other commands in the list.
2323 2007-11-21 11:02 millert
2325 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2326 Also use sudo_getpwuid() instead of getpwuid().
2328 2007-11-15 11:16 millert
2330 * sudoers: Expand on the dangers of not using visudo to edit
2333 2007-11-08 07:24 millert
2335 * parse.c: Don't quote *?[]! on output since the lexer does not
2336 strip off the backslash when reading those in.
2338 2007-11-07 13:16 millert
2340 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2341 compatibility issues.
2343 2007-11-04 08:33 millert
2345 * logging.c: Refactor log line generation in to new_logline().
2347 2007-10-25 09:23 millert
2349 * TROUBLESHOOTING: fix typo
2351 2007-10-24 12:41 millert
2353 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2354 match.c: Add configure check for struct in6_addr instead of
2355 relying on AF_INET6 since some systems define AF_INET6 but do not
2356 include IPv6 support.
2358 2007-10-21 09:29 millert
2360 * configure, configure.in: Fix block to add -lutil for FreeBSD and
2361 NetBSD when logincap is in use.
2363 2007-10-19 22:28 millert
2365 * configure, configure.in: POSIX states that struct timespec be
2366 declared in time.h so check there regardless of the value of
2369 2007-10-17 11:37 millert
2371 * tgetpass.c: Instead of defining a macro to call the appropriate
2372 method for turning on/off echo, just define tc[gs]etattr() and
2373 the related defines that use the correct terminal ioctls if
2374 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2377 2007-10-08 20:18 millert
2379 * Makefile.in: g/c @ALLOCA@
2381 2007-10-08 20:07 millert
2385 2007-10-08 20:04 millert
2387 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2388 --disable-pam-session configure option to disable calling
2389 pam_{open,close}_session. May work around bugs in some PAM
2392 2007-10-08 12:00 millert
2394 * tgetpass.c: quiet gcc warnings
2396 2007-10-08 08:41 millert
2398 * tgetpass.c: Avoid printing the prompt if we are already
2399 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2400 In this case, the call to tcsetattr() will cause SIGTTOU to be
2403 2007-09-15 16:07 millert
2405 * def_data.c, def_data.h, def_data.in: Reorder things such that the
2406 definition of env_reset come right before the env variable lists.
2408 2007-09-15 07:50 millert
2410 * parse.h: Shrink type and seqno in struct alias from int to
2413 2007-09-15 07:24 millert
2415 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2416 aliases for loop detection. If we find an alias with the seqno
2417 already set to the current (global) value we know we've visited
2418 it before so ignore it.
2420 2007-09-13 19:05 millert
2422 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2423 add user_ttypath which holds the full path to the tty or is NULL
2424 if no tty was present.
2426 2007-09-13 18:42 millert
2428 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2429 lower that results in a segv.
2431 2007-09-11 15:43 millert
2435 2007-09-11 15:42 millert
2437 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2438 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2440 2007-09-10 17:33 millert
2442 * alloc.c: remove some useless casts
2444 2007-09-10 17:32 millert
2446 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2447 inttypes.h predates the final C99 spec and the standard specifies
2448 that it shall include stdint.h anyway
2450 2007-09-06 12:39 millert
2452 * Makefile.in, alloca.c, configure.in: Since we ship with a
2453 pre-generated parser there is no need to ship a bogus alloca
2456 2007-09-06 12:22 millert
2460 2007-09-06 12:19 millert
2462 * configure.in: remove initial setting of CHECKSIA, we require that
2463 it be unset if not used
2465 2007-09-06 11:55 millert
2467 * Makefile.in: add list.c to SRCS
2469 2007-09-06 07:18 millert
2473 2007-09-06 07:17 millert
2475 * configure.in: only do SIA checks on Digital Unix
2477 2007-09-05 18:50 millert
2479 * sudoers.cat, sudoers.man.in: regen
2481 2007-09-05 18:48 millert
2483 * ChangeLog, TODO: sync
2485 2007-09-05 18:39 millert
2487 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2488 needed for modern kerb5.
2490 2007-09-05 18:16 millert
2494 2007-09-05 18:16 millert
2496 * configure.in, aclocal.m4: New method for setting the default
2497 authentication type and avoiding conflicts in auth types.
2499 2007-09-05 14:45 millert
2501 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2502 an associated runaslist so no need to keep track of the most
2503 recent non-NULL one.
2505 2007-09-04 18:51 millert
2507 * ldap.c: back out partial ldaps support mistakenly committed
2509 2007-09-04 10:57 millert
2511 * ldap.c: Add support for unix groups and netgroups in sudoRunas
2513 2007-09-03 16:28 millert
2515 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2518 2007-09-02 17:05 millert
2522 2007-09-02 17:05 millert
2524 * INSTALL: update --passprompt escape info
2526 2007-09-02 17:03 millert
2528 * configure.in: remove now-bogus comment and update copyright date
2530 2007-09-02 16:35 millert
2532 * configure.in: Fix up use of with_passwd
2534 2007-09-02 16:25 millert
2536 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2537 Update to autoconf-2.61 andf libtool-1.5.24
2539 2007-09-02 16:17 millert
2541 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2544 2007-09-01 17:39 millert
2548 2007-09-01 17:39 millert
2550 * gram.y: move tags and runaslist propagation to be earlier
2552 2007-09-01 09:34 millert
2554 * visudo.c: If -f flag given use the permissions of the original
2557 2007-09-01 08:45 millert
2559 * gram.y: prevent a double free() when re-initing the parser
2561 2007-08-31 19:30 millert
2565 2007-08-31 19:30 millert
2567 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2568 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2569 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2570 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2571 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2572 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2573 Remove support for compilers that don't support void *
2575 2007-08-31 19:14 millert
2579 2007-08-31 19:13 millert
2581 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2582 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2583 manipulation macros to list.h and create C versions of the more
2584 complex ones in list.c. The names have been down-cased so they
2585 appear more like normal functions.
2587 2007-08-31 17:21 millert
2589 * Makefile.in: Fix cmp command when regenerating parser. Make
2590 gram.o the first dependency for all programs so gram.h will be
2591 generated before anything that needs it.
2593 2007-08-31 13:56 millert
2595 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2598 2007-08-30 21:21 millert
2600 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2601 permission and short-circuit on the first non-UNSPEC hit we get
2602 for the command. This means that instead of cycling through the
2603 all the parsed sudoers entries we start at the end and work
2604 backwards and quit after the first positive or negative match.
2606 2007-08-30 21:13 millert
2610 2007-08-30 21:12 millert
2612 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2613 Change list head macros to take a pointer, not a struct.
2615 2007-08-30 20:46 millert
2619 2007-08-30 20:46 millert
2621 * gram.y: Propagate the runasspec from one command to the next in a
2624 2007-08-30 16:15 millert
2626 * match.c: Replace has_meta() with a macro that calls strpbrk().
2628 2007-08-30 16:04 millert
2632 2007-08-30 13:26 millert
2634 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2635 testsudoers.c, visudo.c: Use a list head struct when storing the
2636 semi-circular lists and convert to tail queues in the process.
2637 This will allow us to reverse foreach loops more easily and it
2638 makes it clearer which functions expect a list as opposed to a
2641 Add macros for manipulating lists. Some of these should become
2644 When freeing up a list, just pop off the last item in the queue
2645 instead of going from head to tail. This is simpler since we
2646 don't have to stash a pointer to the next member, we always just
2647 use the last one in the queue until the queue is empty.
2649 Rename match functions that take a list to have list in the name.
2650 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2652 2007-08-30 13:12 millert
2654 * parse.c: Fix pasto, append "!" not negated (which is an int) for
2657 2007-08-30 12:45 millert
2659 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2660 dependency is enough. Only move y.tab.h to gram.h if it is
2661 different; avoids needless rebuilding.
2663 2007-08-27 15:51 millert
2665 * sudoers.pod: Defaults lines may be associated with lists of
2666 users, hosts, commands and runas users, not just single entries.
2668 2007-08-26 17:42 millert
2670 * Makefile.in: Revert the "cmp" portion of the last diff, it
2673 2007-08-26 17:10 millert
2675 * Makefile.in: Remove *.lo for clean: When generating the parser,
2676 only move the generated files into place if they differ from the
2679 2007-08-24 22:47 millert
2681 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2682 (readable) one and add an extra check when it matches to make
2683 sure we have a valid address.
2685 2007-08-24 22:36 millert
2687 * match.c: Fix thinko introduced when merging IPV6 support.
2689 2007-08-24 14:23 millert
2691 * HISTORY, LICENSE: regen
2693 2007-08-24 14:23 millert
2695 * license.pod: add 2007
2697 2007-08-24 14:19 millert
2699 * UPGRADE: mention #uid vs. comment pitfall
2701 2007-08-24 09:50 millert
2703 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2704 problem with the latest autoconf. From Stepan Kasal.
2706 2007-08-23 20:28 millert
2708 * parse.h: Back out he XOR swap trick, it is slower than a temp
2709 variable on modern CPUs.
2711 2007-08-23 20:14 millert
2715 2007-08-23 20:14 millert
2717 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2718 and use the XOR swap trick to swap the prev pointers during
2721 2007-08-23 15:31 millert
2723 * parse.h: remove useless statement
2725 2007-08-23 07:47 millert
2727 * toke.c, toke.l: Refactor #include parsing into a separate
2728 function and return unparsed chars (such as newline or comment)
2731 2007-08-22 18:56 millert
2733 * WHATSNEW: mention better uid support
2735 2007-08-22 18:55 millert
2737 * sudoers.pod: Users may now consist of a uid.
2739 2007-08-22 18:39 millert
2741 * gram.c, gram.h, toke.c: regen
2743 2007-08-22 18:32 millert
2745 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2746 characters that would require quoting in sudoers.
2748 2007-08-22 18:31 millert
2750 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2751 characters which should be quoted with a backslash when
2754 2007-08-22 18:28 millert
2756 * toke.l: Require that the first character after a comment not be a
2757 digit or a dash. This allows us to remove the GOTRUNAS state and
2758 treat uid/gids similar to other words. It also means that we can
2759 now specify uids in User_Lists and a User_Spec may now contain a
2762 2007-08-22 18:23 millert
2764 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2765 make the runas portion of the grammar more natural.
2767 2007-08-22 06:35 millert
2769 * Makefile.in, README, BUGS: The BUGS file is history
2771 2007-08-21 09:19 millert
2773 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2774 character after the pound sign isn't a digit or a dash.
2776 2007-08-20 20:43 millert
2778 * WHATSNEW: Glob support was back-ported to 1.6.9
2780 2007-08-20 19:59 millert
2782 * Makefile.in: remove sudo_usage.h in distclean
2784 2007-08-20 19:24 millert
2786 * parse.c: If a Defaults value contains a blank, double-quote the
2789 2007-08-20 19:19 millert
2791 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2792 that span multiple lines using the line continuation char.
2793 Previously, the entire thing, including the continuation char,
2794 newline, and spaces was stored as-is.
2796 2007-08-20 10:46 millert
2798 * sudo.c: Be consistent when using single quotes and backticks.
2800 2007-08-19 16:48 millert
2802 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2803 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2804 dynamically allocated strings and word-wrapped output. Currently
2805 used for sudo's usage() and sudo -l output. Sudo usage strings
2806 are now in sudo_usage.h which is generated at configure time.
2808 2007-08-18 08:22 millert
2810 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2811 actual tty width instead of assuming 80.
2813 2007-08-17 18:32 millert
2815 * history.pod: some more info
2817 2007-08-17 17:28 millert
2819 * history.pod: Mentioned Chris Jepeway's parser and also the new
2820 one that is in sudo 1.7.
2822 2007-08-16 09:38 millert
2824 * sudo.pod, visudo.pod: For the options list, add flag args where
2825 appropriate and increase the indent level so there is room for
2828 2007-08-15 13:49 millert
2830 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2831 some bogosity in the line wrapping.
2833 2007-08-15 11:21 millert
2835 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2836 visudo.man.in, visudo.cat: regen
2838 2007-08-15 11:20 millert
2840 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2841 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2842 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2843 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2844 is a versino of systrace that uses a lookaside buffer (or we have
2845 a better mechanism to use).
2847 2007-08-15 09:22 millert
2849 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2850 instead of gethostbyname() if it is available
2852 2007-08-14 15:27 millert
2854 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2857 2007-08-14 11:19 millert
2859 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2861 2007-08-14 10:04 millert
2863 * sudo.c: If we can open sudoers but fail to read the first byte,
2864 close the file stream before trying again.
2866 2007-08-13 12:34 millert
2868 * gram.c, toke.c: regen
2870 2007-08-13 12:29 millert
2872 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2873 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2875 2007-08-13 12:23 millert
2877 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2880 2007-08-12 18:55 millert
2882 * configure, configure.in: fix sudo_noexec extension which got
2883 broken in the libtool update
2885 2007-08-10 10:41 millert
2887 * Makefile.in: explicitly specify -Tascii to nroff
2889 2007-08-08 16:07 millert
2891 * logging.c: remove an ANSI-ism that crept in
2893 2007-08-06 20:37 millert
2895 * sudo.pod: Adjust list indents Prevent -- from being turned into
2896 an em dash Use a list for the environment instead of a literal
2899 2007-08-06 20:36 millert
2901 * visudo.pod: Use a list for the environment instead of an indented
2904 2007-08-06 20:33 millert
2906 * sudoers.pod: Adjust list indentation
2908 2007-08-06 20:31 millert
2910 * license.pod: add =head3
2912 2007-08-06 10:24 millert
2914 * sudo.pod: mention that when specifying a uid for the -u option
2915 the shell may require that the # be escaped
2917 2007-08-01 22:08 millert
2919 * match.c: Fix off by one in group matching.
2921 2007-07-31 14:04 millert
2923 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2926 2007-07-30 10:45 millert
2928 * configure, configure.in: Add missing define of
2929 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2931 2007-07-30 09:29 millert
2933 * aclocal.m4, configure.in, configure: Fix link tests such that new
2934 gcc doesn't optimize away the test.
2936 2007-07-29 19:21 millert
2938 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2940 2007-07-29 19:09 millert
2942 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2945 2007-07-29 18:32 millert
2947 * env.c: Add back allocation of the env struct in rebuild_env but
2948 save a copy of the old pointer and free it before returning.
2950 2007-07-29 16:09 millert
2952 * env.c: Don't init the private environment in rebuild_env() since
2953 it may have already been done implicitly
2954 sudo_setenv/sudo_unsetenv.
2956 Multiply length by sizeof(char *) in memcpy/memmove when copying
2957 the environment so we copy the full thing.
2959 Add missing set of parens so we deref the right pointer in
2960 sudo_unsetenv when searching for a matching variable.
2962 2007-07-26 16:35 millert
2964 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2967 2007-07-26 10:04 millert
2969 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2971 2007-07-26 07:28 millert
2973 * sudoers.pod: Sort sudoers options; based on a diff from Igor
2976 2007-07-25 16:19 millert
2978 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2979 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2980 The Makefile rules for the .man.in file will add @mansectsu@ and
2981 @mansectform@ back in after pod2man is done anyway.
2983 2007-07-22 19:09 millert
2985 * LICENSE, Makefile.in, license.pod: Move license info to pod
2988 2007-07-22 18:43 millert
2990 * configure, configure.in, sudoers.pod: Substitute value of
2991 path_info into sudoers man page.
2993 2007-07-22 16:40 millert
2995 * WHATSNEW: remove features that were back-ported to 1.6.9
2997 2007-07-22 15:20 millert
2999 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
3000 usage. From Igor Sobrado.
3002 2007-07-22 15:19 millert
3004 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
3005 ldap_sasl_interactive_bind_s() but don't have
3006 gss_krb5_ccache_name().
3008 2007-07-22 08:23 millert
3010 * ChangeLog: rebuild without branch info
3012 2007-07-22 08:23 millert
3014 * Makefile.in: Add ChangeLog target
3016 2007-07-22 08:14 millert
3018 * auth/pam.c: Run cleanup code if the user hits ^C at the password
3021 2007-07-22 08:13 millert
3023 * auth/pam.c: Some versions of pam_lastlog have a bug that will
3024 cause a crash if PAM_TTY is not set so if there is no tty, set
3025 PAM_TTY to the empty string.
3027 2007-07-20 09:32 millert
3029 * Makefile.in: ChageLog not Changelog
3031 2007-07-20 09:31 millert
3035 2007-07-20 09:29 millert
3037 * Makefile.in: CHANGE -> Changelog
3039 2007-07-19 20:23 millert
3043 2007-07-19 19:53 millert
3045 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
3046 for gss_krb5_ccache_name() and the gssapi headers.
3048 2007-07-18 12:57 millert
3050 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
3051 return environment pointer, they set environ directly.
3053 No longer need to pass around an envp pointer since we just
3054 operate on environ now.
3056 Add dosync argument to insert_env() that indicates whether it
3057 should reset environ when realloc()ing env.envp.
3059 Use an initial size of 128 for the environment.
3061 2007-07-18 12:41 millert
3063 * env.c: Split sudo_setenv() into an external version and a version
3064 only for use by rebuild_env().
3066 2007-07-16 19:40 millert
3068 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
3069 setting KRB5CCNAME. Also use sudo_unsetenv() in the
3070 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
3071 original environment. TODO: configure setup for
3072 gss_krb5_ccache_name()
3074 2007-07-16 18:44 millert
3076 * README.LDAP: add krb5_ccname
3078 2007-07-16 18:44 millert
3080 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3082 2007-07-16 18:39 millert
3084 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3085 syncing code into sync_env().
3087 2007-07-16 07:27 millert
3089 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3092 2007-07-15 15:44 millert
3094 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3095 If specified, it will override the default value of KRB5CCNAME
3096 in the environment for the duration of the call to
3097 ldap_sasl_interactive_bind_s().
3099 2007-07-15 15:41 millert
3101 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3102 most format_env() + insert_env() combinations. insert_env() no
3103 longer takes a struct environment *
3105 2007-07-15 12:47 millert
3107 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3109 2007-07-15 09:23 millert
3111 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3112 support for SASL auth when connecting to an LDAP server. Adapted
3113 from a diff by Tom McLaughlin.
3115 2007-07-14 16:32 millert
3117 * configure, configure.in: Only enable AIX or BSD auth if no other
3118 exclusive auth method has been chosen. Allows people to e.g.,
3119 use PAM on AIX without adding --without-aixauth. A better
3120 solution is needed to deal with default authentication since if a
3121 non-exclusive method is chosen we will still get an error.
3123 2007-07-11 11:23 millert
3125 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3126 history.pod (which is also used for web pages)
3128 2007-07-09 19:40 millert
3130 * sudo.man.in, sudoers.man.in: regen
3132 2007-07-09 19:25 millert
3134 * sudo.pod: Better explanation of environment handling in the sudo
3137 2007-07-09 15:13 millert
3139 * env.c, sudo.c: Defer setting user-specified env vars until after
3142 2007-07-09 13:25 millert
3144 * env.c: honor def_default_path for PATH set on the command line
3146 2007-07-09 13:22 millert
3148 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3149 environment variables on the command line as long as they are
3150 allowed by env_keep and env_check. Ie: apply the same
3151 restrictions as normal environment variables. TODO: deal with
3154 2007-07-08 14:44 millert
3156 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3157 original envp to sudo_edit(). Don't allow -E or env var setting
3158 in sudoedit mode. More accurate usage() when called as sudoedit.
3160 2007-07-08 14:41 millert
3162 * ldap.c: warn -> warning
3164 2007-07-08 14:11 millert
3166 * sudo.pod: add -c option to sudoedit synopsis
3168 2007-07-08 10:27 millert
3170 * TODO: udpate to reality
3172 2007-07-08 09:43 millert
3174 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3175 the return value from {user,host,runas,cmnd}_matches(). Rename
3176 *matches variables -> *match. Purely cosmetic.
3178 2007-07-08 09:30 millert
3180 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3181 No change in behavior.
3183 2007-07-08 09:17 millert
3185 * sudoers: add SETENV tag
3187 2007-07-06 15:51 millert
3189 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3190 even if user didn't match since Defaults options may still apply.
3192 2007-07-06 14:51 millert
3194 * check.c, sudo.c: Do not update timestamp if user not validated by
3197 2007-07-06 10:14 millert
3199 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3200 and restore to the user's original in PERM_ROOT
3202 2007-07-06 10:04 millert
3204 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3205 now no different than PERM_ROOT so remove PERM_FULL_ROOT
3207 2007-07-06 09:49 millert
3209 * check.c: don't check timestamp mtime if we are just going to
3212 2007-07-06 09:33 millert
3214 * sudoers.pod: Move sudoers defaults parameters into their own
3217 2007-07-05 20:21 millert
3219 * testsudoers.c: Reduce a level of indent by a few placed continue
3222 2007-07-05 20:20 millert
3224 * parse.c: Make matching but negated commands/hosts/runas entries
3225 override a previous match as expected. Also reduce some levels
3226 of indent by a few placed continue statements.
3228 2007-07-05 16:34 millert
3230 * parse.c: Print default runas in "sudo -l" if sudoers don't
3233 2007-07-05 15:46 millert
3235 * match.c: Less hacky way of testing whether the domain was set.
3237 2007-07-04 15:50 millert
3239 * INSTALL: Mention pam-devel and openldap-devel for Linux
3241 2007-07-03 19:38 millert
3243 * README.LDAP: or vs. are
3245 2007-07-01 16:55 millert
3247 * sudo.c: fix typo in Solaris project support
3249 2007-07-01 09:40 millert
3253 2007-07-01 09:07 millert
3255 * sudo.c: Make -- on the command line match the manual page. The
3256 implied shell case has been simplified as a result.
3258 2007-06-28 10:44 millert
3260 * sudoers2ldif: add simplistic support for sudoRunas; note that if
3261 a sudoers entry contains multiple Runas users, all will apply to
3264 2007-06-28 10:42 millert
3266 * sudoers2ldif: honor SETENV and NOSETENV tags
3268 2007-06-24 09:25 millert
3270 * mon_systrace.c: Redo setting of user_args. We now build up a
3271 private copy of argv first and then replace the NULs with spaces.
3273 2007-06-24 09:19 millert
3275 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3278 2007-06-24 07:39 millert
3280 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3282 2007-06-23 20:00 millert
3284 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3285 visudo.man.in: regen
3287 2007-06-23 19:58 millert
3289 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3290 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3291 sudoers.pod, toke.c, toke.l: Add support for setting environment
3292 variables on the command line. This is only allowed if the
3293 setenv sudoers options is enabled or if the command is prefixed
3294 with the SETENV tag.
3296 2007-06-23 19:57 millert
3298 * README.LDAP: replace Aaron's email address with the sudo-workers
3301 2007-06-23 19:55 millert
3305 2007-06-21 20:35 millert
3307 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3308 schema out into separate files.
3310 2007-06-21 18:28 millert
3312 * auth/aix_auth.c: free message if set by authenticate()
3314 2007-06-21 13:03 millert
3316 * match.c: deal with NULL gr_mem
3318 2007-06-20 15:04 millert
3320 * config.h.in: regen
3322 2007-06-20 15:04 millert
3324 * configure.in: add template for HAVE_PROJECT_H
3326 2007-06-20 07:06 millert
3328 * closefrom.c: include fcntl.h
3330 2007-06-19 19:37 millert
3332 * INSTALL: mention --with-project
3334 2007-06-19 18:24 millert
3336 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3337 support. From Michael Brantley.
3339 2007-06-19 17:27 millert
3341 * sudoers.pod: fix typo
3343 2007-06-19 17:22 millert
3347 2007-06-19 17:21 millert
3349 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3351 2007-06-19 17:00 millert
3353 * memrchr.c: Remove dependecy on NULL
3355 2007-06-19 15:37 millert
3359 2007-06-19 15:37 millert
3361 * aclocal.m4, configure.in: Can't use the regular autoconf
3362 fnmatch() check since we need FNM_CASEFOLD so go back to our
3365 2007-06-19 12:52 millert
3367 * env.c: Fix preserving of variables in env_keep.
3369 2007-06-19 07:10 millert
3371 * env.c: add XAUTHORIZATION
3373 2007-06-18 20:41 millert
3375 * UPGRADE: expand upon env resetting and mention that it began in
3378 2007-06-18 20:33 millert
3380 * sudoers.pod: Update descriptions of env_keep and env_check to
3381 match current reality.
3383 2007-06-18 17:33 millert
3385 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3386 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3387 intial_keepenv_table.
3389 2007-06-18 17:23 millert
3391 * env.c, logging.c: Treat USERNAME environemnt variable like
3394 2007-06-18 17:21 millert
3396 * env.c: Don't need to populate keepenv table with the contents of
3399 2007-06-18 08:57 millert
3401 * sudo.c: Don't force sudo into the C locale.
3403 2007-06-18 08:56 millert
3405 * env.c: Make env_check apply when env_reset it true. Environment
3406 variables are passed through unless they contain '/' or '%'.
3407 There is no need to have a variable in both env_check and
3410 2007-06-16 07:31 millert
3412 * visudo.c: Remove an duplicate lock_file() call and add a comment.
3414 2007-06-15 21:16 millert
3416 * UPGRADE: Add sudo 1.6.9 upgrade note.
3418 2007-06-14 12:23 millert
3420 * interfaces.c: Solaris will return EINVAL if the buffer used in
3421 SIOCGIFCONF is too small. From Klaus Wagner.
3423 2007-06-14 12:03 millert
3425 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3426 logging.c, sudo.h: Redo the long syslog line splitting based on a
3427 patch from Eygene Ryabinkin. Include memrchr() for systems
3430 2007-06-14 07:09 millert
3432 * configure.in: Since we need to be able to convert timespec to
3433 timeval for utimes() the last 3 digits in the tv_nsec are not
3434 significant. This makes the sudoedit file date comparison work
3437 2007-06-13 13:41 millert
3439 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3440 deal with adding things to AUTH_OBJS. This deals with exclusive
3441 authentication methods in a simple way.
3443 2007-06-12 13:08 millert
3445 * LICENSE: mkstemp.c is BSD code too.
3447 2007-06-12 09:21 millert
3449 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3451 2007-06-11 18:27 millert
3453 * sudo.c: cleanenv() is no more.
3455 2007-06-10 18:37 millert
3457 * ChangeLog: Display branch info in Changelog
3459 2007-06-10 18:18 millert
3461 * utimes.c: Include config.h early so we have it for
3464 2007-06-10 18:00 millert
3466 * ChangeLog: Fix Changelog generation and update.
3468 2007-06-09 07:26 millert
3470 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3472 Move old-style fd closing into closefrom_fallback() and call that
3473 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3475 2007-06-09 07:24 millert
3477 * config.h.in, configure.in, auth/kerb5.c: o use
3478 krb5_verify_user() if available instead of doing it by hand
3479 o use krb5_init_secure_context() if we have it
3480 o pass an encryption type of 0 to krb5_kt_read_service_key()
3482 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3484 2007-06-09 07:20 millert
3486 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3489 2007-06-09 07:17 millert
3491 * configure.in: Fix closefrom() substitution in the Makefile
3493 2007-06-09 07:15 millert
3495 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3497 2007-06-07 07:52 millert
3499 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3501 2007-06-07 07:22 millert
3503 * auth/kerb5.c: If we cannot get a valid service key using the
3504 default keytab it is a fatal error. Fixes a bug where sudo could
3505 be tricked into allowing access when it should not by a fake KDC.
3506 From Thor Lancelot Simon.
3508 2007-05-12 08:56 millert
3510 * aclocal.m4, configure, configure.in: Update long long checks to
3511 use AC_CHECK_TYPES and to cache values.
3513 2007-05-12 08:07 millert
3515 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3516 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3517 that assumes replacing with GNU fnmatch.
3519 2007-05-11 17:05 millert
3521 * configure, configure.in: Add closefrom() to LIB_OBJS not
3522 SUDO_OBJS if it is missing since we need it for visudo now too.
3524 2007-04-24 14:44 millert
3526 * sudoers.pod: Attempt to clarify the bit talking about network
3527 numbers w/o netmasks.
3529 2007-04-24 14:25 millert
3531 * sudo.pod: Clarify timestamp dir ownership sentence.
3533 2007-04-20 12:40 millert
3535 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3536 __LIBPAM_VERSION. From Dmitry V. Levin.
3538 2007-04-16 12:13 millert
3540 * sudo.c: -i is also one of the mutually exclusive options to list
3541 it in the warning message. Noted by Chris Pepper.
3543 2007-04-12 11:18 millert
3545 * visudo.pod: The sudoers variable is env_editor, not enveditor.
3546 From Jean-Francois Saucier.
3548 2007-03-29 13:30 millert
3550 * redblack.c: I tracked down the original author so credit him and
3551 include his license info.
3553 2007-02-06 13:25 millert
3555 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3556 sudoers.pod: Fix typos; from Jason McIntyre.
3558 2007-02-06 13:23 millert
3560 * logging.c: Restore signal mask before calling reapchild(). Fixes
3561 a possible race condition that could prevent sudo from properly
3562 waiting for the child.
3564 2007-01-31 10:02 millert
3566 * pwutil.c: Don't declare pw_free() if we are not going to use it.
3568 2007-01-31 10:00 millert
3570 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3571 and LDR_PRELOAD64. The 64-bit version is not currently
3572 supported. Remove zero_env() prototype as it no longer exists.
3574 2006-12-11 13:21 millert
3576 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3579 2006-09-29 10:53 millert
3581 * auth/pam.c: If the user enters ^C at the password prompt, abort
3582 instead of trying to authenticate with an empty password (which
3583 causes an annoying delay).
3585 2006-08-17 11:26 millert
3587 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3588 F_CLOSEM support to closefrom(); adapted from a diff by Darren
3591 2006-08-17 11:25 millert
3593 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3596 2006-08-04 11:34 millert
3598 * config.sub, config.guess: Update to latest versions from
3599 cvs.savannah.gnu.org
3601 2006-07-31 13:51 millert
3603 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3604 sudo_end{pw,grp}ent() so we can close the passwd/group files
3607 2006-07-31 13:50 millert
3609 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3610 flavor of set_perms() for systems without setreuid() or
3611 setresuid() that have a working seteuid(). Tested on Darwin.
3613 2006-07-30 15:56 millert
3615 * mon_systrace.c: systrace_read() returns ssize_t
3617 2006-07-30 15:53 millert
3619 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3622 2006-07-28 13:12 millert
3624 * HISTORY: Fix typo; Matt Ackeret
3626 2006-07-17 08:25 millert
3628 * sudo.c: Print sudoers path in -V mode for root.
3630 2006-06-15 14:44 millert
3632 * ldap.c: Do a sub tree search instead of a base search (one level
3633 in the tree only) for sudo right objects. This allows system
3634 administrators to categorize the rights in a tree to make them
3637 2005-12-28 13:52 millert
3639 * sudo.pod: fix typo
3641 2005-12-04 12:16 millert
3643 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3644 timelimit and bind_timelimit support; adapted from gentoo.
3646 2005-11-23 18:57 millert
3648 * ldap.c: Support comments that start in the middle of a line
3650 2005-11-23 18:56 millert
3652 * configure.in, configure: Define LDAP_DEPRECATED until we start
3653 using ldap_get_values_len()
3655 2005-11-18 09:55 millert
3657 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3659 2005-11-17 20:39 millert
3661 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3662 takes an int as an arg so it can be used as a signal handler too.
3664 2005-11-17 20:38 millert
3666 * sudo.c: Make a copy of the shell field in the passwd struct for
3667 NewArgv to avoid a use after free situation after sudo_endpwent()
3670 2005-11-16 20:36 millert
3672 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3673 mkstemp() for those poor souls without it.
3675 2005-11-15 09:25 millert
3677 * env.c: Add PERL5DB to list of environment variables to remove.
3679 2005-11-13 15:49 millert
3681 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3682 function twice with a state cookie use separate check/log
3685 Check more ioctl() calls for failure.
3687 systrace_{read,write} now return the number of bytes read/written
3690 2005-11-13 14:51 millert
3692 * env.c: Add more environment variables to remove; from gentoo
3693 linux Add some comments about what bad env variables go to what
3696 2005-11-11 17:23 millert
3698 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3699 the exec since they free up our cached copy of the passwd
3700 structs, including sudo_user and sudo_runas. Fixes a
3703 2005-11-11 17:19 millert
3705 * visudo.c: Close all fd's before executing editor.
3707 2005-11-11 17:17 millert
3709 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3712 2005-11-11 11:22 millert
3714 * check.c: Fix fd leak when lecture file option is enabled. From
3717 2005-11-07 11:02 millert
3719 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3720 environment variables to remove. From Charles Morris
3722 2005-11-01 13:24 millert
3724 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3726 2005-10-27 20:35 millert
3728 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3730 2005-08-14 20:32 millert
3732 * sudoers.pod: Fix typo; Toby Peterson
3734 2005-08-02 09:57 millert
3736 * tsgetgrpw.c: Make return buffers static so they don't get
3739 2005-07-27 21:14 millert
3741 * auth/securid5.c: Fix securid5 authentication, was not checking
3742 for ACM_OK. Also add default cases for the two switch()es.
3743 Problem noted by ccon at worldbank
3745 2005-06-26 20:10 millert
3747 * ldap.c: Remove ncat() in favor of just counting bytes and
3748 pre-allocating what is needed.
3750 2005-06-26 19:44 millert
3752 * ldap.c: Fix up some comments Add missing fclose() for the
3755 2005-06-26 19:38 millert
3757 * ldap.c: align struct ldap_config
3759 2005-06-26 19:37 millert
3761 * ldap.c: use LINE_MAX for max conf file line size
3763 2005-06-26 18:36 millert
3765 * pathnames.h.in: add _PATH_LDAP_SECRET
3767 2005-06-26 18:36 millert
3769 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3771 2005-06-25 18:03 millert
3773 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3776 2005-06-25 17:46 millert
3778 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3779 variable by default.
3781 2005-06-25 16:39 millert
3783 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3784 is safe for LD_PRELOAD
3786 2005-06-25 16:15 millert
3788 * acsite.m4, configure: set need_version=no for all cases; this is
3791 2005-06-25 14:45 millert
3795 2005-06-25 14:33 millert
3797 * configure, configure.in: Add dragonfly
3799 2005-06-25 14:29 millert
3801 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3803 2005-06-25 14:21 millert
3807 2005-06-25 14:20 millert
3809 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3810 ltoptions.m4 ltsugar.m4 ltversion.m4
3812 2005-06-25 14:08 millert
3814 * config.guess, config.sub, ltmain.sh: merge in local changes:
3815 config.guess: o better openbsd support config.sub: o hiuxmpp
3816 support ltmain.sh o remove requirement that libs must begin with
3817 "lib" o don't print a bunch of crap about library installs o
3820 2005-06-25 14:05 millert
3822 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3824 2005-06-25 14:04 millert
3826 * configure.in: Update with autoupdate and make minor changes for
3829 2005-06-22 23:19 millert
3831 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3833 2005-06-22 23:04 millert
3835 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3836 emul/timespec.h: Move declatation of struct timespec to its own
3837 include files for systems without it since it needs time_t
3840 2005-06-22 22:57 millert
3842 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3844 2005-05-27 01:59 millert
3846 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3847 give pam_limits a chance to run. Idea from Karel Zak.
3849 2005-04-24 19:24 millert
3851 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3852 to silence warnings on Solaris
3854 2005-04-24 19:22 millert
3856 * parse.c: include grp.h to silence a warning on Solaris
3858 2005-04-23 15:10 millert
3860 * parse.c: Fix printing of += and -= defaults.
3862 2005-04-17 01:21 millert
3864 * mon_systrace.c: Sanity check number of syscall args with argsize.
3865 Not really needed but a little paranoia never hurts.
3867 2005-04-17 01:18 millert
3869 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3870 void * Use int, not size_t/ssize_t for systrace lengths (since it
3873 2005-04-16 03:14 millert
3875 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3876 collsion w/ error Check rval of decode_args() and update_env()
3877 Remove improper setting of validated variable
3879 2005-04-11 21:37 millert
3881 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3882 file if def_ignore_sudoers is not set and call LDAP versions from
3883 display_privs() and display_cmnd() instead of directly from
3884 main(). Because of this we need to defer closing the ldap
3885 connection until after -l processing has ocurred and we must pass
3886 in the ldap pointer to display_privs() and display_cmnd().
3888 2005-04-11 21:33 millert
3890 * ldap.c: Reorganize LDAP code to better match normal sudoers
3891 parsing. Instead of storing strings for later printing in -l
3892 mode we do another query since the authenticating user and the
3893 user being listed may not be the same (the new -U flag). Also
3894 add support for "sudo -l command".
3896 There is still a fair bit if duplicated code that can probably be
3899 2005-04-11 00:37 millert
3901 * ldap.c: Replace pass variable with do_netgr for better
3904 2005-04-10 23:49 millert
3906 * ldap.c: use DPRINTF macro
3908 2005-04-10 23:18 millert
3910 * ldap.c: estrdup, not strdup
3912 2005-04-10 17:44 millert
3914 * parse.c: Add macro to test if the tag changed to improve
3917 2005-04-10 17:40 millert
3919 * parse.c: Avoid printing defaults header if there are no defaults
3922 2005-04-10 15:29 millert
3924 * glob.c: Fix a warning on systems without strlcpy().
3926 2005-04-10 13:32 millert
3928 * pwutil.c: Use macros where possible for sudo_grdup() like
3931 2005-04-08 17:04 millert
3933 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3934 add in tv_usec / 1000000.
3936 2005-03-29 23:38 millert
3938 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3939 should be 1, not 0 for Heimdal. From Alex Plotnick.
3941 2005-03-29 09:29 millert
3943 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3944 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3945 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3946 Add efree() for consistency with emalloc() et al. Allows us to
3947 rely on C89 behavior (free(NULL) is valid) even on K&R.
3949 2005-03-28 22:33 millert
3951 * parse.c, sudo.c: Move initgroups() for -U option into
3952 display_privs() so group matching in sudoers works correctly.
3954 2005-03-26 21:34 millert
3956 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3957 with sudo_ldap_close.
3959 2005-03-26 20:01 millert
3961 * parse.c: Add missing space in Defaults printing
3963 2005-03-25 12:36 millert
3965 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3966 size computaton and string copies.
3968 2005-03-18 22:08 millert
3970 * pwutil.c: Zero old pw_passwd before replacing with version from
3973 2005-03-18 22:07 millert
3975 * configure, configure.in: Only attempt shadow password detection
3976 if PAM is not being used Add shadow_* variables to make shadow
3977 password detection more generic.
3979 2005-03-18 21:46 millert
3981 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3984 2005-03-12 19:27 millert
3986 * sudoers.pod: use a non-breaking space to avoid a double space
3989 2005-03-12 19:26 millert
3991 * sudo.pod: commna, not colon after e.g.
3993 2005-03-12 18:43 millert
3995 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3996 at least uses __execve() internally.
3998 2005-03-12 12:29 millert
4000 * indent.pro: Match reality a bit more.
4002 2005-03-12 12:27 millert
4004 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
4006 2005-03-11 23:42 millert
4008 * pwutil.c: Store shadow password after making a local copy of
4009 struct passwd in case normal and shadow routines use the same
4010 internal buffer in libc.
4012 2005-03-10 20:57 millert
4014 * alloc.c, logging.c: Make varargs usage consistent with the rest
4017 2005-03-10 10:09 millert
4019 * sudo_noexec.c: Wrap more of the exec family since on Linux the
4020 others do not appear to go through the normal execve() path.
4022 2005-03-10 09:57 millert
4024 * visudo.c: make print_unused static like proto says
4026 2005-03-10 09:55 millert
4028 * glob.c: silence a warning on K&R systems
4030 2005-03-10 09:51 millert
4032 * parse.c, alias.c, error.c: make this build in K&R land
4034 2005-03-07 22:21 millert
4038 2005-03-05 22:46 millert
4040 * ldap.c: return(foo) not return foo optimize _atobool() slightly
4042 2005-03-05 22:40 millert
4044 * ldap.c: Use TRUE/FALSE
4046 2005-03-05 22:31 millert
4048 * ldap.c: Reformat to match the rest of sudo's code.
4050 2005-03-05 19:33 millert
4052 * sudo.pod: I am the primary author
4054 2005-02-22 22:28 millert
4056 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
4057 confused too many people and really isn't needed in a
4058 configure-oriented world.
4060 2005-02-22 22:28 millert
4062 * INSTALL: alternate -> alternative
4064 2005-02-22 22:26 millert
4066 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
4067 have issues with TCSAFLUSH.
4069 2005-02-22 22:16 millert
4071 * toke.l: Allow leading blanks before Defaults and Foo_Alias
4074 2005-02-22 22:14 millert
4076 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4078 2005-02-20 13:00 millert
4080 * sudoers.pod: env_keep overrides set_logname
4082 2005-02-20 12:57 millert
4084 * env.c: Fix disabling set_logname and make env_keep override
4087 2005-02-20 12:28 millert
4089 * compat.h, config.h.in, configure, configure.in: No longer need
4092 2005-02-20 11:48 millert
4094 * env.c, sudo.c: Just clean the environment once. This assumes
4095 that any further setenv/putenv will be able to handle the fact
4096 that we replaced environ with our own malloc'd copy but all the
4097 implementations I've checked do.
4099 2005-02-15 23:16 millert
4101 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4102 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4105 2005-02-13 00:33 millert
4107 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4108 and prev_user into init_vars() since user_shell at least is
4111 2005-02-12 18:51 millert
4113 * Makefile.in: fix devel builds
4115 2005-02-12 18:46 millert
4117 * check.c, sudo.c: Fix some printf format mismatches on error.
4119 2005-02-12 18:33 millert
4121 * configure, gram.c, toke.c: regen
4123 2005-02-12 17:56 millert
4125 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4126 alloc.c, check.c, closefrom.c, compat.h, configure.in,
4127 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4128 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4129 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4130 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4131 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4132 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4133 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4134 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4135 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4136 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4137 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4138 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4139 emul/utime.h: Update copyright years.
4141 2005-02-12 16:46 millert
4143 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4146 2005-02-12 16:16 millert
4148 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4151 2005-02-11 18:06 millert
4153 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4154 to warn about printf-like format mismatches
4156 2005-02-10 00:16 millert
4158 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4159 generated from cvs logs
4161 2005-02-10 00:03 millert
4163 * set_perms.c: Use warning/error instead of perror/fatal.
4165 2005-02-09 23:13 millert
4167 * config.guess: Update OpenBSD section
4169 2005-02-09 23:10 millert
4171 * UPGRADE: Add upgrading noted for 1.7
4173 2005-02-09 23:00 millert
4175 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4176 environment, just prune out entries based on the env_delete and
4177 env_check lists. Base building up the new environment on the
4178 current environment and the variables we removed initially.
4180 2005-02-09 22:23 millert
4182 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4183 if locales are supported, just to be safe.
4185 2005-02-09 22:19 millert
4187 * toke.c, toke.l: Cast argument to ctype functions to unsigned
4190 2005-02-07 22:56 millert
4192 * env.c: correct value for DID_USER
4194 2005-02-07 22:55 millert
4196 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4197 <compat.h> not "compat.h"
4199 2005-02-07 22:51 millert
4201 * defaults.c: Reset the environment by default.
4203 2005-02-07 22:50 millert
4205 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4206 malloc an new vector if execve() fails.
4208 2005-02-06 23:16 millert
4210 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4211 execve(2) and wrap the command in sh if we get ENOEXEC.
4213 2005-02-05 23:01 millert
4215 * sudo_noexec.c: Only include time.h on systems that lack struct
4216 timespec which gets defind in compat.h (using time_t).
4218 2005-02-05 22:59 millert
4220 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4221 w/o struct timespec.
4223 2005-02-05 22:56 millert
4225 * configure, compat.h, config.h.in, configure.in: use bcopy on
4228 2005-02-05 22:31 millert
4230 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4231 so limit its use to gcc >= 2.8.
4233 2005-02-05 21:21 millert
4235 * Makefile.in: Add explicit rule to build sudo_noexec.lo
4237 2005-02-05 17:56 millert
4239 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4240 pointed out a bunch of missed dependencies.
4242 2005-02-05 13:18 millert
4244 * TROUBLESHOOTING: Help for PAM when account section is missing
4246 2005-02-05 13:01 millert
4248 * auth/pam.c: Give user a clue when there is a missing "account"
4249 section in the PAM config.
4251 2005-02-05 10:22 millert
4253 * auth/pam.c: Better error handling.
4255 2005-02-05 09:57 millert
4257 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4258 CPPFLAGS so it takes effect as early as possible. Silences a
4259 warning about isblank() on linux.
4261 2005-02-04 21:49 millert
4263 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4264 number of args to be passed to log_error().
4266 2005-01-31 23:03 millert
4268 * pwutil.c: Don't try to destroy a tree we didn't create.
4270 2005-01-27 10:42 millert
4272 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4273 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4274 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4275 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4276 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4277 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4278 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4279 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4280 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4281 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4282 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4283 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4286 2005-01-21 10:34 millert
4288 * configure, configure.in: Fix error message when mixing invalid
4291 2005-01-21 10:32 millert
4293 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4294 default if the OS supports them.
4296 2005-01-21 10:29 millert
4298 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4300 2005-01-21 10:29 millert
4302 * configure.in: Better checking for conflicting authentication
4303 methods Display the authentication methods used at the end of
4304 configure Rename --with-authenticate -> --with-aixauth Use
4305 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4306 default on systems that support them unless disabled. Add
4307 OSMAJOR variable that replaces old OSREV; now OSREV has full
4310 2005-01-17 19:40 millert
4312 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4314 2005-01-14 13:35 millert
4316 * configure.in: Replace: test -n "$FOO" || FOO="bar"
4318 With: : ${FOO='bar'}
4320 2005-01-09 18:58 millert
4322 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4323 only call private passwd/group routines when using a nonstandard
4326 2005-01-06 10:34 millert
4330 2005-01-05 22:16 millert
4332 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4333 fields so add getpwent()/getgrent() functions and call those.
4335 2005-01-05 17:29 millert
4337 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4339 2005-01-05 17:18 millert
4341 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4342 in the clean target Add devdir variable and use it to specify the
4343 path to parser sources
4345 2005-01-05 17:17 millert
4349 2005-01-05 17:17 millert
4351 * configure.in: Add a devdir variables that defaults to $(srcdir)
4352 and is set to . if --devel was specified. Allows for proper
4353 dependecies building the parser.
4355 2005-01-05 14:50 millert
4357 * testsudoers.c: Add support for custom passwd/group files.
4359 2005-01-05 14:47 millert
4361 * Makefile.in: Build private copy of pwutil.o for testsudoers with
4362 MYPW defined so it uses our own passwd/group routines.
4364 2005-01-05 14:46 millert
4366 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4367 sudo_setspent/sudo_endspent stubs instead. We can now just use
4368 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4369 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4371 2005-01-05 14:44 millert
4373 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4374 Use global buffers for passwd/group structs Rename functions from
4377 2005-01-05 14:43 millert
4379 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4381 2005-01-05 14:42 millert
4383 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4386 2005-01-05 14:41 millert
4388 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4389 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4390 are no longer needed. Also add preprocessor magic to use private
4391 versions of the passwd and group routines if MYPW is defined (for
4392 use by testsudoers).
4394 2005-01-04 22:40 millert
4396 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4397 if there are fields we don't handle they end up as 0.
4399 2005-01-04 20:10 millert
4401 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4404 2005-01-04 20:09 millert
4406 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4407 variables for better readability.
4409 2005-01-04 20:08 millert
4411 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4412 that support alternate passwd and group files.
4414 2005-01-04 20:07 millert
4416 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4417 its own file. This allows visudo and testsudoers to use the
4420 2005-01-01 19:31 millert
4422 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4423 based on the terminal width.
4425 2005-01-01 12:41 millert
4427 * match.c, visudo.c, testsudoers.c: Only check group vector in
4428 usergr_matches() if we are matching the invoking or list user.
4429 Always check the group members, even if there was a group vector.
4431 2004-12-17 17:24 millert
4433 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4435 2004-12-17 13:12 millert
4437 * CHANGES, TODO: checkpoint
4439 2004-12-16 14:20 millert
4441 * sudo.c: sort usage
4443 2004-12-16 14:20 millert
4445 * sudo.pod: Sort command line options
4447 2004-12-16 13:33 millert
4449 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4450 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4451 start closing at a point other than 3. Add closefrom_override
4452 sudoers option and -C sudo flag to allow the user to specify a
4453 different closefrom starting point.
4455 2004-12-16 13:25 millert
4457 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4459 2004-12-15 22:55 millert
4461 * LICENSE: no more UCB strcasecmp
4463 2004-12-15 22:54 millert
4465 * strcasecmp.c: replace BSD licensed one with version derived from
4468 2004-12-09 21:07 millert
4470 * sudo.c: Fix last commit.
4472 2004-12-09 19:26 millert
4474 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4475 to /dev/null if not.
4477 2004-12-03 13:57 millert
4479 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4481 2004-12-03 13:52 millert
4483 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4484 Use TIME_WITH_SYS_TIME
4486 2004-12-03 13:48 millert
4488 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4490 2004-12-02 11:18 millert
4492 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4493 being set unconditionally on darwin. From Toby Peterson.
4495 2004-12-02 10:40 millert
4497 * getspwuid.c: Check rbinsert() return value. In the case of faked
4498 up entries there is usually a negative response cached that we
4501 In pwfree() don't try to zero out a NULL pw_passwd pointer.
4503 2004-12-02 09:53 millert
4505 * mon_systrace.c: Use the double fork trick to avoid the monitor
4506 process being waited for by the main program run through sudo.
4508 2004-11-29 12:52 millert
4510 * sudo.c: Call initgroups() in -U mode so group matches work
4513 2004-11-29 12:34 millert
4515 * def_data.h, mkdefaults: Don't print a trailing comma for the last
4516 entry in enum def_tupple
4518 2004-11-28 16:08 millert
4520 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4521 lecture, listpw and verifypw are used in boolean context.
4523 2004-11-28 16:05 millert
4525 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4526 context should be "all", not "any".
4528 2004-11-26 14:21 millert
4530 * def_data.in, defaults.c: Allow tuples that can be used as
4531 booleans to be used as boolean TRUE. In this case the 2nd
4532 possible value of the tuple is used for TRUE.
4534 2004-11-25 12:23 millert
4536 * configure, configure.in: Correct the test for 2-parameter
4539 2004-11-25 12:20 millert
4541 * sudo.h: Add strub struct definitions for passwd, timeval and
4544 2004-11-25 12:09 millert
4546 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4547 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4548 fix a typo in the gettimeofday check.
4550 2004-11-24 16:44 millert
4552 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4553 for visudo and testsudoers.
4555 2004-11-24 16:31 millert
4557 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4558 option to use in conjunction with -l instead of -u. Add support
4559 for "sudo -l command" to test a specific command.
4561 2004-11-24 16:28 millert
4563 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4564 it has not been set. Previously it was set by sudo "ALL" in the
4565 parser but at that point the fully-qualified pathname has not yet
4568 2004-11-23 18:18 millert
4570 * parse.c, testsudoers.c: Correctly handle multiple privileges per
4571 userspec and runas inheritence.
4573 2004-11-21 14:09 millert
4575 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4578 2004-11-19 18:04 millert
4580 * toke.c, toke.l: make per-command defaults work with sudoedit
4582 2004-11-19 18:00 millert
4584 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4585 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4586 approriate defaults variable.
4588 2004-11-19 17:09 millert
4590 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4591 Document per-command Defaults.
4593 2004-11-19 16:35 millert
4595 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4596 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4597 command-specific Defaults entries. E.g.
4598 Defaults!/usr/bin/vi noexec
4600 2004-11-19 15:03 millert
4602 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4603 occurence of user_matches() -> runas_matches() missed previously
4604 runas_matches(), host_matches() and cmnd_matches() only really
4605 need to pass in a list of members. user_matches() still needs to
4606 pass in a passwd struct because of "sudo -l"
4608 2004-11-19 14:46 millert
4610 * parse.c: Check def_authenticate, def_noexec and def_monitor when
4611 setting return flags. XXX May be better to just set the defaults
4612 directly and get rid of those flags.
4614 2004-11-19 13:39 millert
4616 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4617 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4618 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4619 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4620 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4621 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4622 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4623 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4624 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4625 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4626 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4627 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4628 <config.h> Not: #include "config.h" That way we get the correct
4629 config.h when build dir != src dir
4631 2004-11-19 13:30 millert
4633 * Makefile.in: Back out part of rev 1.263; fix -I order
4635 2004-11-19 13:12 millert
4637 * toke.c, toke.l: More robust parsing if #include; could be much
4640 2004-11-19 12:55 millert
4642 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4645 2004-11-19 12:35 millert
4647 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4648 routines out into their own file.
4650 2004-11-19 12:32 millert
4652 * error.h: __attribute__ is already defined in compat.h
4654 2004-11-19 12:30 millert
4656 * visudo.c: quit() should not be __noreturn__ as it is non-void on
4659 2004-11-19 12:24 millert
4661 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4662 error/warning functions like err/warn but that call an additional
4663 cleanup routine in the error case. This means we no longer need
4664 to compile a special version of alloc.o for visudo.
4666 2004-11-19 11:54 millert
4668 * parse.h: Clarify comments about the data structures
4670 2004-11-18 15:28 millert
4672 * visudo.c: Add support for VISUAL and EDITOR containing command
4673 line args. If env_editor is not set any args in VISUAL and
4674 EDITOR are ignored. Arguments are also now supported in
4677 2004-11-17 14:25 millert
4679 * parse.h: alias_matches() is no more
4681 2004-11-17 14:09 millert
4683 * CHANGES, TODO: sync
4685 2004-11-17 13:19 millert
4687 * Makefile.in: When regenerating the parser, don't replace gram.h
4688 unless it has changed.
4690 2004-11-17 11:56 millert
4692 * Makefile.in: remove Makefile.binary for distclean
4694 2004-11-17 11:18 millert
4696 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4697 to make sure we can't overflow new_env.
4699 2004-11-17 10:33 millert
4701 * sudo_edit.c: paranoia when stripping trailing slashes from
4704 2004-11-16 19:00 millert
4706 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4708 2004-11-16 18:59 millert
4710 * configure, configure.in, config.h.in, sudo.c: Add configure check
4713 2004-11-16 18:55 millert
4715 * ldap.c: Use supplementary group vector in struct sudo_user.
4717 2004-11-16 18:40 millert
4719 * match.c: Only do string comparisons on the group members if there
4720 is no supplemental group list.
4722 2004-11-16 16:10 millert
4724 * CHANGES, TODO: sync
4726 2004-11-16 15:54 millert
4728 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4729 trailing slash so chop off any trailing slashes we see and add an
4732 2004-11-16 12:02 millert
4734 * match.c: remove bogus XXX comment
4736 2004-11-16 11:10 millert
4738 * match.c: Get rid of alias_matches and correctly fall through to
4739 the non-alias cases when there is no alias with the specified
4742 2004-11-16 10:47 millert
4744 * getspwuid.c: Cache non-existent passwd/group entries too.
4746 2004-11-16 10:45 millert
4750 2004-11-15 23:32 millert
4752 * getspwuid.c: fix typo
4754 2004-11-15 23:24 millert
4756 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4757 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4758 Implement group caching and use the passwd and group caches
4761 2004-11-15 14:43 millert
4763 * match.c: Properly negate the return value of alias_matches() when
4766 2004-11-15 14:38 millert
4768 * match.c: Make hostname_matches() return TRUE for a match, else
4769 FALSE like the caller expects.
4771 2004-11-15 13:24 millert
4773 * Makefile.in: Add missing dependencies on gram.h
4775 2004-11-15 13:06 millert
4777 * match.c: Use runas_matches in alias_matches() now that we have
4780 2004-11-15 13:00 millert
4782 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4784 2004-11-15 12:33 millert
4786 * gram.y, match.c: Use ALIAS for the member type when storing an
4787 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4788 match.c relies on the more generic type. Expand runas_matches
4789 instead of calling user_matches() inside of it since
4790 user_matches() looks up USERALIASes, not RUNASALIASes.
4792 2004-11-15 12:05 millert
4794 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4797 2004-11-15 10:53 millert
4799 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4800 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4801 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4802 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4803 local error/warning functions like err/warn but that call an
4804 additional cleanup routine in the error case. This means we no
4805 longer need to compile a special version of alloc.o for visudo.
4807 2004-11-15 09:59 millert
4809 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4810 since the latter checks for "#uid".
4812 2004-11-15 09:53 millert
4814 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4815 db entries in 2 reb-black trees; one indexed by uid, the other by
4816 user name. The data returned from the cache should be considered
4817 read-only and is destroyed by sudo_endpwent().
4819 2004-11-15 09:50 millert
4821 * match.c: add cast to uid_t
4823 2004-11-15 09:49 millert
4825 * gram.y: missing free in alias_destroy
4827 2004-11-15 09:49 millert
4829 * redblack.c: Can't use rbapply() for rbdestroy since the
4830 destructor is passed a data pointer, not a node pointer.
4832 2004-11-14 23:06 millert
4834 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4835 versions of setpwent() and endpwent() that set/end the shadow
4838 2004-11-14 22:55 millert
4840 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4841 visudo.c: Store aliases in a red-black tree.
4843 2004-11-14 22:52 millert
4845 * Makefile.in, redblack.c, redblack.h: red-black tree
4848 2004-11-14 22:37 millert
4850 * visudo.c: Edit all sudoers file if there were unused or undefined
4851 aliases and we are in strict mode.
4853 2004-11-12 11:19 millert
4855 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4856 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4857 Bring back the "secure_path" Defaults option now that Defaults
4858 take effect before the path is searched.
4860 2004-11-11 12:22 millert
4862 * logging.c, parse.c: A user can always list their own entries,
4863 even with -u. Better error message when failing to list another
4866 2004-11-11 12:12 millert
4868 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4869 entries is now "-u otheruser -l". Only root or users with sudo
4870 "ALL" may list other user's entries.
4872 2004-11-11 11:30 millert
4874 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4877 2004-11-11 11:25 millert
4879 * env.c: strip CDPATH too
4881 2004-11-11 11:20 millert
4883 * env.c: strip exported bash functions from the environment.
4885 2004-10-27 12:16 millert
4887 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4888 variables for real commands and sudoedit. This avoids a
4889 confusing message when a user tries "sudo -l" or "sudo -v" and is
4892 2004-10-27 12:06 millert
4894 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4897 2004-10-26 18:39 millert
4899 * logging.c: Convert some bitwise AND to ISSET
4901 2004-10-26 18:29 millert
4903 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4905 2004-10-26 18:29 millert
4907 * CHANGES, TODO: sync
4909 2004-10-26 18:28 millert
4911 * BUGS: new parser fixes most of the outstanding bugs
4913 2004-10-26 18:27 millert
4917 2004-10-26 18:26 millert
4919 * visudo.c: Rework for the new parser. Now checks for unused
4922 2004-10-26 18:25 millert
4924 * testsudoers.c: Rewrite for the new parser. Now supports a -d
4925 flag (dump) and adds a -h flag (host). It now defaults to the
4926 local hostname unless otherwise specified.
4928 2004-10-26 18:23 millert
4930 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4933 2004-10-26 18:22 millert
4935 * sudo.c: Update for new parse. We now call find_path() *after* we
4936 have updated the global defaults based on sudoers. Also adds
4937 support for listing other user's privs if you are root.
4939 2004-10-26 18:21 millert
4941 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4944 2004-10-26 18:20 millert
4946 * logging.c, logging.h: Add NO_STDERR flag.
4948 2004-10-26 18:19 millert
4950 * ldap.c: Split sudo_ldap_check() into three pieces:
4951 sudo_ldap_open(), udo_ldap_update_defaults() and
4952 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4953 default options, find the command in the user's path, and then
4954 check whether the user is allowed to run it. The important thing
4955 here is that the default runas user may be specified as a default
4956 option and that needs to be set before we search for the command.
4958 2004-10-26 18:17 millert
4960 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4963 2004-10-26 18:16 millert
4965 * defaults.h: Add prototype for update_defaults()
4967 2004-10-26 18:16 millert
4969 * defaults.c: Don't warn about line numbers now that we operate on
4970 a set of data structures (or LDAP) and not a file.
4972 2004-10-26 18:15 millert
4974 * config.h.in: No long use lsearch()
4976 2004-10-26 18:14 millert
4978 * Makefile.in: Update for new and changed file names.
4980 2004-10-26 18:14 millert
4982 * LICENSE: no more BSD lsearch.c
4984 2004-10-26 18:14 millert
4986 * match.c: foo_matches() routines now live in match.c Added
4987 user_matches(), runas_matches(), host_matches(), cmnd_matches()
4988 and alias_matches() that operate on the parsed sudoers file.
4990 2004-10-26 18:12 millert
4992 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4993 -> switch_buffer() WORD no longer needs to exclude '@' kill
4996 2004-10-26 18:10 millert
4998 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4999 Rewritten parser that converts sudoers into a set of data
5000 structures. This eliminates ordering issues and makes it
5001 possible to apply sudoers Defaults entries before searching for
5004 2004-10-26 18:09 millert
5006 * configure.in, lsearch.c, emul/search.h: We won't be using
5007 lsearch() any longer.
5009 2004-10-26 18:07 millert
5011 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
5014 2004-10-26 16:09 millert
5016 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5017 visudo.man.in: regen
5019 2004-10-26 16:09 millert
5021 * visudo.pod: Update warnings to match new visudo
5023 2004-10-26 16:08 millert
5025 * sudoers.pod: The new parser doesn't have the old ordering
5028 2004-10-26 16:08 millert
5030 * sudo.pod: Document that -l now takes an optional username
5033 2004-10-25 13:44 millert
5035 * RUNSON: AIX 5.2.0.0 works
5037 2004-10-25 13:38 millert
5039 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
5040 instead. Fixes a compilation problem with Solaris 9's native
5043 Set FLAG_MONITOR when needed.
5045 2004-10-23 13:32 millert
5047 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
5048 match the traced process. Fixes relative paths.
5050 2004-10-21 12:31 millert
5052 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
5054 2004-10-13 12:52 millert
5056 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
5057 requires set_reuid() or setresuid()
5059 2004-10-13 12:46 millert
5061 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
5062 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
5063 saved uids; they aren't worth bothering with.
5065 2004-10-07 16:23 millert
5067 * glob.c: remove call to issetugid()
5069 2004-10-07 14:57 millert
5071 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5072 wildcards. Now that we use glob() the bug is fixed.
5074 2004-10-07 14:52 millert
5076 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5077 and stat each result that matches the basename of the user's
5078 command. This makes "cd /usr/bin ; sudo ./blah" work when
5079 sudoers allows /usr/bin/blah. Fixes bug #143.
5081 2004-10-07 14:27 millert
5083 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5084 for extended glob (GLOB_TILDE and GLOB_BRACE)
5086 2004-10-07 12:59 millert
5088 * config.h.in, configure, configure.in: Check for a glob() that
5089 supports GLOB_BRACE and GLOB_TILDE
5091 2004-10-07 12:51 millert
5093 * LICENSE: reference glob
5095 2004-10-07 12:50 millert
5097 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5098 some unneeded extensions removed.
5100 2004-10-05 17:26 millert
5102 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5103 fail. It probably means we are out of space in the stack gap...
5105 2004-10-05 17:20 millert
5109 2004-10-05 16:53 millert
5111 * mon_systrace.c: Take a stab at ldap sudoers support here.
5113 2004-10-05 15:13 millert
5115 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5116 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5117 inadvertanly kill itself.
5119 2004-10-05 14:21 millert
5121 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5123 2004-10-05 14:15 millert
5125 * mon_systrace.c: When modifying the environment, don't replace
5126 envp when we can get away with just rewriting pointers in the
5129 2004-10-05 13:46 millert
5131 * mon_systrace.c, mon_systrace.h: Add environment updating via
5132 STRIOCINJECT (if available).
5134 2004-10-05 10:22 millert
5136 * sudoers.cat, sudoers.man.in: regen
5138 2004-10-04 16:15 millert
5142 2004-10-04 16:15 millert
5144 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5147 2004-10-04 12:09 millert
5149 * mon_systrace.c: Include file is now mon_systrace.h
5151 2004-10-04 12:07 millert
5153 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5154 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5155 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5156 tracing, it is now "monitoring" which should be more a obvious
5157 name to non-hackers.
5159 2004-10-01 15:06 millert
5161 * mon_systrace.c, mon_systrace.h: Fix some XXX
5163 2004-10-01 14:30 millert
5165 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5166 1024 as the max # of entries (the max that systrace(4) allows).
5168 Only need to use SYSTR_POLICY_ASSIGN once
5170 Change check_syscall() -> find_handler() and have it return the
5171 handler instead of just running it. We need this since handler
5172 now have two parts: one part that generates and answer and
5173 another that gets called after the answer is accepted (to do
5176 Add some missing check_exec for emul execv
5178 2004-10-01 10:58 millert
5180 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
5183 2004-10-01 10:47 millert
5185 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5187 2004-09-30 20:46 millert
5189 * Makefile.in: add trace_systrace.o dependency
5191 2004-09-30 19:00 millert
5193 * configure, configure.in: Also look for systrace.h in
5196 2004-09-30 18:27 millert
5198 * mon_systrace.c, mon_systrace.h: Move all struct defs and
5199 prototypes into trace_systrace.h and mark all but
5200 systace_attach() static.
5202 2004-09-30 18:14 millert
5204 * mon_systrace.c, mon_systrace.h: Add support for tracing
5205 emulations. At the moment, all emulations are compiled in. It
5206 might make sense to #ifdef them in the future, though this
5207 impeeds readability.
5209 2004-09-30 17:07 millert
5211 * Makefile.in, configure.in, configure: rename systrace.c ->
5214 2004-09-30 15:58 millert
5216 * parse.yacc: Allow this to build with a K&R compiler again
5218 2004-09-30 13:58 millert
5222 2004-09-30 13:55 millert
5224 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5226 2004-09-30 13:44 millert
5228 * visudo.c: Exit() takes a negative value to indicate it was not
5231 2004-09-30 13:25 millert
5233 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5234 visudo.man.in: regen
5236 2004-09-30 13:22 millert
5238 * Makefile.in, visudo.c: Define Err() and Errx() that are like
5239 err() and errx() but call Exit() instead of exit(). Build
5240 private copy of alloc.o for visudo that calls Err() and Errx().
5242 2004-09-29 15:22 millert
5246 2004-09-29 15:22 millert
5250 2004-09-29 14:41 millert
5252 * visudo.c: Overhaul visudo for editing multiple files: o visudo
5253 has been broken out into functions (more work needed here) o
5254 each file is now edited before sudoers is re-parsed o if a
5255 #include line is added that file will be edited too
5257 TODO: o cleanup temp files when exiting via err() or errx() o
5258 continue breaking things out into separate functions
5260 2004-09-29 14:36 millert
5262 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5263 arg to open_sudoers that open_sudoers can use to indicate to the
5264 caller that the fd should not be closed when it is done with it.
5265 To be used by visudo to keep locked fds from being closed
5266 prematurely (and thus losing the lock).
5268 2004-09-29 14:33 millert
5270 * parse.yacc, sudo.c: Add errorfile global that contains the name
5271 of the file that caused the error.
5273 2004-09-29 14:30 millert
5275 * parse.lex: return COMMENT to yacc grammar for a #include line
5277 2004-09-29 14:29 millert
5279 * parse.lex: Remove us of unput() in favor of yyless() which is
5282 2004-09-29 14:28 millert
5284 * parse.yacc: Allow an empty sudoers file.
5286 2004-09-28 16:50 millert
5288 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5289 doesn't do it for us.
5291 2004-09-28 14:37 millert
5295 2004-09-28 14:36 millert
5297 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5298 shadow the "quiet" global.
5300 2004-09-28 14:33 millert
5302 * visudo.c: If a sudoers file includes other files, edit those too.
5303 Does not yes deal with creating the new includes files itself.
5305 2004-09-28 14:31 millert
5307 * testsudoers.c: init_parser now takes a path
5309 2004-09-28 14:31 millert
5311 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5312 dealing with multiple sudoers files: o init_parser() now takes a
5313 path used to populate the sudoers global o the sudoers global is
5314 used to print the correct file in yyerror() o when switching to
5315 a new sudoers file, perserve old file name and line number
5317 2004-09-28 14:29 millert
5319 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5320 meaningful now that we can have multiple sudoers files.
5322 2004-09-28 13:52 millert
5324 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5325 sudoers_lookup() so we start at the right file position when
5326 reading include files.
5328 2004-09-27 21:04 millert
5330 * sudoers.pod: document #include
5332 2004-09-27 20:47 millert
5336 2004-09-27 20:47 millert
5338 * parse.lex: Add max depth of 128 for the include stack to avoid
5341 Since yyerror() doesn't stop parsing, pass return values back to
5342 yylex and call yyterminate() on error.
5344 2004-09-27 14:06 millert
5346 * sudoers.pod: document tracing
5348 2004-09-27 14:05 millert
5350 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5353 2004-09-27 12:08 millert
5357 2004-09-27 12:03 millert
5359 * parse.lex: Add support for #include in sudoers (visudo support
5362 2004-09-27 12:02 millert
5364 * parse.yacc: make yyerror()'s argument const
5366 2004-09-27 12:02 millert
5368 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5370 2004-09-27 12:01 millert
5372 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5375 2004-09-26 12:35 millert
5377 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5378 version.h: Crank version
5380 2004-09-26 12:33 millert
5382 * Makefile.in, sudo.psf: Better HP-UX depot construction
5384 2004-09-25 17:08 millert
5386 * mon_systrace.c: o Made children global so check_exec() can lookup
5387 a child. o Replaced uid in struct childinfo with struct passwd *
5388 (for runas) o new_child() now takes a parent pid so the runas
5389 info can be inherited o Added find_child() to lookup a child by
5390 its pid o update_child() now fills in a struct passwd o Converted
5391 the big if/else mess in set_policy to a switch o Syscalls that
5392 change uid are now "ask" so we get SYSTR_MSG_UGID events
5394 2004-09-25 17:01 millert
5396 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5397 to lookup the shadow password. Will be used to a struct passwd
5398 that has the shadow password already filled in.
5400 2004-09-25 16:58 millert
5402 * mon_systrace.c: add missing increment of addr in read_string()
5404 2004-09-25 16:15 millert
5406 * mon_systrace.c: Remove bogus call to update_child() and some
5409 2004-09-25 16:11 millert
5411 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5412 initialized global for simplicity If STRIOCATTACH returns EBUSY
5413 we are already being traced Check for user_args == NULL in
5414 setproctitle() call Add missing calls to STRIOCANSWER
5416 2004-09-25 13:15 millert
5418 * sudo.c: g/c sudo_pwdup proto
5420 2004-09-24 20:21 millert
5422 * Makefile.in, sudo.psf: Add target for building a depot file
5424 2004-09-24 20:07 millert
5426 * mon_systrace.c: trim includes
5428 2004-09-24 14:11 millert
5430 * lex.yy.c, sudo.tab.h: regen
5432 2004-09-24 14:10 millert
5434 * INSTALL: document --with-systrace
5436 2004-09-24 14:10 millert
5438 * config.h.in, configure, configure.in: Add check for setproctitle
5440 2004-09-24 14:09 millert
5442 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5443 it can set the error code
5445 2004-09-24 13:30 millert
5447 * mon_systrace.c: systrace(4) support for sudo. On systems with
5448 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5449 patches) sudo can intercept exec calls and check the exec args
5450 against the sudoers file. In other words, sudo can now control
5451 subcommands and shell escapes.
5453 2004-09-24 13:17 millert
5455 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5457 2004-09-24 13:15 millert
5459 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5460 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5462 2004-09-24 13:13 millert
5464 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5465 close on exec flag instead.
5467 2004-09-24 13:11 millert
5469 * def_data.c, def_data.h, def_data.in: Add trace option
5471 2004-09-23 20:24 millert
5473 * Makefile.in: Add systrace
5475 2004-09-23 20:23 millert
5477 * INSTALL: SunOS /bin/sh blows up with configure
5479 2004-09-23 20:23 millert
5481 * configure, configure.in: Include sys/param.h before systrace.h
5483 2004-09-23 20:15 millert
5487 2004-09-23 20:15 millert
5489 * pathnames.h.in: _PATH_DEV_SYSTRACE
5491 2004-09-23 20:14 millert
5493 * configure.in: line up options in --help
5495 2004-09-23 20:11 millert
5497 * config.h.in, configure.in: Add --with-systrace
5499 2004-09-23 13:35 millert
5503 2004-09-23 13:35 millert
5505 * aclocal.m4, configure.in: make this work with autoconf-2.59
5507 2004-09-16 12:58 millert
5509 * sudo_edit.c: Simplify logic around open & stat of files and do
5510 sanity on edited file even if we lack fstat (still racable but
5513 2004-09-15 18:47 millert
5515 * HISTORY: Add support url
5517 2004-09-15 16:11 millert
5519 * Makefile.in: versino 1.6.8p1
5521 2004-09-15 15:20 millert
5523 * CHANGES: more changes for 1.6.8p1
5525 2004-09-15 15:18 millert
5527 * version.h: 1.6.8p1
5529 2004-09-15 12:16 millert
5531 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5532 something other than a regular file.
5534 2004-09-14 20:55 aaron
5538 2004-09-14 20:21 aaron
5540 * INSTALL: document --with-ldap-conf-file
5542 2004-09-14 17:43 millert
5544 * CHANGES, ins_csops.h: political correctness strikes again
5546 2004-09-14 15:09 millert
5550 2004-09-12 19:50 millert
5552 * Makefile.binary.in, Makefile.in: Install sudoedit man link
5554 2004-09-12 14:25 millert
5556 * INSTALL: Update PAM note and mention where HP-UX users can
5557 download gcc binaries.
5559 2004-09-12 12:08 millert
5561 * Makefile.in: libtool wants to install stuff from .libs so fake
5562 one up for binary installations.
5564 2004-09-12 11:53 millert
5566 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5567 -f set LIBTOOL correctly
5569 2004-09-12 11:53 millert
5571 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5572 sudoedit link instead of using ln -f
5574 2004-09-12 10:22 millert
5576 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5577 Makefile.binary.in for config.status substitution Add support for
5578 installing noexec bits
5580 2004-09-12 10:21 millert
5582 * Makefile.in: Copy noexec bits into binary dists too No longer use
5583 my old arch script for making binary dists
5585 2004-09-12 09:36 millert
5587 * Makefile.binary: Install sudoedit link.
5589 2004-09-11 12:25 millert
5591 * emul/utime.h: avoid __P so there is no need for compat.h to be
5594 2004-09-11 12:24 millert
5596 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5598 2004-09-10 12:31 millert
5600 * compat.h: Fix Solatis futimes macro
5602 2004-09-09 11:02 millert
5604 * sudo_edit.c: Rename ots -> omtim for improved readability.
5606 2004-09-08 14:38 millert
5608 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5609 keep the temp file open; re-opening it with the invoking user's
5612 2004-09-08 14:36 millert
5616 2004-09-08 14:35 millert
5618 * sudo.cat, sudo.man.in: regen
5620 2004-09-08 14:34 millert
5622 * sudo.pod: back out revision 1.70; it is no long applicable
5624 2004-09-08 11:57 millert
5626 * env.c: Let the loader initialize nep
5628 2004-09-08 11:49 millert
5630 * configure, configure.in, config.h.in: Removed unneed check for
5631 fchown Add check for gettimeofday Move autoheader template stuff
5632 into separate AH_TEMPLATE lines
5634 2004-09-08 11:48 millert
5636 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5637 timespec throughout.
5639 2004-09-08 11:47 millert
5641 * Makefile.in: gettime.[co]
5643 2004-09-08 11:47 millert
5645 * gettime.c: function to return the current time in a struct
5648 2004-09-08 10:51 millert
5650 * utimes.c: Not a darpa-sponsored file.
5652 2004-09-07 16:36 millert
5654 * compat.h, config.h.in, configure, configure.in: Add a check for
5655 struct timespec and provide it for those without.
5657 2004-09-07 15:56 millert
5659 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5660 st_mtim and st_mtimespec and add macros for pulling the mtime sec
5661 and nsec out of struct stat. These are used in sudo_edit() to
5662 better tell whether or not the file has changed.
5664 2004-09-07 15:55 millert
5666 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5667 param to touch() for nsec
5669 2004-09-07 14:06 millert
5671 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5672 have to chown the file later. Only touch() the temp file if we
5673 can do it via the file descriptor. Don't check for modification
5674 of the temp file if we lack fstat(). Catch errors read()ing the
5677 2004-09-07 14:04 millert
5679 * fileops.c: If path is NULL and fd == -1 return -1.
5681 2004-09-07 13:31 millert
5683 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5684 ones we opened so just close those in the child.
5686 2004-09-07 13:14 millert
5688 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5689 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5690 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5691 in touch(), emulating as needed. Not all systems are able to
5692 support setting the times of an fd so touch() takes both an fd
5693 and a file name as arguments.
5695 2004-09-06 21:12 aaron
5699 2004-09-06 16:46 millert
5701 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5702 visudo.man.in: regen
5704 2004-09-06 16:45 millert
5706 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5707 re-order some of the sections to match the order we use in
5710 2004-09-06 15:05 aaron
5712 * env.c: Openldap ~/.ldaprc fix
5714 2004-09-06 12:18 millert
5716 * sudo.pod: Talk about how the editor must write its changes to the
5717 original file and not just use rename(2).
5719 2004-09-06 12:12 millert
5723 2004-09-06 12:11 millert
5725 * sudo_edit.c: Keep the temp file open instead of re-opening after
5726 the editor has exited.
5728 2004-09-06 12:10 millert
5730 * sample.pam: Update for current redhat/fedora core.
5732 2004-09-02 21:56 aaron
5734 * README.LDAP: tls_ examples
5736 2004-09-02 00:03 aaron
5738 * ldap.c: config tls_* options
5740 2004-08-29 11:39 millert
5742 * configure, configure.in: No need for -lcrypt when using pam.
5744 2004-08-26 23:57 millert
5748 2004-08-26 23:44 aaron
5750 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5751 option to override LDAP_CONF
5753 2004-08-26 22:08 aaron
5755 * ldap.c: cleanup debug message
5757 2004-08-26 19:29 aaron
5759 * README.LDAP: more config info
5761 2004-08-24 14:01 millert
5763 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5764 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5765 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5766 longer use gross statics in command_matches(). Also rename some
5767 variables for improved clarity.
5769 2004-08-21 14:33 millert
5771 * INSTALL: document HP's crippled compiler deficiency.
5773 2004-08-21 14:25 millert
5775 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5776 descriptions. Noticed by Norihiko Murase.
5778 2004-08-21 14:20 millert
5780 * configure, configure.in: --with-noexec takes an optional PATH
5783 2004-08-21 14:20 millert
5785 * INSTALL: document --with-noexec
5787 2004-08-17 16:21 millert
5789 * RUNSON, TODO: sync
5791 2004-08-17 15:11 millert
5793 * sudo_edit.c: Better warning message when sudoedit is unable to
5794 write to the destination file.
5796 2004-08-17 14:53 millert
5798 * sudo.cat, sudo.man.in: regen
5800 2004-08-17 14:53 millert
5802 * sudo.pod: Don't italicize the string "sudoedit"
5804 2004-08-16 18:45 millert
5806 * HISTORY: Mention GratiSoft.
5808 2004-08-11 14:29 millert
5810 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5813 2004-08-09 19:04 millert
5815 * config.guess: Correct OpenBSD mips support
5817 2004-08-09 17:28 millert
5819 * config.guess: Add OpenBSD/mips
5821 2004-08-06 23:43 aaron
5823 * README.LDAP: More behavior notes
5825 2004-08-06 23:36 aaron
5827 * README.LDAP: Updates on current behavior
5829 2004-08-06 19:56 millert
5831 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5832 no difference to formatted files).
5834 2004-08-06 19:48 millert
5838 2004-08-06 19:42 millert
5840 * sudo.c: Consistency. Use same error for bad -u #uid when
5841 targetpw is set as we do when a bad -u username is specified.
5843 2004-08-06 19:33 millert
5845 * TODO: Add checksum idea from Steve Mancini
5847 2004-08-06 19:32 millert
5849 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5851 2004-08-06 19:31 millert
5853 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5854 via -u when targetpw is set.
5856 2004-08-06 19:24 millert
5858 * sudo.c: Error out when targetpw is enabled and sudo is run with
5859 -u #uid but #uid does not exist in the passwd database. We can't
5860 do target authentication when the target is not in passwd!
5862 2004-08-05 21:16 millert
5864 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5866 2004-08-05 21:14 millert
5868 * TODO: Some more todo for the next release.
5870 2004-08-05 21:13 millert
5872 * INSTALL: Make it clear that PAM should be used for DCE support
5875 2004-08-05 21:13 millert
5877 * sudoers.pod: o Document problems with wildcards and relative
5878 paths. o Make the order requirements more prominent. o Change a
5879 "set" to "reset" for clarity.
5881 2004-08-05 14:29 millert
5883 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5885 2004-08-02 22:34 aaron
5887 * ldap.c: reflect changes to parse.c
5889 2004-08-02 14:44 millert
5891 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5892 user_cmnd and user_args to command_matches(), just use the
5893 globals there. Since we keep state with statics anyway it is
5894 misleading to pretend that passing in different cmnd and
5895 cmnd_args will work.
5897 2004-08-02 14:40 millert
5899 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5900 pseudo-commands check for a '/' anywhere in cmnd, not just the
5903 2004-07-30 23:07 aaron
5905 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5906 <oblin@mandrakesoft.com>
5908 2004-07-30 22:41 aaron
5910 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5912 2004-07-30 22:06 aaron
5914 * README.LDAP: Sun One schema definition by
5915 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5917 2004-07-29 11:57 millert
5921 2004-07-23 16:44 millert
5925 2004-07-23 16:43 millert
5927 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5928 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5931 2004-07-08 10:20 millert
5933 * CHANGES: PAM change
5935 2004-07-07 21:04 aaron
5937 * ldap.c: Better debugging of ALL command
5939 2004-07-07 20:15 millert
5941 * parse.c: When matching for "sudoedit" in sudoers check both the
5942 command the user typed *and* the command that is listed in the
5945 2004-07-04 19:59 aaron
5947 * ldap.c: Added !command feature
5949 2004-06-28 10:51 millert
5951 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5954 2004-06-10 23:11 millert
5956 * LICENSE: License is ISC-style, not BSD-style
5958 2004-06-10 20:58 millert
5962 2004-06-10 16:54 millert
5964 * sudo.man.in, sudo.cat: regen
5966 2004-06-10 16:53 millert
5968 * sudo.pod: o Update some out of date bits to reality o Change the
5969 shell promt in examples to bourne-shell style o Clarify some
5970 details o Add a CAVEAT about "sudo cd /foo"
5972 2004-06-10 16:19 millert
5974 * check.c: Don't ask for a password if invoking user == target
5977 2004-06-10 12:32 millert
5979 * sudo.c: typo in comment
5981 2004-06-08 19:20 millert
5983 * sudoers.man.in, sudoers.cat: regen
5985 2004-06-08 19:19 millert
5987 * sudoers.pod: Expand on NOEXEC a little.
5989 2004-06-08 16:20 millert
5993 2004-06-08 15:58 millert
5995 * visudo.man.in, visudo.cat: regen
5997 2004-06-08 15:55 millert
5999 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
6000 for runas_default being set after it has already been used.
6002 2004-06-08 13:53 millert
6004 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
6005 has been set to TRUE or FALSE. This is more readable than
6006 checking for >=0 or < 0. Doesn't change the actual code
6009 2004-06-06 20:11 millert
6011 * sudoers.man.in, sudoers.cat: regen
6013 2004-06-06 20:07 millert
6015 * sudoers, sudoers.pod: Correct description of where Defaults specs
6018 2004-06-06 20:02 millert
6020 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
6021 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
6023 2004-06-06 19:58 millert
6025 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
6026 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
6027 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
6028 Remove trailing spaces, no actual code changes.
6030 2004-06-06 16:22 millert
6032 * parse.yacc: Fix a >=0 that should be <0 that was improperly
6033 converted when UNSPEC was added.
6035 2004-06-06 15:54 millert
6037 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
6038 to UNSPEC, not NOMATCH when resetting it.
6040 2004-06-06 15:39 millert
6042 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
6044 2004-06-05 13:55 millert
6046 * README.LDAP: Update for configure changes
6048 2004-06-05 13:42 millert
6050 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
6051 respectively) and use these in parse.yacc. Also in parse.yacc
6052 initialize the *_matches vars to UNSPEC and add two macros,
6053 SETMATCH and SETNMATCH for use when setting *_matches to a value
6054 that may be NOMATCH/UNSPEC/TRUE/FALSE.
6056 2004-06-05 11:17 millert
6058 * parse.yacc: Initialize runas to -2, not -1 since we need to be
6059 able to distinguish between the initialized value and the value
6060 of a non-match when passing along the runas value to multiple
6063 The result of this is that an unmatched runas is now set to -1,
6064 not 0. This is required now that parse.c treats a FALSE value
6065 for runas as being explicitly denied.
6067 2004-06-03 16:21 millert
6069 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
6071 2004-06-03 12:37 millert
6073 * configure, configure.in: Add tests for what libs we need to link
6074 with for ldap and for whether or not lber.h needs to be
6075 explicitly included.
6077 2004-06-02 20:30 aaron
6079 * ldap.c: Solaris native LDAP build fix
6081 2004-06-01 16:56 millert
6083 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6084 use of an unset variable.
6086 2004-06-01 16:56 millert
6088 * sudo.h: Add prototype for sudo_ldap_list_matches
6090 2004-06-01 16:53 millert
6092 * compat.h, config.h.in, configure, configure.in: Better check for
6093 dirfd macro--we now set HAVE_DIRFD for the macro version too.
6094 Added check for dd_fd in `DIR' if no dirfd is found; this is now
6095 used to confitionally define the dirfd macro in compat.h.
6097 2004-06-01 16:51 millert
6099 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6102 2004-06-01 15:13 millert
6104 * compat.h, config.h.in, configure, configure.in: Add a check for a
6105 dirfd() function (like Linux) and add a dirfd macro in compat.h
6106 if there is no dirfd() function or macro.
6108 2004-06-01 14:59 millert
6110 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6113 2004-06-01 14:30 millert
6115 * CHANGES: Clarify closefrom() note.
6117 2004-06-01 12:51 millert
6119 * parse.c: When checking for a command in the directory, only copy
6122 2004-06-01 12:44 millert
6124 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6125 Solaris closefrom() and only close the descriptors listed
6128 2004-06-01 12:23 millert
6130 * alloc.c: compat.h guarantees INT_MAX is defined.
6132 2004-06-01 12:23 millert
6134 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6135 without it and remove definition of RLIM_INFINITY (now unused).
6137 2004-05-31 21:22 millert
6139 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6140 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6141 since the former is standardized.
6143 2004-05-31 19:18 millert
6147 2004-05-31 19:10 millert
6149 * RUNSON: Add some entries that were mailed in a while ago
6151 2004-05-31 14:16 millert
6153 * closefrom.c: o sysconf returns a long, not an int. o check for
6154 negative return value from sysconf/getdtablesize and use
6155 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6156 without it (a fair guess...)
6158 2004-05-30 12:25 millert
6160 * UPGRADE: Mention change in parse order for RunAs entries.
6162 2004-05-30 12:15 millert
6166 2004-05-29 18:29 millert
6168 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6169 now takes an optional dir as a parameter
6170 o added check for ldap_initialize() and start_tls_s()
6172 2004-05-29 14:54 millert
6174 * README.LDAP: Fix some typos, word choice and formatting issues.
6176 2004-05-28 18:06 millert
6178 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6179 stdio and just use read/write as it is simpler.
6181 2004-05-28 16:27 millert
6183 * configure, configure.in: Remove hack overriding cross-compiler
6184 check. It should no longer be needed.
6186 2004-05-28 16:26 millert
6188 * compat.h: Remove select() compat bits since we no longer use
6191 2004-05-28 16:24 millert
6193 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6194 timeout for systems that don't fully/properly implement select().
6196 2004-05-27 19:14 millert
6200 2004-05-27 19:12 millert
6204 2004-05-27 19:12 millert
6206 * set_perms.c: Deal with systems that have no way of setting the
6207 effective uid such as nsr-tandem-nsk.
6209 2004-05-27 19:01 millert
6211 * configure, configure.in: Define NO_SAVED_IDS if we don't find
6214 2004-05-27 18:21 millert
6216 * config.h.in, configure, configure.in: Add back check for
6217 setreuid() since NSK doesn't have it.
6219 2004-05-27 15:57 millert
6221 * sudoers.cat, sudoers.man.in: regen
6223 2004-05-27 15:56 millert
6225 * BUGS, CHANGES: sync
6227 2004-05-27 15:55 millert
6229 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6230 user was explicitly denied and the command matched. This fixes a
6231 long-standing bug and makes: foo machine = (ALL)
6232 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6234 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6236 2004-05-27 15:52 millert
6238 * sudoers.pod: Clarify mail_noperm
6240 2004-05-19 21:25 aaron
6242 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6244 2004-05-17 18:32 millert
6246 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6247 sudoers.cat, visudo.cat: regen
6249 2004-05-17 18:31 millert
6253 2004-05-17 18:31 millert
6255 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6256 remembers these?) and add a minimal sudoedit example.
6258 2004-05-17 18:21 millert
6260 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6261 filesystem -> file system
6263 2004-05-17 18:19 millert
6265 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6267 2004-05-17 18:10 millert
6271 2004-05-17 17:57 millert
6273 * visudo.pod: remove my email addr
6275 2004-05-17 17:55 millert
6277 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6278 @mansectsu@ everywhere Make man page references links with L<>
6280 2004-05-17 16:51 millert
6282 * parse.lex: Accept quoted globbing characters and pass them
6283 verbatim for fnmatch()
6285 2004-05-17 16:50 millert
6287 * UPGRADE: Document that /tmp/.odus is gone.
6289 2004-05-17 16:28 millert
6291 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6292 /tmp/.odus as a possible timestamp dir unless specifically
6293 configured to do so. Instead, if no /var/run exists, use
6294 /var/adm/sudo or /usr/adm/sudo.
6296 2004-05-17 16:08 millert
6298 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6299 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6300 on patches from Tom Bates.
6302 2004-05-16 18:47 millert
6304 * CHANGES: There was no 1.6.7p6.
6306 2004-05-16 16:38 millert
6308 * BUGS, CHANGES: sync
6310 2004-05-16 16:36 millert
6312 * Makefile.in: add missing files to DISTFILES
6314 2004-05-16 16:23 millert
6316 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6318 2004-05-16 16:20 millert
6320 * Makefile.in: Fix some line wrap and update (c) year
6322 2004-04-28 15:05 aaron
6324 * README.LDAP: Build Note
6326 2004-04-06 22:03 aaron
6328 * Makefile.in: Fix install-dirs
6330 2004-04-04 20:27 millert
6332 * visudo.c: In Exit() when used as a signal handler, emsg is a
6333 pointer so sizeof() is wrong so make it a #define instead. Also
6334 avoid using a negative exit value. Found by Aaron Campbell
6336 2004-03-24 18:23 millert
6338 * sudoers.pod: Remove bogus sentence about uids in a User_List.
6339 Document usernames vs. uid parsing in a Runas_List.
6341 2004-03-24 18:06 millert
6343 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6344 the user specified a uid with the -u flag and the uid exists in
6345 the passwd file, set runas_user to the name, not the uid.
6347 When comparing usernames in sudoers, if a name is really a uid
6348 (starts with '#') compare it numerically to pw_uid.
6350 2004-03-22 13:35 millert
6352 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6354 2004-02-28 18:54 aaron
6356 * CHANGES, config.h.in, ldap.c: Added start_tls support
6358 2004-02-14 18:04 millert
6360 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6361 def_data.c, def_data.h to PARSESRCS.
6363 2004-02-14 10:13 aaron
6365 * strlcat.c, strlcpy.c: Un-Fix last license munge
6367 2004-02-13 16:37 millert
6369 * CHANGES, RUNSON, TODO: checkpoint
6371 2004-02-13 16:37 millert
6373 * lex.yy.c, configure: regen
6375 2004-02-13 16:36 millert
6377 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6378 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6379 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6380 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6381 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6382 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6383 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6384 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6385 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6386 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6387 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6388 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6389 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6390 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6391 emul/search.h, emul/utime.h: More to a less restrictive,
6394 2004-02-12 21:08 aaron
6396 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6397 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6398 sudoers2ldif: Merged in LDAP Support
6400 2004-02-08 15:53 millert
6402 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6405 2004-02-06 18:08 millert
6407 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6408 already 0 so set the euid first, then just call setuid(0) to set
6411 2004-02-06 14:52 millert
6413 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6414 appropriate instead of seteuid() which may not exist.
6416 2004-02-04 14:58 millert
6420 2004-02-03 23:38 millert
6422 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6423 --with-pc-insults configure option
6425 2004-02-03 23:32 millert
6427 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6429 2004-02-01 15:45 millert
6431 * sudo.man.in, sudoers.man.in: regen
6433 2004-02-01 15:44 millert
6435 * sudoers.pod: Add a note that noexec is not a cure-all.
6437 2004-02-01 15:20 millert
6439 * sudoers.pod: Mention that disabling "root_sudo" is pretty
6442 2004-02-01 15:20 millert
6444 * configure, configure.in: Substitute for root_sudo in sudoers.pod
6446 2004-02-01 15:03 millert
6448 * sudo.pod: Add sudoedit to the NAME section
6450 2004-02-01 15:00 millert
6452 * sudoers.pod: Document that fact that setting ignore_dot in
6453 sudoers has no effect due to the fact that find_path() is called
6454 *before* sudoers is read.
6456 2004-01-29 19:50 millert
6458 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6460 2004-01-29 19:42 millert
6462 * BUGS, CHANGES, TODO: sync
6464 2004-01-29 19:42 millert
6466 * sudo.man.in: regen
6468 2004-01-29 19:41 millert
6470 * sudo.pod: Clarify that when sudo is run by root with the
6471 SUDO_USER variable set, the sudoers lookup happens for root and
6472 not the SUDO_USER user.
6474 2004-01-29 17:33 millert
6476 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6477 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6478 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6480 2004-01-29 16:22 millert
6482 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6484 2004-01-29 16:15 millert
6486 * sudo.c: Don't look at prev_user until after we've parsed sudoers
6487 and done the password check. That way, if sudo/sudoedit is run
6488 from a root process that was invoked by sudo, we check sudoers
6489 for root, not the previous user. This makes sudoedit much more
6490 useful and means that for the sudo case, we get correct logging
6491 on who actually ran the command.
6493 2004-01-22 19:22 millert
6495 * sudo_edit.c: Add a comment describing why we need to be notified
6496 about our child stopping.
6498 2004-01-22 16:06 millert
6500 * def_data.c, def_data.in: Update the noexec variable descriptions
6502 2004-01-22 14:18 millert
6504 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6507 2004-01-22 12:14 millert
6509 * sudo_noexec.c: Alas, all the world does not go through execve(2).
6510 Many systems still have an execv(2) system call, Linux 2.6
6511 provides fexecve(2) and it is not uncommon for libc to have
6512 underscore ('_') versions of the functions to be used internally
6513 by the library. Instead of stubbing all these out by hand,
6514 define a macro and let it do the work. Extra exec functions
6515 pointed out by Reznic Valery.
6517 2004-01-21 21:57 millert
6519 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6520 Because we do a fork() first we need to be notified when the
6521 child has been stopped and then send that same signal to ourself
6522 so the shell can do its job control thing.
6524 2004-01-21 21:44 millert
6526 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6527 systems out there that want to run sudo that still don't support
6528 these we can try to deal with that later.
6530 2004-01-21 20:03 millert
6534 2004-01-21 20:00 millert
6536 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6539 2004-01-21 19:08 millert
6541 * configure, configure.in: fix typo
6543 2004-01-21 19:02 millert
6545 * config.h.in, configure.in: Add SET/CLR/ISSET
6547 2004-01-21 18:55 millert
6549 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6550 Pretty print the long usage() line to not wrap (assumes 80 char
6553 2004-01-21 18:01 millert
6555 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6556 is implied and no other flags are permitted.
6558 2004-01-21 18:00 millert
6560 * sudo.h: Add a new flag, -e, that makes it possible to give users
6561 the ability to edit files with the editor of their choice as the
6562 invoking user, not the runas user. Temporary files are used for
6563 the actual edit and the temp file is copied over the original
6564 after the editor is done.
6566 2004-01-21 17:25 millert
6568 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6569 flag, -e, that makes it possible to give users the ability to
6570 edit files with the editor of their choice as the invoking user,
6571 not the runas user. Temporary files are used for the actual edit
6572 and the temp file is copied over the original after the editor is
6575 2004-01-21 17:06 millert
6577 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6578 variables is set, use that to determine the invoking user's true
6579 identity. That way the proper info gets logged by someone who
6580 has done "sudo su" but still uses sudo to as root. We can't do
6581 this for non-root users since that would open up a security hole,
6582 though perhaps it would be acceptable to use getlogin(2) on OSes
6583 where this a system call (and doesn't just look in the utmp
6586 2004-01-21 16:58 millert
6588 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6590 2004-01-21 16:57 millert
6592 * configure, config.h.in, configure.in: Add check for fchown(2)
6594 2004-01-20 14:22 millert
6596 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6597 set_runaspw. It is far to late to set NewArgv[0] there and will
6598 have no effect anyway as cmnd and safe_cmnd have already been
6601 2004-01-20 14:18 millert
6603 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6606 2004-01-18 20:17 millert
6608 * env.c, sudo.c: In -i mode always set new environment based on the
6609 runas user's passwd entry.
6611 2004-01-18 17:56 millert
6613 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6614 section with usage() in sudo.c. Also sort the flags in the
6617 2004-01-18 17:55 millert
6619 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6620 patches from David J. MacKenzie o Sort the flags in the usage
6623 2004-01-18 17:22 millert
6625 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6628 2004-01-17 16:34 millert
6630 * sudo.c: Change euid to runas user before calling find_path().
6631 Unfortunately, though runas_user can be modified in sudoers we
6632 haven't parsed sudoers yet.
6634 2004-01-17 16:25 millert
6636 * sudoers.man.in, sudoers.pod: Add missing defintion of
6637 Parameter_List and use single pipes in the Defaults EBNF
6640 2004-01-17 13:49 millert
6642 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6643 don't want to reset the contents of runas_pw if the user
6644 specified a user via the -u flag.
6646 Avoid unnecessary passwd lookups in set_authpw(). In most cases
6647 we already have the info in runas_pw.
6649 2004-01-16 18:16 millert
6651 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6654 2004-01-16 18:12 millert
6656 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6658 2004-01-16 18:10 millert
6660 * parse.c: If we can't stat the command as root, try as the runas
6663 2004-01-16 18:09 millert
6665 * testsudoers.c, visudo.c: Add stub set_runaspw() function
6667 2004-01-16 18:09 millert
6669 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6670 will be used as a callback to update runas_pw when the runas user
6673 2004-01-16 18:07 millert
6675 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6677 2004-01-16 18:05 millert
6679 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6680 a PERM_RUNAS that just changes the euid.
6682 2004-01-16 18:04 millert
6684 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6685 allocate memory in one chunk for easy free()ing. Also change it
6686 from static to extern.
6688 2004-01-16 18:03 millert
6690 * defaults.c, defaults.h: Add callback support
6692 2004-01-16 18:02 millert
6694 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6695 it for runas_default
6697 2004-01-15 15:13 millert
6699 * auth/fwtk.c: Add support for chalnecho and display server
6700 responses used by fwtk >= 2.0
6702 2004-01-12 18:39 millert
6704 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6706 2004-01-12 14:03 millert
6708 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6709 sudo.h: Use closefrom() instead of doing the equivalent inline.
6711 2004-01-12 13:55 millert
6713 * closefrom.c: closefrom(3) for systems w/o it
6715 2004-01-09 16:29 millert
6717 * sudoers.man.in: Update from .pod file.
6719 2004-01-09 16:26 millert
6721 * configure, configure.in: Substitute noexec_file for the sudoers
6724 2004-01-09 16:24 millert
6726 * sudo.man.in, sudo.pod: Mention noexec
6728 2004-01-09 16:16 millert
6730 * sudoers.man.in, sudoers.pod: Document noexec
6732 2004-01-09 14:38 millert
6734 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6735 definition from config.h to pam.c where it belongs. We can't
6736 have this in config.h since that gets included too early.
6738 2004-01-09 14:35 millert
6740 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6741 implementations put their headers in /usr/include/pam instead of
6742 /usr/include/security.
6744 2004-01-09 14:32 millert
6746 * configure.in: I missed changing the EXEC macro -> EXECV here when
6747 I changed this in config.h.in and sudo.c a while ago.
6749 2004-01-09 13:15 millert
6751 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6753 2004-01-09 03:29 millert
6755 * configure, configure.in: o merge the hpux case entries into a
6756 single entry w/ its own sub-case statement. o HP-UX >= 11
6757 support getspnam(), use it in preference to getprpwuid()
6759 2004-01-09 02:58 millert
6761 * configure, configure.in: eval $shrext so that it expands nicely
6764 2004-01-09 02:50 millert
6766 * Makefile.in: Don't lie about making a module, it does the wrong
6769 2004-01-09 02:49 millert
6771 * ltmain.sh: Remove requirement that libs must begin with "lib".
6772 They don't when we point directly at the lib using LD_PRELOAD or
6775 2004-01-09 02:01 millert
6777 * acsite.m4: Disable support for c++, f77 and java. We don't need
6778 it, it takes a lot of time, and it hosed our check for shared lib
6781 2004-01-09 02:00 millert
6785 2004-01-09 02:00 millert
6787 * configure.in: Call AC_ENABLE_SHARED and check the status of
6788 enable_shared to know when shared libs are available.
6790 2004-01-09 01:37 millert
6792 * acsite.m4: Duh, OpenBSD suports shared libs too
6794 2004-01-09 01:18 millert
6796 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6799 2004-01-09 01:15 millert
6801 * configure, configure.in: o No need to check for sed, libtool
6802 config does that for us o move check for --with-noexec until
6803 after libtool magic is run so we can use $can_build_shared and
6806 2004-01-09 01:14 millert
6808 * ltmain.sh: Don't print a bunch of crap about library installs
6809 since we are not really installing a library.
6811 2004-01-09 00:38 millert
6813 * env.c: Make format_env() varargs Add noexec support for Darwin,
6814 MacOS X, Irix, and Tru64
6816 2004-01-09 00:32 millert
6818 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6819 changes: o no ldconfig in the finish step o assume no libprefix
6820 or version is needed
6822 2004-01-09 00:15 millert
6824 * sudo_noexec.c: Fix compilation under K&R
6826 2004-01-06 09:31 millert
6828 * CHANGES: checkpoint
6830 2004-01-06 09:28 millert
6832 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6833 noexec functionality
6835 2004-01-06 01:42 millert
6837 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6838 issue with generated code.
6840 2004-01-05 16:10 millert
6842 * def_data.c, def_data.h, def_data.in: Move the environment
6843 defaults to the end and shorten a few of the descriptions.
6845 2004-01-05 15:05 millert
6847 * configure.in, configure: no shared libs on ultris or convexos
6849 2004-01-05 15:03 millert
6851 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6852 object using libtool; could use some cleanup.
6854 2004-01-05 14:59 millert
6856 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6858 2004-01-05 14:56 millert
6860 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6861 that order is not important.
6863 2004-01-05 12:15 millert
6865 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6866 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6868 2004-01-04 22:58 millert
6870 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6871 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6872 option. The default value of noexec_file is set to this.
6874 2004-01-04 21:48 millert
6876 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6877 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6878 support for preloading a shared object containing a dummy
6879 execve() function that just sets error and returns -1. This adds
6880 a "noexec_file" option to load the filename as well as a "noexec"
6881 flag to enable it unconditionally. There is also a NOEXEC tag
6882 that can be attached to specific commands and an EXEC tag to
6885 2004-01-04 21:40 millert
6887 * mkdefaults: add missing newline to usage statement
6889 2004-01-04 20:39 millert
6891 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6893 2004-01-04 20:16 millert
6895 * logging.c: Don't truncate usernames to 8 characters in the log
6898 2004-01-04 20:13 millert
6900 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6902 2004-01-04 20:12 millert
6904 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6905 sudoers.pod: Add a new option, lecture_file, that can be used to
6906 point to a custom sudo lecture.
6908 2003-12-31 17:46 millert
6910 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6911 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6912 zero_bytes() function to do the equivalent of bzero in such a way
6913 that will heopfully not be optimized away by sneaky compilers.
6915 2003-12-31 13:35 millert
6917 * err.c: Use #ifdef __STDC__, not #if __STDC__.
6919 2003-12-30 17:41 millert
6921 * mkdefaults: Always put at least one space between the def_* macro
6922 name and its definition.
6924 2003-12-30 17:34 millert
6926 * configure, configure.in: Adjust code for --without-lecture to
6929 2003-12-30 17:33 millert
6931 * visudo.man.in: regen after pasto fix
6933 2003-12-30 17:31 millert
6935 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6936 from a flag to a tuple.
6938 2003-12-30 17:31 millert
6940 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6941 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6942 support for tuples in def_data.in; these are implemented as an
6943 enum type. Currently there is only a single tuple enum but in
6944 the future we may have one tuple enum per T_TUPLE entry in
6945 def_data.in. Currently listpw, verifypw and lecture are tuples.
6946 This avoids the need to have two entries (one ival, one str) for
6947 pwflags and syslog values.
6949 lecture is now a tuple with the following values: never, once,
6952 We no longer use both an int and string entry for syslog
6953 facilities and priorities. Instead, there are logfac2str() and
6954 logpri2str() functions that get used when we need to print the
6957 2003-12-30 17:20 millert
6959 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6960 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6961 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6962 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6963 auth/sudo_auth.c: Create def_* macros for each defaults value so
6964 we no longer need the def_{flag,ival,str,list,mode} macros (which
6965 have been removed). This is a step toward more flexible data
6966 types in def_data.in.
6968 2003-12-30 15:55 millert
6972 2003-12-22 21:18 millert
6974 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6975 unusual for users to place "sudo -k" in a .logout file which can
6976 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6977 daemon has died. Previously, this would result in useless mail
6980 2003-12-16 13:51 millert
6982 * visudo.pod: fix pasto in VISUAL description
6984 2003-12-09 22:09 millert
6988 2003-12-09 22:08 millert
6990 * CHANGES: checkpoint
6992 2003-12-09 22:02 millert
6994 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6997 2003-08-12 16:45 millert
6999 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
7002 2003-06-28 21:31 millert
7004 * auth/pam.c: Fix a core dump on Solaris by preserving the
7005 pam_handle_t we used during authentication for pam_prep_user().
7006 If we didn't authenticate (ie: ticket still valid), we call
7007 pam_init() from pam_prep_user(). This is something of a hack; it
7008 may be better to change the auth API and add an auth_final()
7009 function that acts like pam_prep_user().
7011 2003-06-21 12:50 millert
7013 * set_perms.c: Add explicit declaration of printerr variable in
7014 function header (was defaulting to int which is OK but oh so K&R
7017 2003-06-09 19:00 millert
7019 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
7021 2003-06-09 16:07 millert
7023 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
7024 problem where the sudo process would spin eating up CPU until
7025 sendmail finished when it has to send mail.
7027 2003-05-30 16:22 millert
7029 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
7032 2003-05-21 21:53 millert
7034 * parse.c: Don't assume that getgrnam() calls don't modify contents
7035 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
7036 can happen. Based on a patch from Kirk Webb.
7038 2003-05-06 11:25 millert
7040 * configure.in: missing ;;
7042 2003-05-06 00:53 millert
7044 * configure.in: darwin has a broken setreuid() in at least some
7047 2003-05-06 00:31 millert
7049 * env.c: Fix an off by one error when reallocating the environment;
7052 2003-04-30 14:04 millert
7054 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
7056 2003-04-28 19:30 millert
7058 * HISTORY: More info on the early days from Coggs.
7060 2003-04-21 14:47 millert
7062 * auth/kerb5.c: remove errant semicolon that prevented compilation
7065 2003-04-15 20:42 millert
7067 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
7068 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
7069 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
7070 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
7071 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7072 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7073 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7074 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7075 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7076 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7077 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7080 2003-04-15 20:25 millert
7082 * LICENSE: slightly different wording for the darpa credit
7084 2003-04-15 14:37 millert
7086 * LICENSE: Add DARPA credit
7088 2003-04-14 16:49 millert
7090 * auth/kerb5.c: Use krb5_princ_component() instead of
7091 krb5_princ_realm() for MIT Kerberos like we did before I messed
7094 Use krb5_principal_get_comp_string() to do the same thing w/
7095 Heimdal. I'm not sure if the component should be 0 or 1 in this
7098 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7099 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7100 should be a configure check for this I guess.
7102 2003-04-13 15:48 millert
7104 * TROUBLESHOOTING, config.h.in, configure, configure.in,
7105 sample.sudoers: builtin -> built-in; Jason McIntyre
7107 2003-04-13 15:45 millert
7109 * sudoers.pod: built in -> built-in; Jason McIntyre
7111 2003-04-09 16:14 millert
7113 * CHANGES: checkpoint for 1.6.7p3
7115 2003-04-09 16:14 millert
7117 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7118 Spencer. Amazingly, sudo source from 1985 is available via
7121 2003-04-09 16:13 millert
7123 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7124 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7125 for the RLIMIT_CORE restoration on some OSes.
7127 2003-04-04 12:46 millert
7129 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7131 2003-04-04 12:45 millert
7133 * config.h.in, configure, configure.in: Check for heimdal even if
7134 we found krb5-config and define HAVE_HEIMDAL.
7136 2003-04-03 22:04 millert
7138 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7139 The former is no longer defined by MIT kerb5 (though it used to
7140 be and indeed remains so in Heimdal).
7142 2003-04-03 10:16 millert
7144 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7145 duplicate) directories to "mkdir -p" since that seems to break on
7146 Tru64 Unix at least. This basically brings back what shipped
7149 2003-04-02 13:57 millert
7151 * auth/kerb5.c: Correct number of args to
7152 krb5_principal_get_realm() and fix an unclosed comment that hid
7155 2003-04-02 13:45 millert
7159 2003-04-02 13:45 millert
7161 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7162 configure.in, version.h: ++version
7164 2003-04-02 13:44 millert
7166 * configure.in: use krb5-config to determine Kerberos V details if
7169 2003-04-02 13:25 millert
7171 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7172 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7173 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7174 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7175 throughout. The main exception is openlog(). Since the admin
7176 may be filtering logs based on the program name in the log files,
7177 hard code this to "sudo".
7179 2003-04-02 13:16 millert
7181 * Makefile.in: Add getprogname.c and err.c
7183 2003-04-02 13:15 millert
7187 2003-04-02 13:15 millert
7189 * configure.in, config.h.in: Add checks for getprognam(),
7190 __progname and err.h
7192 2003-04-02 13:14 millert
7194 * err.c, emul/err.h: For systems withour err/warn functions.
7196 2003-04-02 13:14 millert
7198 * getprogname.c: For systems neither getprogname() nor __progname;
7201 2003-04-01 10:09 millert
7203 * CHANGES: checkpoint for 1.6.7p1
7205 2003-04-01 10:02 millert
7207 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7209 2003-04-01 09:58 millert
7211 * check.c: oflow detection in expand_prompt() was faulty (false
7212 positives). The count was based on strlcat() return value which
7213 includes the length of the entire string.
7215 2003-03-30 19:02 millert
7217 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7219 2003-03-24 16:09 millert
7221 * logging.c: g/c unused variable
7223 2003-03-24 11:06 millert
7227 2003-03-24 11:05 millert
7229 * configure.in: use man sections 8 and 5 for csops
7231 2003-03-21 18:11 millert
7235 2003-03-21 15:10 millert
7237 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7238 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7240 2003-03-21 14:02 millert
7244 2003-03-21 14:01 millert
7246 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7247 An alternate libpath may be specified or -blibpath support can be
7248 disabled. Also change conifgure such that -blibpath is not
7249 specified if no -L libpaths were added to SUDO_LDFLAGS.
7251 2003-03-20 22:05 millert
7253 * configure.in: add AIX blibpath support
7255 2003-03-20 20:28 millert
7257 * INSTALL, configure.in: --with-skey and --with-opie now take an
7258 option directory argument This obsoletes a --with-csops hack
7261 Also remove the remaining direct uses of "echo"
7263 2003-03-20 17:44 millert
7265 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7266 -lroken optional for KTH Kerberos IV and V.
7268 2003-03-20 14:42 millert
7270 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7271 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7274 2003-03-20 14:40 millert
7276 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7277 There is a new configure option, --with-rpath to control this
7280 2003-03-19 23:50 millert
7282 * configure.in: for kerb4 put libdes after libkrb on the link line
7284 2003-03-19 23:49 millert
7286 * auth/kerb4.c: typo
7288 2003-03-19 23:33 millert
7290 * configure.in: fix kerberos lib check when a path is specified
7292 2003-03-19 21:04 millert
7294 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7295 reapchild after sending mail instead of doing a conditional
7298 2003-03-19 16:20 millert
7302 2003-03-19 16:19 millert
7304 * configure.in: replace =DIR with [=DIR] where sensible
7306 2003-03-19 16:16 millert
7308 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7309 include/lib detection based on openssh's configure.in
7311 2003-03-19 15:58 millert
7313 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7316 2003-03-15 22:03 millert
7318 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7319 says username is 32 bytes.
7321 2003-03-15 21:18 millert
7323 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7324 snprintf, not sprintf
7326 2003-03-15 21:18 millert
7328 * auth/rfc1938.c: use snprintf
7330 2003-03-15 15:37 millert
7332 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7333 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7336 2003-03-15 15:31 millert
7338 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7339 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7340 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7341 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7342 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7345 2003-03-15 15:19 millert
7347 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7350 2003-03-15 15:17 millert
7354 2003-03-15 15:16 millert
7356 * configure.in: correct error messages for
7357 --with-sudoers-{mode,uid,gid}
7359 2003-03-15 15:10 millert
7361 * alloc.c: make the malloc(0) error specific to each function to
7362 aid tracking down bugs.
7364 2003-03-15 14:49 millert
7366 * alloc.c: deal with platforms where size_t is signed and there is
7367 no SIZE_MAX or SIZE_T_MAX
7369 2003-03-15 14:10 millert
7371 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7374 2003-03-15 13:02 millert
7376 * sudo.c: Use stat_sudoers macro so --with-stow can work
7378 2003-03-15 13:01 millert
7380 * INSTALL, config.h.in, configure, configure.in: Add support for
7381 --with-stow based on patches from Robert Uhl
7383 2003-03-15 12:51 millert
7385 * env.c: fix indentation
7387 2003-03-15 00:21 millert
7389 * configure.in: back out rev 1.352
7391 2003-03-14 20:11 millert
7395 2003-03-14 20:11 millert
7397 * parse.lex: use strlcpy, not strncpy
7399 2003-03-14 19:48 millert
7401 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7402 setusercontext() failure.
7404 2003-03-14 19:43 millert
7406 * logging.c: use pid_t
7408 2003-03-14 10:43 millert
7410 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7412 2003-03-14 10:35 millert
7414 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7416 2003-03-13 21:47 millert
7418 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7420 2003-03-13 21:38 millert
7424 2003-03-13 21:38 millert
7426 * configure.in: put -ldl after -lpam, not before; fixes static
7429 2003-03-13 21:17 millert
7431 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7434 2003-03-13 20:24 millert
7436 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7437 sudoers.cat, visudo.cat: regen
7439 2003-03-13 20:23 millert
7441 * Makefile.in: Preserve copyright notice from .pod file in .man.in
7444 2003-03-13 20:01 millert
7446 * visudo.pod: Add sudoers(5) to SEE ALSO
7448 2003-03-13 15:27 millert
7452 2003-03-13 15:27 millert
7454 * parse.lex: Don't assume libc can realloc() a NULL string. If
7455 malloc/realloc fails, make sure we just return; yyerror() is not
7458 2003-03-13 15:17 millert
7462 2003-03-13 15:17 millert
7464 * parse.lex: simplify fill_args a little and use strlcpy for
7467 2003-03-13 15:00 millert
7469 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7470 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7471 overflow. In all cases the strings were either pre-allocated to
7472 the correct size of length checks were done before the copy but a
7473 little paranoia can go a long way.
7475 2003-03-13 12:54 millert
7477 * sudo.h: Add strlc{at,py} protos
7479 2003-03-13 12:03 millert
7481 * env.c, interfaces.c: Use erealloc3()
7483 2003-03-13 12:00 millert
7487 2003-03-13 12:00 millert
7489 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7490 need >=). Use memcpy() instead of strcpy() in estrdup() so this
7493 2003-03-13 11:58 millert
7495 * sudo.c: snprintf() a uid as %lu, not %ld to match the
7496 MAX_UID_T_LEN test in configure.
7498 2003-03-13 11:56 millert
7500 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7503 2003-03-12 18:46 millert
7505 * sudo.c: Use snprintf() for paranoia
7507 2003-03-12 17:16 millert
7509 * parse.yacc: Use emalloc2 and erealloc3
7511 2003-03-12 17:08 millert
7513 * Makefile.in: strlc{at,py} for those w/o it
7515 2003-03-12 17:07 millert
7517 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7519 2003-03-12 17:07 millert
7521 * config.h.in, configure, configure.in: Add stlc{at,py} for those
7524 2003-03-12 16:51 millert
7526 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7529 2003-03-12 16:45 millert
7531 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7534 2003-03-12 16:41 millert
7536 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7537 bzero and with error/oflow checking.
7539 2003-03-12 16:23 millert
7541 * alloc.c: Error out on malloc(0); suggested by theo
7543 2003-03-09 19:34 millert
7545 * configure, configure.in: fix a typo; David Krause
7547 2003-03-07 10:46 millert
7549 * sudo.pod: fix typo
7551 2003-03-03 21:47 millert
7553 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7555 2003-03-01 13:20 millert
7557 * configure.in, config.h.in: not not; Anil Madhavapeddy
7559 2003-01-23 03:03 millert
7561 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7563 2003-01-20 16:13 millert
7565 * parse.yacc: Add some missing ';' rule terminators that bison
7568 2003-01-20 16:07 millert
7570 * config.sub: fix typo I introduced in last merge
7572 2003-01-20 15:59 millert
7574 * configure: regenerate with autoconf 2.57
7576 2003-01-20 15:58 millert
7578 * config.h.in: Add missing "$HOME"
7580 2003-01-20 15:57 millert
7582 * configure.in: Add some more square backets to make autoconf 2.57
7585 2003-01-20 14:39 millert
7587 * config.guess, config.sub, mkinstalldirs: Updates from
7590 2003-01-17 18:10 millert
7592 * lex.yy.c, sudo.tab.h: regen
7594 2003-01-17 18:09 millert
7596 * parse.lex, parse.yacc, sudoers.pod: Add support for
7599 2003-01-06 19:10 millert
7601 * visudo.c: fclose() yyin after each yyparse() is done and use
7602 fopen() instead of using freopen().
7604 2003-01-06 19:02 millert
7606 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7607 It looks like the issue is that yyrestart() does not reset the
7608 start condition to INITIAL which is an issue since we parse
7609 sudoers multiple times.
7611 2003-01-06 18:47 millert
7613 * parse.lex: Work around what appears to be a flex bug when dealing
7614 with files that lack a final newline before EOF. This adds a
7615 rule to match EOF in the non-initial states which resets the
7616 state to INITIAL and throws an error.
7618 2003-01-06 15:06 millert
7620 * visudo.c: o The parser needs sudoers to end with a newline but
7621 some editors (emacs) may not add one. Check for a missing
7622 newline at EOF and add one if needed. o Set quiet flag during
7623 initial sudoers parse (to get options) o Move yyrestart() call
7624 and always use freopen() to open yyin after initial sudoers
7627 2002-12-15 11:24 millert
7629 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7630 Want to set effective gid, not real gid, when reading sudoers.
7632 2002-12-15 11:08 millert
7634 * set_perms.c: don't compile set_perms_posix if we have setreuid or
7637 2002-12-14 14:21 millert
7639 * sudo.pod, sudoers.pod: document new prompt escapes
7641 2002-12-14 14:15 millert
7643 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7644 now gets collapsed to "%" as was originally intended. This also
7645 gets rid of lastchar (does lookahead instead of lookback) which
7646 should simplify the logic slightly.
7648 2002-12-13 13:20 millert
7650 * tgetpass.c: Write the prompt *after* turning off echo to avoid
7651 some password characters being echoed on heavily-loaded machines
7654 2002-12-13 13:09 millert
7656 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7658 2002-12-13 12:48 millert
7660 * configure.in: Fix IRIX fallout from name changes in man dir/sect
7661 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7664 2002-12-13 11:33 millert
7666 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7667 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7669 2002-11-28 18:43 millert
7671 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7674 2002-11-26 12:09 millert
7676 * sudo.c: fix typo in comment; Pedro Bastos
7678 2002-11-22 14:41 millert
7680 * INSTALL: document --disable-setresuid
7682 2002-11-22 14:41 millert
7684 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7685 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7686 optimizers from removing memset() calls.
7688 2002-11-22 14:11 millert
7690 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7693 2002-11-22 14:09 millert
7695 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7696 version based on setresuid() or setreuid() when possible since
7697 that allows us to support the stay_setuid option and we always
7698 know exactly what the semantics will be (various Linux kernels
7699 have broken POSIX saved uid support).
7701 2002-11-22 14:08 millert
7703 * config.h.in, configure: regen from configure.in
7705 2002-11-22 14:07 millert
7707 * configure.in: Add checks for setresuid() and a way to disable
7710 2002-11-22 14:05 millert
7712 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7713 or setre[ug]id(). The new set_perms stuff only uses things it
7716 2002-11-22 13:33 millert
7718 * sudo.c: Before exec, restore state of signal handlers to be the
7719 same as when we were initialy invoked instead of just reseting to
7720 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7721 patch from Paul Markham.
7723 2002-11-22 13:23 millert
7725 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7726 message when sudo is run by root and no_root_sudo is set
7728 2002-09-19 17:27 millert
7730 * README: update ftp link for bison
7732 2002-07-20 08:30 millert
7734 * set_perms.c: Error out if setusercontext() fails and the runas
7737 2002-05-20 16:51 millert
7739 * auth/securid5.c: Fix rcsid
7741 2002-05-20 16:50 millert
7743 * configure.in: Fix SecurID API test
7745 2002-05-17 13:20 millert
7747 * env.c: typo in comment
7749 2002-05-17 13:20 millert
7751 * configure.in: securid5 stuff needs pthreads. Just adding
7752 -lpthread is suboptimal but I don't see a better way at the
7755 2002-05-17 13:04 millert
7757 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7760 2002-05-17 13:02 millert
7762 * configure.in: Add check for SecurID 5.0 API
7764 2002-05-08 16:46 millert
7766 * strerror.c: We actually do still need config.h to get the 'const'
7767 definition for K&R C.
7769 2002-05-05 16:43 millert
7771 * configure: regen with autoconf 2.5.3
7773 2002-05-05 16:25 millert
7775 * configure.in: Don't set sysconfdir to '/etc' if the user has
7776 specified a --prefix.
7778 2002-05-05 16:14 millert
7780 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7781 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7784 2002-05-05 15:58 millert
7786 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7787 dump_defaults() knows how to dump lists.
7789 2002-05-04 21:31 millert
7791 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7792 INSTALL.binary, README: ++version
7794 2002-05-04 20:57 millert
7796 * sudoers.pod: document timestampowner
7798 2002-05-04 20:45 millert
7800 * check.c: Don't call set_perms() when doing timestamp stuff unless
7803 2002-05-04 20:43 millert
7805 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7806 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7809 2002-05-03 18:48 millert
7811 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7812 timestamp dirs. This allows the timestamp dir to be shared via
7813 NFS (though this is not recommended).
7815 2002-05-03 18:47 millert
7817 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7818 of the authentication timestamp dir"
7820 2002-05-02 15:40 millert
7822 * env.c: Don't try to pre-compute the size of the new envp, just
7823 allocate space up front and realloc as needed. Changes to the
7824 new env pointer must all be made through insert_env() which now
7825 keeps track of spaced used and allocates as needed.
7827 2002-04-26 15:12 millert
7831 2002-04-26 15:12 millert
7833 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7835 2002-04-25 11:36 millert
7837 * INSTALL.binary, README: ++version
7839 2002-04-25 11:35 millert
7841 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7842 visudo.man.in, configure: regen
7844 2002-04-25 11:31 millert
7846 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7848 2002-04-25 11:30 millert
7850 * check.c: The the loop used to expand %h and %u, the lastchar
7851 variable was not being initialized. This means that if the last
7852 char in the prompt is '%' and the first char is 'h' or 'u' a
7853 extra copy of the host or user name would be copied, for which
7854 space had not been allocated.
7856 2002-04-18 11:41 millert
7858 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7861 2002-04-18 11:39 millert
7863 * auth/afs.c: #undef VOID to get rid of an AFS warning
7865 2002-04-18 11:38 millert
7867 * env.c: Use easprintf instead of emalloc + sprintf for some
7870 2002-03-15 19:45 millert
7874 2002-03-15 19:44 millert
7876 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7877 Jepeway's email address so people don't bug him ;-)
7879 2002-03-11 22:19 millert
7881 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7882 and also call endgrent() at the same time.
7884 2002-02-21 22:23 millert
7886 * INSTALL: Make it clear which configure options take arguments.
7888 2002-01-25 13:38 millert
7890 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7891 is no RLIM_INFINITY, just pretend it is -1. This works because
7892 we only check for RLIM_INFINITY and do not set anything to that
7895 2002-01-22 11:43 millert
7897 * auth/pam.c: Zero and free allocated memory when there is a
7900 2002-01-21 22:37 millert
7902 * auth/bsdauth.c: Use sigaction() not signal()
7904 2002-01-21 22:26 millert
7906 * INSTALL: Mention that some linux kernels have broken POSIX saved
7909 2002-01-21 21:03 millert
7911 * CHANGES: checkpoint for 1.6.5p2
7913 2002-01-21 21:01 millert
7917 2002-01-21 21:01 millert
7919 * configure.in: Add --disable-setreuid flag
7921 2002-01-21 21:00 millert
7923 * INSTALL: Document new --disable-setreuid option and change
7924 description for --disable-saved-ids to match new error message.
7926 2002-01-21 21:00 millert
7928 * set_perms.c: fatal() now takes an argument that determines
7929 whether or not to call perror().
7931 2002-01-21 20:58 millert
7933 * PORTING, TROUBLESHOOTING: Update for new error messages from
7936 2002-01-21 17:46 millert
7938 * auth/pam.c: Make this compile w/o warnings
7940 2002-01-21 17:36 millert
7942 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7944 2002-01-21 17:25 millert
7946 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7947 was not zeroed after use when AIX authentication, BSD
7948 authentication, FWTK or PAM was in use.
7950 2002-01-20 14:21 millert
7952 * auth/pam.c: Avoid giving PAM a NULL password response, use the
7953 empty string instead. This avoids a log warning when the user
7954 hits ^C at the password prompt when PAM is in use.
7956 2002-01-19 19:46 millert
7958 * auth/pam.c: Don't check the return value of pam_setcred(). In
7959 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7960 not the return code for the setcred module. Because we haven't
7961 called pam_authenticate(), this is not set and so pam_setcred()
7962 returns PAM_PERM_DENIED.
7964 2002-01-19 19:43 millert
7966 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7969 2002-01-18 14:18 millert
7973 2002-01-18 14:18 millert
7975 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7976 has a bogus setreuid() o new NetBSD has a real setreuid() o add
7977 check for freeifaddrs() if getifaddrs() exists.
7979 2002-01-18 14:17 millert
7981 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7982 so add a test for that and if it is not present just use free().
7984 2002-01-17 11:30 millert
7986 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7988 2002-01-17 10:56 millert
7990 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7991 skeyaccess() denies access to normal passwords, not AUTH_FATAL
7992 (which just causes an exit).
7994 2002-01-17 10:35 millert
7996 * visudo.c: Don't use memory after it has been freed.
7998 2002-01-17 00:24 millert
8000 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
8001 Patch from Phillip E. Lobbes
8003 2002-01-16 20:00 millert
8007 2002-01-16 19:53 millert
8009 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
8011 2002-01-16 18:37 millert
8015 2002-01-16 18:37 millert
8017 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
8020 2002-01-16 18:37 millert
8022 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8023 visudo.man.in: sudo version 1.6.5
8025 2002-01-16 16:28 millert
8027 * logging.c: o when invoking the mailer as root use a hard-coded
8028 environment that doesn't include any info from the user's
8029 environment. Basically paranoia.
8031 o Add support for the NO_ROOT_MAILER compile-time option and run
8032 the mailer as the user and not root if NO_ROOT_MAILER is
8035 2002-01-16 16:27 millert
8037 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
8039 2002-01-16 16:26 millert
8043 2002-01-16 16:26 millert
8045 * version.h: version 1.6.5
8047 2002-01-16 16:26 millert
8049 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
8050 option to run the mailer as the user and not root.
8052 2002-01-16 12:44 millert
8054 * CHANGES: checkpoint for 1.6.4p2
8056 2002-01-15 19:22 millert
8058 * PORTING: Mention the "seteuid(0): Operation not permitted"
8059 problem here too just for good measure.
8061 2002-01-15 18:43 millert
8063 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
8064 preserved from the user's environment instead of being reset
8065 based on the passwd database when the "env_reset" option was
8066 used. Now it is reset as it should be.
8068 2002-01-15 17:47 millert
8072 2002-01-15 17:47 millert
8074 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8075 sudo.c: Add a configure option to turn off use of POSIX saved IDs
8077 2002-01-15 15:48 millert
8081 2002-01-15 15:48 millert
8083 * configure.in: add --with-efence option
8085 2002-01-15 15:39 millert
8087 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8088 problem where "sudo -l" would not work if always_set_home was
8091 2002-01-15 13:16 millert
8095 2002-01-15 13:16 millert
8097 * parse.lex: Quoted commas were not being treated correctly in
8098 command line arguments.
8100 2002-01-14 20:53 millert
8102 * sudo.c: o Move the call to rebuild_env() until after
8103 MODE_RESET_HOME is set. Otherwise, the set_home option has no
8106 o Fix use of freed memory when the "fqdn" flag is set. This was
8107 introduced by the fix for the "segv when gethostbynam() fails"
8108 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8109 not set so there is no need to check the "fqdn" flag in
8112 2002-01-14 20:45 millert
8114 * env.c: Add 'continue' statements to optimize the switch
8115 statement. From Solar.
8117 2002-01-13 13:42 millert
8119 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8121 2002-01-13 13:36 millert
8123 * sudoers.pod: Add caveat about stay_setuid flag
8125 2002-01-13 13:29 millert
8127 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8128 is not set, set all uids to 0 and use set_perms_fallback().
8130 2002-01-13 13:28 millert
8132 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8133 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8135 2002-01-13 13:27 millert
8137 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8138 mailer since we never want to run the mailer setuid.
8140 2002-01-12 17:55 millert
8142 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8143 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8145 2002-01-12 14:00 millert
8147 * Makefile.in, Makefile.binary: Fix mansect substitution
8149 2002-01-12 13:15 millert
8151 * Makefile.in: Substitute man sections in Makefile.binary
8153 2002-01-12 13:15 millert
8155 * Makefile.binary: Sync install targets with Makefile.in and
8156 substitute in man sections.
8158 2002-01-12 13:09 millert
8160 * INSTALL, INSTALL.binary: version is 1.6.4
8162 2002-01-12 12:59 millert
8164 * Makefile.in: Repair bindist target
8166 2002-01-12 11:43 millert
8168 * CHANGES: sync for 1.6.4
8170 2002-01-10 13:00 millert
8172 * install-sh: Fix case where neither whoami nor id are found
8174 2002-01-09 12:35 millert
8176 * install-sh: If neither whoami nor id exists, just assume we are
8179 2002-01-09 11:56 millert
8181 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8182 to be needed on AIX which for some reason isn't pulling in the
8185 2002-01-08 10:00 millert
8187 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8189 2002-01-08 09:21 millert
8191 * CHANGES: checkpoint
8193 2002-01-08 09:20 millert
8195 * sudo.c: Defer assigning new environment until right before the
8198 2002-01-08 09:08 millert
8200 * parse.c: kill extra blank line
8202 2002-01-07 13:59 millert
8206 2002-01-07 13:59 millert
8208 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8209 motorola gcc-derived compiler doesn't recognise -O2.
8211 2002-01-06 23:02 millert
8213 * HISTORY: Clarify origins of Root Group sudo a bit based on info
8214 from billp@rootgroup.com
8216 2002-01-02 22:41 millert
8220 2002-01-02 22:26 millert
8222 * CHANGES: checkpoint for 1.6.4rc1
8224 2002-01-02 17:40 millert
8226 * config.h.in: now generated via autoheader
8228 2002-01-02 17:40 millert
8232 2002-01-02 17:37 millert
8234 * compat.h: Move in some stuff that was previously in config.h.
8236 2002-01-02 17:36 millert
8238 * configure.in, aclocal.m4: Add info for autoheader.
8240 2002-01-01 16:53 millert
8242 * Makefile.in: o Add DESTDIR support
8243 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8246 2002-01-01 16:48 millert
8248 * install-sh: Add -M option (like -m but only for root) If we can't
8249 find "whoami", use "id" w/ some sed.
8251 2002-01-01 14:01 millert
8255 2002-01-01 14:00 millert
8257 * configure.in: allow user to always override mansectsu and
8260 2001-12-31 17:05 millert
8262 * mkinstalldirs: update from autoconf 2.52
8264 2001-12-31 17:03 millert
8266 * config.guess, config.sub: Update from autoconf 2.52
8268 2001-12-31 16:57 millert
8270 * configure: regen with autoconf 2.52
8272 2001-12-31 16:57 millert
8274 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8275 compiler in ANSI mode
8276 o Remove compiler-specific checks for HP-UX now that we use
8279 2001-12-31 12:19 millert
8281 * RUNSON: Checkpoint
8283 2001-12-31 12:18 millert
8285 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8286 for the target user; on Linux this often sets resource limits.
8287 o When calling pam_end(), try to convert the auth->result to a
8288 PAM_FOO value. This is a hack--we really need to stash the
8289 last PAM_FOO value received and use that instead.
8291 2001-12-31 12:18 millert
8293 * set_perms.c, sudo.h: o Add pam_prep_user function to call
8294 pam_setcred() for the target user; on Linux this often sets
8297 2001-12-31 00:53 millert
8299 * env.c: Fix off by one error in number of bytes allocated via
8300 malloc (does not affected any released version of sudo).
8302 2001-12-30 17:12 millert
8306 2001-12-30 17:12 millert
8308 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8309 variable w/o requiring that they be quoted.
8311 2001-12-30 14:26 millert
8313 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8314 quotes are needed when adding/deleting/assigning a single value
8317 2001-12-30 13:58 millert
8319 * Makefile.in: Don't rely on mkdefaults being executable, call perl
8322 2001-12-30 13:41 millert
8324 * parse.yacc: Remove some XXX that are no longer relevant.
8326 2001-12-30 13:40 millert
8328 * defaults.c: o Roll our own loop instead of using strpbrk() for
8329 better grokability o When adding to a list we must malloc() and
8330 use memcpy(), not strdup() since we must only copy len bytes
8333 2001-12-21 16:49 millert
8335 * parse.yacc: typo in comment
8337 2001-12-19 11:50 millert
8339 * CHANGES: checkpoint
8341 2001-12-19 10:56 millert
8345 2001-12-19 10:56 millert
8347 * configure.in: avoid the -g flag unless --with-devel was specified
8349 2001-12-19 10:04 millert
8351 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8354 2001-12-19 09:46 millert
8356 * Makefile.in: def_data.c was missing
8358 2001-12-18 12:42 millert
8360 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8361 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8364 2001-12-17 20:48 millert
8366 * TODO: Another TODO item
8368 2001-12-17 19:50 millert
8370 * sudoers: Add comment for Default section so folks know where it
8373 2001-12-17 18:56 millert
8375 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8378 2001-12-17 18:35 millert
8380 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8382 2001-12-17 18:33 millert
8384 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8385 o a User_List can not contain a uid
8386 o mention that the Defaults section should come after Alias
8387 definitions but before the user specifications
8389 2001-12-15 11:51 millert
8391 * sudoers.cat, sudoers.man.in: regen
8393 2001-12-15 11:51 millert
8395 * sudoers.pod: Fix listpw and verifypw sections, they were not
8396 being formatted properly.
8398 2001-12-15 11:39 millert
8400 * sudoers.cat, sudoers.man.in: regen
8402 2001-12-15 11:38 millert
8404 * sudoers.pod: fix typos
8406 2001-12-15 10:57 millert
8410 2001-12-15 10:57 millert
8412 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8415 2001-12-15 10:33 millert
8417 * README: Reference sudo.ws not courtesan.com
8419 2001-12-15 10:29 millert
8421 * PORTING: Add notes on shadow passwords
8423 2001-12-15 00:48 millert
8425 * BUGS: In list mode (sudo -l), characters escaped with a backslash
8426 are shown verbatim with the backslash.
8428 2001-12-15 00:44 millert
8430 * sudoers: Add simple examples from OpenBSD (Marc Espie)
8432 2001-12-15 00:40 millert
8434 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8437 2001-12-14 21:53 millert
8439 * CHANGES: minor prettyification
8441 2001-12-14 21:43 millert
8443 * CHANGES: Updated change log
8445 2001-12-14 21:27 millert
8447 * testsudoers.c: Fix CIDR handling here too.
8449 2001-12-14 21:21 millert
8451 * auth/pam.c: Apparently a NULL response is OK
8453 2001-12-14 21:19 millert
8455 * TODO: Checkpoint for upcoming beta release
8457 2001-12-14 21:17 millert
8459 * TROUBLESHOOTING: Many people believe that adding a runas spec
8460 should obviate the need for the -u flag. It does not.
8462 2001-12-14 21:11 millert
8464 * RUNSON: checkpoint update for upcoming 1.6.4 beta
8466 2001-12-14 20:44 millert
8468 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8469 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8472 2001-12-14 20:07 millert
8474 * PORTING: Add signals section
8476 2001-12-14 20:00 millert
8480 2001-12-14 20:00 millert
8482 * configure.in: Fix check for sigaction_t
8484 2001-12-14 19:45 millert
8486 * sudo.c: XXX - should call find_path() as runas user, not root.
8487 Can't do that until the parser changes though.
8489 2001-12-14 19:38 millert
8491 * sudo.c: If find_path() fails as root, try again as the invoking
8492 user (useful for NFS). Idea from Chip Capelik.
8494 2001-12-14 19:28 millert
8496 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8497 after pod file changes
8499 2001-12-14 19:24 millert
8501 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8502 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8503 Previously sudo would not call initgroups() if the target user
8504 was root. Now it always calls initgroups() unless the -P command
8505 line option or the "preserve_groups" sudoers option is set. Idea
8508 2001-12-14 18:38 millert
8510 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8512 2001-12-14 18:33 millert
8514 * logging.c: Fix compilation on K&C
8516 2001-12-14 18:14 millert
8520 2001-12-14 18:14 millert
8522 * configure.in: Add check for sigaction_t -- IRIX already defines
8523 this so don't redefine it.
8525 2001-12-14 17:15 millert
8527 * snprintf.c: fix typo
8529 2001-12-14 17:12 millert
8531 * interfaces.c: need stdlib.h here too
8533 2001-12-14 15:31 millert
8537 2001-12-14 15:31 millert
8539 * configure.in: Remove redundant checks for string.h, strings.h and
8542 2001-12-14 15:29 millert
8544 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8545 visudo.man.in: Regen from pod files
8547 2001-12-14 15:03 millert
8549 * BUGS: Update for 1.6.4
8551 2001-12-14 14:59 millert
8553 * configure, lex.yy.c: regen
8555 2001-12-14 14:56 millert
8557 * strerror.c: Return EINVAL if errnum > sys_nerr
8559 2001-12-14 14:54 millert
8561 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8562 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8563 sudo.pod, auth/sudo_auth.h: o Update copyright year
8565 2001-12-14 14:54 millert
8567 * configure.in: o Don't define STDC_HEADERS unconditionally for
8568 IRIX o Update copyright year
8570 2001-12-14 14:53 millert
8572 * README: update version
8574 2001-12-14 14:52 millert
8576 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8577 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8578 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8579 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8580 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8581 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8582 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8583 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8584 STDC_HEADERS define properly o Update copyright year
8586 2001-12-14 01:53 millert
8590 2001-12-14 01:53 millert
8592 * tgetpass.c: flags set in signal handlers should be volatile
8595 2001-12-14 01:52 millert
8597 * config.h.in, configure.in: Add checks for volatile and
8600 2001-12-14 01:42 millert
8602 * lex.yy.c, configure: regen
8604 2001-12-14 01:40 millert
8606 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8607 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8608 option since it cannot work with the existing parser.
8610 2001-12-14 01:26 millert
8612 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8614 2001-12-14 01:24 millert
8616 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8617 not listed in env_keep o If no PATH is in the environment use a
8618 default value o If TERM is not set in the non-reset case also
8619 give it a default value.
8621 2001-12-14 01:17 millert
8623 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8624 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8625 on systems that define in paths.h
8627 2001-12-14 01:15 millert
8629 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8630 skeyaccess(3) if it is present in libskey.
8632 2001-12-12 21:42 millert
8634 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8636 2001-12-12 21:24 millert
8638 * parse.lex: '\\' is a perfectly legal character to have in a
8639 command line argument.
8641 2001-12-12 20:24 millert
8643 * sudo.c: o Defer call to set_fqdn() until it is safe to use
8644 log_error() o Don't print errno string value if gethostbyname
8645 fails, it is not relevant
8647 2001-12-12 20:07 millert
8649 * parse.c: Fix CIDR -> in_addr_t conversion.
8651 2001-12-12 16:21 millert
8653 * sudoers.pod: Remove an extra "User_List" in the User_Spec
8654 definition From ybertrand AT snoopymail.com
8656 2001-12-12 16:00 millert
8658 * parse.c: Make 'listpw=never' work for users who are not
8659 explicitly mentioned in sudoers.
8661 2001-12-12 15:40 millert
8663 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8665 2001-12-12 15:34 millert
8667 * sudoers.pod: Document new list Defaults type and convert env_keep
8668 and env_delete to lists. Document new env_check option.
8670 2001-12-12 15:11 millert
8672 * lex.yy.c, sudo.tab.h: regen parser
8674 2001-12-12 14:56 millert
8676 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8677 a Runas spec to #[0-9-]+.
8679 2001-12-12 14:55 millert
8683 2001-12-12 14:55 millert
8685 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8687 2001-12-12 14:43 millert
8689 * config.h.in, configure.in: Add check for skeyaccess(3)
8691 2001-12-11 19:47 millert
8693 * visudo.pod: Document new -c, -f, and -q options
8695 2001-12-11 19:41 millert
8697 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8700 2001-12-11 19:31 millert
8704 2001-12-11 19:31 millert
8706 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8707 a replacement macro if it doesn't exist.
8709 2001-12-11 18:22 millert
8711 * visudo.c: In check-only mode, don't create sudoers if it does not
8714 2001-12-11 18:06 millert
8716 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8718 o Add support for "+=" and "-=" list operators
8719 o replace some 1 and 0 with TRUE and FALSE for greater
8722 2001-12-11 18:05 millert
8724 * parse.lex: o Use exclusive start conditions to remove some
8726 lexer. Also reorder some things for clarity.
8727 o Add support for "+=" and "-=" list operators.
8728 o Use the new DEFVAR token to denote a Defaults variable name.
8730 2001-12-11 18:03 millert
8732 * sudo.h: Prototype init_envtables()
8734 2001-12-11 18:02 millert
8736 * env.c: o Convert environment handling to use lists instead of
8738 This greatly simplifies routines that need to do "foreach"
8741 o Add new init_envtables() function to set env_check and
8743 defaults based on initial_badenv_table and
8744 initial_checkenv_table
8745 (formerly sudo_badenv_table).
8747 2001-12-11 18:00 millert
8749 * defaults.c, defaults.h: o Add a new LIST type and functions to
8751 o This is for use with environment handling variables.
8752 o Call new init_envtables() routine inside init_defaults() to
8753 initialize the environment lists.
8755 2001-12-11 17:57 millert
8757 * def_data.c, def_data.h, def_data.in: Convert environment options
8758 to use the new LIST type and add a new one, env_check that only
8759 deletes if the sanity check fails.
8761 2001-12-11 17:55 millert
8763 * testsudoers.c: Add dummy version of init_envtables()
8765 2001-12-11 17:53 millert
8767 * parse.yacc: honor quiet mode
8769 2001-12-11 17:51 millert
8771 * visudo.c: Add check-only mode
8773 2001-12-10 20:27 millert
8775 * mkdefaults: Fix generation of entries with NULL descriptions.
8777 2001-12-09 00:27 millert
8779 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8781 2001-12-09 00:20 millert
8783 * sudo.c: Must reset signal handlers before we exec
8785 2001-12-09 00:16 millert
8787 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8788 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8789 version needs testing. Set SIGTSTP to SIG_DFL during password
8790 entry so user can suspend us.
8792 2001-12-09 00:14 millert
8794 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8795 keyboard input. If you suspend sudo from the password prompt and
8796 resume it will re-prompt you.
8798 2001-12-09 00:09 millert
8800 * sudo.c: Don't block keyboard interrupt signals, just set them to
8803 2001-12-08 14:48 millert
8805 * config.h.in: add back HAVE_SIGACTION
8807 2001-12-08 14:44 millert
8811 2001-12-08 14:44 millert
8813 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8814 POSIX_SIGNALS define and old signal support now that we emulate
8815 POSIX ones Also be sure to correctly initialize struct sigaction.
8817 2001-12-08 14:42 millert
8819 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8822 2001-12-08 14:39 millert
8824 * compat.h: Add scaffolding for POSIX signal emulation
8826 2001-12-08 14:36 millert
8828 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8829 since we don't include stdio.h
8831 2001-12-08 14:23 millert
8833 * sigaction.c: Emulate sigaction() using sigvec()
8835 2001-11-12 19:32 millert
8837 * sudoers.pod: Document new behavior of negative values of
8838 timestamp_timeout Fix a typo
8840 2001-11-12 19:31 millert
8842 * sudo.pod: Add security note about command not being logged after
8843 'sudo su' and friends.
8845 2001-11-12 19:19 millert
8847 * sudo.pod: Mention that -V prints default values when run as root,
8848 including the list of environment variables to clear.
8850 2001-11-12 19:14 millert
8852 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8853 quoting of C<> entries.
8855 2001-11-12 13:12 millert
8857 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8858 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8859 behavior to also send mail when the password is wrong
8861 2001-11-12 13:08 millert
8863 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8866 2001-11-11 23:52 millert
8868 * sudoers.pod: document env_delete
8870 2001-11-11 23:51 millert
8872 * env.c: Add support for '*' in env_keep when not resetting the
8873 environment (ie: the normal case).
8875 2001-11-11 23:47 millert
8877 * env.c: Add env_delete variable that lets the user replace/add to
8878 the bad_env_table. Allow '*' wildcard in env_keep entries.
8880 2001-11-06 13:59 millert
8882 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8885 2001-11-02 18:09 millert
8887 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8890 2001-11-02 17:25 millert
8892 * mkdefaults: fix breakage in last commit
8894 2001-11-02 17:18 millert
8896 * Makefile.in: acsite.m4 -> aclocal.m4
8898 2001-11-02 15:59 millert
8900 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8903 2001-11-02 15:57 millert
8905 * def_data.c: regenerated from def_data.in
8907 2001-11-02 15:56 millert
8909 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8910 things use instead of T_INT If timestamp_timeout is < 0 then
8911 treat the ticket as never expiring (to be expired manually by the
8914 2001-11-02 15:51 millert
8916 * def_data.in: change most T_INT -> T_UINT
8918 2001-11-02 15:51 millert
8920 * mkdefaults: fix warning when no args
8922 2001-11-02 12:52 millert
8924 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8925 call _exit() if we are a signal handler. We no longer print the
8926 signal number but the user can just check the exit value for
8929 2001-10-16 01:35 millert
8931 * logging.c: when setting up pipes in child process check for case
8932 where stdin == pipe fd 0
8934 2001-10-11 13:20 millert
8936 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8937 value is the count of editing errors made (failed searches, etc).
8939 2001-10-05 16:39 millert
8943 2001-10-05 16:39 millert
8945 * configure.in: sco now is identified by config.guess as *-sco-*
8947 2001-10-05 16:24 millert
8949 * configure.in: Check for getspnam() in -lgen if not in -lc for
8952 2001-09-17 21:48 millert
8954 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8956 2001-09-17 21:32 millert
8958 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8960 2001-08-28 10:26 millert
8962 * sudoers.pod: Missing word (specify); krapht@secureops.com
8964 2001-08-23 17:43 millert
8966 * sudo.c: If we fail to lookup a login class, apply the default
8969 2001-08-23 17:42 millert
8971 * logging.c: In log_error() free message, not logline
8972 unconditionally, then free logline if it is not the same as
8973 message. No function change but this mirrors how they are
8976 2001-07-16 23:33 millert
8978 * configure: regenerate
8980 2001-07-16 23:33 millert
8982 * configure.in: remove some backslash quotes that are unneeded
8984 2001-07-16 23:30 millert
8986 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8987 AC_LIBOBJ instead of changing LIBOBJS directly o Use
8988 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8989 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8991 2001-07-16 23:28 millert
8993 * config.guess, config.sub: Updated from autoconf-2.50
8995 2001-05-22 19:11 millert
8997 * README: Update mailing list section. We use mailman now, not
9000 2001-05-10 14:55 millert
9002 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
9003 the shadow variants to make sure we don't inadvertantly leak an
9004 fd to the child. Apparently Linux's shadow routines leave the fd
9005 open even if you don't call setspent(). Reported by
9006 mike@gistnet.com; different patch used.
9008 2001-04-12 21:43 millert
9010 * sudoers.pod: s/eg./e.g./
9012 2001-04-12 21:42 millert
9014 * tgetpass.c: select() may return EAGAIN. If so, continue like we
9017 2001-04-12 21:41 millert
9019 * logging.c: Fix a non-exploitable buffer overflow in the word
9020 splitting code. This should really be rewritten.
9022 2001-04-12 21:41 millert
9024 * Makefile.in: FAQ link goes away
9026 2001-04-12 21:40 millert
9028 * INSTALL: Tell people to look in sample.syslog.conf for examples,
9031 2001-04-12 21:40 millert
9033 * TROUBLESHOOTING: Update list of env vars that are cleared
9035 2001-04-12 21:36 millert
9037 * sudo.c: remove struct env_table decl since that stuff has all
9040 2001-04-04 13:17 millert
9042 * fileops.c: Fix a pasto in flock-style unlocking and include
9043 <sys/file.h> for flock on older systems; twetzel@gwdg.de
9045 2001-04-04 13:14 millert
9047 * configure: regen to get NeXT lockf/flock fix
9049 2001-04-04 13:14 millert
9051 * configure.in: force NeXT to use flock since lockf is broken
9053 2001-03-30 08:54 millert
9055 * check.c: Use stashed user_gid when checking against exempt gid
9056 since sudo sets its gid to a a value that makes sudoers readable.
9057 Previously if you used gid 0 as the exempt group everyone would
9058 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
9060 2001-03-29 13:14 millert
9064 2001-03-29 13:08 millert
9066 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
9067 aparently defines some types (such as ssize_t) therein.
9069 2001-03-02 09:09 millert
9071 * defaults.c: Fix negation of paths in a boolean context. Problem
9074 2001-02-23 13:03 millert
9078 2001-02-17 16:11 millert
9080 * visudo.c: SA_RESETHAND means the opposite of what I was
9081 thinking--oops To block all signals in old-style signals use ~0,
9084 2001-02-04 11:16 millert
9086 * defaults.c: coerce difference of pointers to int when used in a
9087 string length printf format; deraadt@openbsd.org
9089 2001-01-17 11:34 millert
9091 * visudo.c: Block all signals in Exit() to avoid a signal race.
9092 There is still a tiny window but I'm not going to worry about it.
9094 2001-01-07 13:57 millert
9096 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9099 2001-01-07 13:55 millert
9101 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9102 from clobbering by isatty().
9104 2000-12-30 20:39 millert
9106 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9107 Some defaults I_ defines got renamed.
9109 2000-12-30 20:38 millert
9111 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9112 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9113 set_perms.c, sudo.c: Move defaults info into its own files from
9114 which we generate .h and .c files. This makes adding or
9115 rearranging variables much simpler.
9117 2000-12-30 16:58 millert
9119 * configure, configure.in: fix typo in last commit
9121 2000-12-30 16:55 millert
9123 * compat.h, config.h.in, configure, configure.in: Add check +
9124 emulation for setegid (like seteuid).
9126 2000-12-30 16:22 millert
9128 * env.c: Make env_keep override badenv_table as documented Fix
9129 traversal of badenv_table (broken in last commit)
9131 2000-12-29 22:59 millert
9133 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9134 version of set_perms on systems w/o them. Rename
9135 set_perms_saved_uid() -> set_perms_posix() Make
9136 set_perms_setreuid simply be set_perms_fallback() and simply
9137 include the appropriate function at compile time (setreuid()
9140 2000-12-29 22:45 millert
9142 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9143 when env_reset is in effect
9145 2000-12-29 22:29 millert
9147 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9148 configure, configure.in, defaults.c, defaults.h, find_path.c,
9149 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9150 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9151 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9152 options: o stay_setuid - sudo will remain setuid if system has
9153 saved uids or setreuid(2) o env_reset - reset the environment to
9154 a sane default o env_keep - preserve environment variables that
9155 would otherwise be cleared
9157 No longer use getenv/putenv/setenv functions--do environment
9158 munging by hand. Potentially dangerous environment variables can
9159 be cleared only if they contain '/' pr '%' characters to protect
9160 buggy programs. Moved environment routines into env.c (new file)
9162 2000-12-29 22:17 millert
9164 * INSTALL: Clear up --without-passwd description
9166 2000-12-29 19:39 millert
9168 * sudo_setenv.c, putenv.c: We now build up a new environment from
9169 scratch and assign it to "environ".
9171 2000-12-18 22:35 millert
9173 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9175 2000-12-14 23:19 millert
9177 * visudo.c: If there was a syntax error and the user just wants to
9178 quit, unlink sudoers if it is zero length.
9180 2000-12-14 23:10 millert
9182 * visudo.c: 'Q' means ignore parse error, not 'q'
9184 2000-12-14 22:57 millert
9186 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9187 Dimitry Andric <dim@xs4all.nl>
9189 2000-12-13 12:23 millert
9191 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9194 2000-12-09 11:46 millert
9196 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9197 Sanchez <wsanchez@apple.com>
9199 2000-11-03 09:36 millert
9201 * sudo.c, visudo.c: Use exit(127), not exit(-1)
9203 2000-11-03 00:37 millert
9205 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9206 set_perms() to its own file and use POSIX saved uid or setreuid()
9209 Added stay_setuid option for systems that have libraries that
9210 perform extra paranoia checks in system libraries for setuid
9211 programs (ie: anything with issetugid(2)).
9213 2000-11-02 20:28 millert
9215 * sudo.c: strip more bits from the environment and add a facility
9216 for stripping things only if they contain '/' or '%' to address
9217 printf format string vulnerabilities in other programs.
9219 2000-11-02 12:55 millert
9223 2000-11-02 12:55 millert
9225 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9226 the existence of strcasecmp().
9228 2000-11-02 12:46 millert
9232 2000-11-02 12:46 millert
9234 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9236 2000-11-01 10:22 millert
9238 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9240 2000-11-01 10:17 millert
9244 2000-11-01 10:17 millert
9246 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9247 since NCR systems have that instead of innetgr(3).
9249 2000-10-31 14:16 millert
9251 * auth/securid.c: check return value of creadcfg() call sd_close()
9252 after sd_auth() store username in sd->username so we don't rely
9253 on the USER env variable
9255 2000-10-29 23:00 millert
9257 * INSTALL: document --with-bsdauth
9259 2000-10-29 22:57 millert
9263 2000-10-29 22:56 millert
9265 * configure.in: --with-bsdauth assumes --with-logincap
9267 2000-10-29 22:45 millert
9269 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9270 challenge, if the user just hits return then reprompt with echo
9273 2000-10-29 17:31 millert
9275 * sudo.c: Remove debugging code that should not have been
9278 2000-10-29 17:31 millert
9280 * auth/bsdauth.c: Use lower-level routines and get the password
9281 ourselves. Checks for a challenge and if there is one echo is
9284 2000-10-29 17:30 millert
9286 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9289 2000-10-27 18:41 millert
9291 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9292 fails by deferring the call to log_error() until things are
9295 Fix return value of set_loginclass() in non-BSD-auth case.
9297 Hard-code 'sudo' in the usage message so we can fit more options
9300 2000-10-27 18:35 millert
9302 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9304 2000-10-26 13:03 millert
9306 * sudo.cat, sudo.man.in: regen
9308 2000-10-26 13:01 millert
9310 * sudo.pod: Document -a flag
9312 2000-10-26 12:42 millert
9314 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9315 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9318 2000-10-19 10:09 millert
9320 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9322 2000-10-12 09:49 millert
9324 * sudoers.pod: Mention negating umask
9326 2000-10-12 01:30 millert
9328 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9330 2000-10-08 21:46 millert
9332 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9335 2000-10-08 12:25 millert
9337 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9339 2000-09-14 16:48 millert
9341 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9342 alloc failure instead of returning -1.
9344 2000-09-07 17:41 millert
9346 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9347 for FreeBSD and possibly others.
9349 2000-09-07 10:43 millert
9351 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9352 it. This means that "%m" won't be expanded but we don't use that
9353 anyway since the logging routines may splat to stderr as well.
9355 2000-09-06 21:35 millert
9357 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9358 sudoers.pod: Add always_set_home variable
9360 2000-09-06 21:24 millert
9362 * configure, configure.in: Have to hard code default values in help
9363 since the defaults are set _after_ the help stuff.
9365 2000-08-31 13:08 millert
9367 * lex.yy.c, parse.lex: Allow special characters (including '#') to
9368 be embedded in pathnames if quoted by a '\\'. The quoted chars
9369 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9372 2000-08-13 17:10 millert
9374 * install-sh: Better path searching for programs we need.
9376 2000-08-13 17:10 millert
9378 * TROUBLESHOOTING: Add section on "C compiler cannot create
9379 executables" errors.
9381 2000-08-13 17:10 millert
9383 * Makefile.binary, Makefile.in, version.h: Crank version
9385 2000-08-13 17:09 millert
9387 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9388 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9389 visudo.man.in, visudo.pod: Substitute values from configure into
9392 2000-08-12 16:48 millert
9394 * parse.c, sudo.c: The listpw and verifypw sudoers options would
9395 not take effect because the value of the default was checked
9396 *before* sudoers was parsed. Instead of passing in the value of
9397 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9398 the check can be deferred until after sudoers is parsed.
9400 2000-08-11 15:41 millert
9402 * tgetpass.c: When writing prompt, no need to write the NUL as
9403 well; hag@linnaean.org
9405 2000-06-09 12:25 millert
9407 * install-sh: When looking for chown, check in /sbin too
9409 2000-06-04 22:57 millert
9411 * visudo.c: Remove extraneous call to init_defaults() and set
9412 runas_user to NULL betweem parses so init_defaults will reset it
9413 each time, thus avoiding a reference to free()d data.
9415 2000-06-04 19:57 millert
9417 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9418 using getifaddrs() to get the list of ip addr / netmask pairs.
9419 Currently IPv4-only.
9421 2000-06-04 19:51 millert
9423 * visudo.c: Add a missing check for UserEditor == NULL Add missing
9424 '+' before line number when invoking editor to fix a syntax error
9426 2000-05-12 16:55 millert
9428 * sudo.c: Call clean_env very early in main() for paranoia's sake.
9429 Idea from Marc Esipovich.
9431 2000-05-10 01:11 millert
9433 * sudo.h: Update proto for evasprintf and easprintf
9435 2000-05-10 01:10 millert
9437 * alloc.c: Make easprintf() and evasprintf() return an int.
9439 2000-05-10 00:56 millert
9441 * check.c: If the targetpw flag is set, use target username as part
9442 of the timestamp path. If tty tickets are in effect cat the tty
9443 and the target username with a ':' as the separator.
9445 2000-05-09 12:05 millert
9447 * auth/pam.c: Backout part of last change; setting PAM_USER to the
9448 invoking user breaks things like targetpw.
9450 2000-05-09 11:52 millert
9452 * auth/pam.c: set tty and username via pam_set_item
9454 2000-05-09 11:42 millert
9456 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9457 runas, and target authentication for non-passwd file auth
9460 2000-04-22 14:15 millert
9462 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9463 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9464 C<-Z> for command line flags in all places. This is more
9465 consistent and works around a bug in Pod::Man.
9467 2000-04-22 13:59 millert
9469 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9470 'semicolon' that should be 'colon'
9472 2000-04-19 15:30 millert
9474 * configure, configure.in: Fix --with-badpri help line
9476 2000-04-17 14:01 millert
9478 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9479 openlog() and closelog() since some authentication methods (like
9480 PAM) may do their own logging via syslog. Since we don't use
9481 syslog much (usually just once per session) this doesn't really
9482 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9484 2000-04-15 16:32 millert
9486 * sudo.c: Fix -H flag. runas_homedir is only valid after
9487 set_perms(PERM_RUNAS, mode)
9489 2000-04-12 18:56 millert
9491 * INSTALL: Clarify the fact that insults are not enabled just by
9492 including them in the binary.
9494 2000-04-07 10:39 millert
9496 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9497 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9499 2000-04-07 10:38 millert
9501 * Makefile.in: Give date string to pod2man since its default is
9502 ugly and it ain't got no alibi.
9504 2000-04-07 10:27 millert
9506 * Makefile.in: Do section substitution on the output of pod2man and
9507 remove hack needed for old pod2man.
9509 2000-04-07 10:26 millert
9511 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9512 will do the substitution later.
9514 2000-04-02 11:44 millert
9516 * configure, configure.in: Don't bother checking for the path to vi
9517 if user specified --with-editor
9519 2000-04-01 17:25 millert
9521 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9524 2000-04-01 16:23 millert
9526 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9527 sudoers.pod, visudo.c: Visudo now checks for the existence of an
9528 editor and gives a sensible error if it does not exist.
9530 The path to the editor for visudo is now a colon-separated list
9531 of allowable editors. If the user has $EDITOR set and it matches
9532 one of the allowed editors that editor will be used. If not, the
9533 first editor in the list that actually exists is used.
9535 2000-04-01 16:22 millert
9537 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9540 2000-03-27 12:08 millert
9542 * Makefile.in: Strip sudo and visudo for bindist target
9544 2000-03-26 22:26 millert
9546 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9547 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9548 @mansectsu@ and @mansectform@ in the man page bodies as well.
9550 2000-03-26 22:07 millert
9552 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9555 2000-03-26 21:57 millert
9557 * Makefile.in: 'make dist' should not cause any files to be
9558 modified so remove its dependencies.
9560 2000-03-26 21:43 millert
9562 * CHANGES: Whoops, forgot to add release marker
9564 2000-03-26 11:57 millert
9566 * CHANGES: Final change for 1.6.3 (or so I hope)
9568 2000-03-26 11:57 millert
9570 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9571 BSD systems will have nroff...
9573 2000-03-24 18:58 millert
9575 * parse.yacc: When checking to see if the host/user matches in a
9576 defaults spec, check against TRUE, not just non-zero since it
9579 2000-03-24 15:14 millert
9581 * configure.in, configure: OSF/1 puts file formats in section 4,
9584 2000-03-24 15:13 millert
9586 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9588 2000-03-23 20:24 millert
9590 * RUNSON: Update for 1.6.3
9592 2000-03-23 20:23 millert
9594 * configure, configure.in: If there is no inet_addr but there *is*
9595 an __inet_addr that's ok since inet_addr is probably just a macro
9596 then. The better thing to do would be to look for the macro, but
9597 this is fine for now.
9599 2000-03-23 19:50 millert
9601 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9603 2000-03-23 19:40 millert
9605 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9606 lives in $(srcdir), add a @mansrcdir@ configure variable so we
9607 can deal with this. Also, only remove *.man for 'distclean' not
9610 2000-03-23 19:16 millert
9612 * sudo.c: set_loginclass() should be static like the proto says
9614 2000-03-23 14:14 millert
9616 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9617 header to avoid promotion of test to int, thus violating the
9618 prototype. Gcc handles this gracefully but more std ANSI
9619 compilers will complain.
9621 2000-03-23 10:11 millert
9623 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9626 2000-03-23 10:11 millert
9628 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9629 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9632 2000-03-22 23:41 millert
9634 * CHANGES, TODO: update for 1.6.3
9636 2000-03-22 23:38 millert
9638 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9639 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9640 not matching the FQHOST token type. There's really no need for a
9641 separate token for fully-qualified vs. unqualified anymore so
9642 FQHOST is now history and hostname_matches now decides which
9643 hostname (short or long) to check based on whether or not the
9644 pattern contains a '.'.
9646 2000-03-22 23:09 millert
9648 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9649 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9652 2000-03-22 22:50 millert
9654 * Makefile.in: Add targets for *.man.in, using config.status to
9655 generate *.man from *.man.in
9657 2000-03-22 22:20 millert
9659 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9660 option and enbolden refs to sudo and visudo.
9662 2000-03-22 19:35 millert
9664 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9665 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9666 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9667 FreeBSD login.conf support (untested on BSD/OS) based on a patch
9668 from Michael D. Marchionna. configure now does substitution on
9669 the man pages, allowing us to fix up the paths and set the
9670 section correctly. Based on an idea from Michael D. Marchionna.
9672 2000-03-22 19:27 millert
9674 * auth/passwd.c: Better fix for handling HP-UX aging info.
9676 2000-03-22 19:20 millert
9678 * sudo.c: Add support for set_logname run-time default
9680 2000-03-22 19:17 millert
9682 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9683 substitution on these to produce *.man
9685 2000-03-22 19:16 millert
9687 * sudo.man, sudoers.man, visudo.man: These files now get generated
9688 from *.man.in at configure time.
9690 2000-03-22 18:40 millert
9692 * defaults.c, defaults.h: Add set_logname option so users can turn
9693 off setting of LOGNAME/USER environment variables.
9695 2000-03-22 10:53 millert
9697 * testsudoers.c, lsearch.c, parse.c: kill register
9699 2000-03-13 15:52 millert
9701 * auth/passwd.c: HP-UX adds extra info at the end for password
9702 aging so when comparing the result of crypt to pw_passwd we only
9703 compare the first len(epass) bytes *unless* the user entered an
9704 empty string for a password.
9706 2000-03-13 11:05 millert
9708 * logging.c: Get rid of grandchild hack, it was causing problems
9709 and there is really no need for it. This fixes a bug where we
9710 spin eating up CPU when the user runs a long-running process like
9713 2000-03-07 14:26 millert
9715 * sudo.c: User can always specify a login class if he/she is
9718 2000-03-06 23:29 millert
9720 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9721 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9723 2000-03-06 14:42 millert
9725 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9728 2000-03-03 18:04 millert
9730 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9731 encrypted password is exactly 13 characters (indicateing standard
9732 a DES password). Many versions of crypt() do this for you, but
9733 not all (like HP-UX's).
9735 2000-03-01 21:01 millert
9737 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9739 2000-02-29 17:46 millert
9741 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9744 2000-02-29 17:41 millert
9746 * defaults.c: Use Argv[0] as the first arg to openlog() since
9747 visudo uses this too.
9749 2000-02-28 18:58 millert
9751 * sudo.c: Stash coredumpsize resource limit and retsore it before
9752 the exec() Otherwise the child ends up with a coredumpsize of 0.
9754 2000-02-26 22:56 millert
9756 * sudo.cat, sudo.man, sudo.pod: document -S flag
9758 2000-02-26 22:54 millert
9760 * sudo.c: fix usage string
9762 2000-02-26 22:48 millert
9764 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9765 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9766 -S flag (read passwd from stdin) and tgetpass_flags global that
9767 holds flags to be passed in to tgetpass(). Change echo_off param
9768 to tgetpass() into a flags field. There are currently 2 possible
9769 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9770 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9771 but echo is not set on the terminal, but sure to set it.
9773 2000-02-26 22:11 millert
9775 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9776 password timeout was disabled.
9778 2000-02-18 12:56 millert
9780 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9781 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9782 runaspw, and targetpw options.
9784 2000-02-18 12:11 millert
9786 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9787 visudo.c: enveditor -> env_editor
9789 2000-02-15 19:07 millert
9791 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9792 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9793 visudo.cat, visudo.man: crank versino to 1.6.3
9795 2000-02-15 19:03 millert
9797 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9798 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9799 defaults and make visudo honor them. This means that visudo will
9800 now parse the sudoers file *before* it is edited so a bogus
9801 sudoers file will cause a warning to go to stderr. Also, visudo
9802 checks the variables once--it does not check them after each
9803 editor run since that could be confusing.
9805 2000-02-15 18:49 millert
9807 * RUNSON: 1.6.2 -> 1.6.2p1
9809 2000-02-15 18:36 millert
9811 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9814 2000-02-13 13:38 millert
9816 * configure, configure.in: Fix thinko, some && should have been ||
9819 2000-02-13 13:28 millert
9821 * configure, configure.in: Don't initialized Makefile variables to
9822 be NULL since the user may want to import variables from their
9825 2000-02-03 21:09 millert
9827 * configure, configure.in: typo
9829 2000-01-27 15:01 millert
9831 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9832 11.0;jaearick@colby.edu
9834 2000-01-27 15:01 millert
9836 * CHANGES: recent changes; prepare for 1.6.2p1
9838 2000-01-26 23:31 millert
9840 * find_path.c: Don't apply SECURE_PATH if user is example;
9843 2000-01-26 16:21 millert
9845 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9846 'defaults' options based on INSTALL file info.
9848 2000-01-26 16:21 millert
9850 * INSTALL: Fix some while lies
9852 2000-01-24 10:48 millert
9854 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9857 2000-01-23 22:57 millert
9859 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9861 2000-01-23 22:42 millert
9863 * RUNSON: Last minute updates
9865 2000-01-23 22:26 millert
9867 * TROUBLESHOOTING: PAM entry
9869 2000-01-23 22:23 millert
9871 * auth/pam.c: correct a comment
9873 2000-01-23 22:03 millert
9875 * CHANGES, RUNSON: update for 1.6.2
9877 2000-01-23 21:59 millert
9879 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9880 with PAM. Based on patches from "Cloyce D. Spradling"
9881 <cloyce@headgear.org>
9883 2000-01-20 11:15 millert
9885 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9886 to an unsigned long long value.
9888 2000-01-19 14:07 millert
9890 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9891 sudoers locking in visudo. We now lock the sudoers file itself,
9892 not the temp file (since locking the temp file can foul up
9893 editors). The previous locking scheme didn't work because the fd
9894 was closed too early.
9896 2000-01-19 13:37 millert
9898 * configure, config.h.in, configure.in: Don't need test for
9899 ftruncate() any more.
9901 2000-01-18 21:23 millert
9903 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9904 cc. Fixes compilation with the unbundled HP-UX cc.
9906 2000-01-18 17:00 millert
9908 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9909 Campbell <aaron@cs.dal.ca>
9911 2000-01-17 18:46 millert
9913 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9914 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9915 tgetpass.c, version.h, visudo.c: update copyright year on changed
9918 2000-01-17 18:45 millert
9922 2000-01-17 18:45 millert
9926 2000-01-17 18:42 millert
9928 * INSTALL: Crank version to 1.6.2
9930 2000-01-17 18:11 millert
9932 * configure: Crank version to 1.6.2
9934 2000-01-17 17:46 millert
9936 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9937 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9939 2000-01-17 12:32 millert
9941 * CHANGES: recent changes
9943 2000-01-17 12:28 millert
9945 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9946 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9947 Crank version to 1.6.2
9949 2000-01-17 12:25 millert
9951 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9952 'shell_noargs' runtime option back in. We have to defer checking
9953 until after the sudoers file has been parsed but since there are
9954 now other options that operate that way this one can too. Based
9955 on a patch from bguillory@email.com.
9957 2000-01-16 23:05 millert
9959 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9962 2000-01-16 22:57 millert
9964 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9965 o Add section on verifypw and listpw o Define how NOPASSWD
9966 interacts with the -v and -l flags
9968 2000-01-14 12:39 millert
9970 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9971 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9973 2000-01-14 12:29 millert
9975 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9976 to the end and don't initialize the union member since that only
9977 works with an ANSI compiler. We set the value of the union by
9978 hand in init_defaults() anyway. This allows sudo to compile on a
9981 2000-01-11 13:20 millert
9983 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9984 netgr_matches needs to check shost as well as host since they may
9987 2000-01-11 13:17 millert
9989 * tgetpass.c: End on \r as well as \n
9991 2000-01-02 23:53 millert
9993 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9994 chaning from 0400 to whatever SUDOERS_MODE is (converting from
9995 the old sudoers mode). Assumes that SUDOERS_MODE is less
9996 restrictive than 0400 which should always be the case.
9998 2000-01-02 23:43 millert
10000 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
10001 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
10002 *any* entry for the user on the host with a NOPASSWD flag. For
10003 -v, only allow w/o a passwd if *all* entries for the user on the
10004 host w/ the specified runas user have the NOPASSWD flag set.
10006 2000-01-02 23:26 millert
10008 * Makefile.in: add check target
10010 1999-12-16 13:02 millert
10012 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
10015 1999-12-10 00:09 millert
10017 * CHANGES: recent changes
10019 1999-12-08 23:04 millert
10021 * config.h.in, configure, configure.in, sudo.c: Add check for
10022 initgroups() since old SYSV lacks this.
10024 1999-12-08 22:54 millert
10026 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
10027 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
10028 Only define HAVE_FNMATCH if <fnmatch.h> exists.
10030 1999-12-06 01:47 millert
10032 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
10033 to be enabled if the insults[] array is empty. Otherwise there
10034 would be division by zero.
10036 1999-12-06 01:25 millert
10038 * insults.h: Don't care about USE_INSULTS #define since the insult
10039 stuff may be overridden at runtime.
10041 1999-12-06 01:23 millert
10043 * auth/sudo_auth.c: Honor insults flag.
10045 1999-12-05 19:14 millert
10047 * CHANGES, parse.c: Don't ask the user for a password if the user
10048 is not allowed to run the command and the authenticate flag (in
10051 1999-12-05 19:05 millert
10053 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
10054 newline we change to the INITIAL state. o Enter GOTRUNAS when we
10057 This allows #uid to work in a RunasAlias.
10059 1999-12-05 14:06 millert
10061 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
10062 and runaslist now return a value o in a runasspec, if a runaslist
10063 does not return TRUE, set runas_matches to FALSE. Normally, a
10064 runaslist only returns FALSE for explicitly denied users. o
10065 since runaslist does not modify the stack there is no need for a
10066 push/pop in runasalias.
10068 1999-12-04 21:54 millert
10070 * check.c, sudo.c: Don't kill the user's tickets until after
10071 sudoers has been parsed since tty_tickets and ticket_dir could be
10074 1999-12-04 21:18 millert
10076 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10077 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10078 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10081 1999-12-04 21:18 millert
10083 * testsudoers.c: add set_fqdn() stub
10085 1999-12-02 15:31 millert
10087 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10088 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10089 it cannot work since the command needs to be set before sudoers
10090 is parsed. o Fix the "set_home" sudoers option (only worked at
10091 compile time). o Fix "fqdn" sudoers option. We now set
10092 host/shost via set_fqdn which gets called when the "fqdn"
10093 option is set in sudoers. o Move the openlog() to
10094 store_syslogfac() so this gets overridden correctly from the
10097 1999-12-02 15:21 millert
10099 * auth/securid.c: SecurID support should compile now.
10101 1999-11-28 20:56 millert
10103 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10104 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10106 1999-11-28 18:51 millert
10108 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10109 the .html files as they are generated automatically on the web
10112 1999-11-28 18:49 millert
10114 * CHANGES, LICENSE: kill characters that made wml unhappy
10116 1999-11-28 18:34 millert
10120 1999-11-25 12:05 millert
10122 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10124 1999-11-24 19:43 millert
10126 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10129 1999-11-23 22:52 millert
10131 * sudo.c: Make the -s flag be exclusive too. Also reorder the
10132 flags in the exclusive usage message so they are alphabetical.
10134 1999-11-23 13:27 millert
10136 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10138 1999-11-23 13:07 millert
10140 * auth/API: fix typo
10142 1999-11-23 13:07 millert
10144 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10146 1999-11-23 13:06 millert
10148 * auth/pam.c: fix a warning on redhat and spew an error if
10149 pam_authenticate() returns an error other than AUTH_SUCCESS or
10152 1999-11-23 00:43 millert
10154 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10155 password required is the user's not root's
10157 1999-11-19 21:04 millert
10159 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10161 1999-11-18 19:13 millert
10163 * RUNSON: updates from Brian Jackson + some formatting
10165 1999-11-17 21:39 millert
10167 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10168 update o Changes for automating real binary releases
10170 1999-11-17 21:38 millert
10172 * Makefile.in: Add bindist target
10174 1999-11-16 16:26 millert
10176 * TROUBLESHOOTING: talk about run-time options in addition to
10177 compile-time options
10179 1999-11-16 01:16 millert
10181 * CHANGES: fix typos
10183 1999-11-16 01:09 millert
10185 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10187 1999-11-16 00:42 millert
10189 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10190 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10191 rid of references to sudo-bugs. Now mention the web site or the
10194 1999-11-16 00:35 millert
10196 * sudoers.html: repair pod2html damage
10198 1999-11-16 00:28 millert
10200 * RUNSON, TODO: Update for 1.6 release
10202 1999-11-16 00:23 millert
10204 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10205 about using ALL in a command context.
10207 1999-11-09 15:12 millert
10209 * visudo.c: Call yyrestart() on a parse error to reset the lexer
10212 1999-11-09 15:06 millert
10214 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10215 yyrestart() into visudo.c since it might not get called in yywrap
10216 if we get a parse error (and we only reread the file on error
10219 1999-11-09 14:32 millert
10221 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10222 clean up any buffers that might still exist. Call yyrestart()
10223 instead of using the deprecated YY_NEW_FILE macro.
10225 1999-11-09 12:13 millert
10227 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10229 1999-11-08 19:00 millert
10231 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10232 characters need to be escaped in names.
10234 1999-11-08 18:59 millert
10238 1999-11-08 18:59 millert
10240 * INSTALL: clarify Mac OS X entry
10242 1999-11-08 18:59 millert
10246 1999-11-08 17:45 millert
10248 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10249 configure options for danity
10251 1999-11-05 17:11 millert
10253 * defaults.c: Fix printing of type T_MODE in dump_defaults()
10255 1999-11-05 12:00 millert
10257 * strcasecmp.c: missing sys/types.h
10259 1999-11-05 00:42 millert
10261 * INSTALL: Break out options that may be overridden at run time
10262 into their own section. Add a not about Max OS X and correct
10265 1999-11-04 14:01 millert
10267 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10268 getrlimit to find the highest fd when closing all non-std fd's o
10269 Turn off core dumps via setrlimit for the sake of paranoia
10271 1999-11-04 13:57 millert
10275 1999-11-01 10:59 millert
10279 1999-11-01 10:58 millert
10281 * tgetpass.c: When read()'ing, do a single character at a time to
10282 be sure we don't go oast the newline.
10284 1999-11-01 10:43 millert
10286 * sudo.c: For the sudo_root option, check against user_uid, not
10287 getuid() since at this point, ruid == euid == 0.
10289 1999-10-31 23:14 millert
10291 * RUNSON: some updates
10293 1999-10-31 23:14 millert
10295 * logging.h: Fix compilation problem when --with-logging=file was
10296 specified. This means that syslog is now required to build sudo
10297 but that should not be a problem. If it is it can be fixed
10298 trivially with a configure check for syslog() or syslog.h.
10300 1999-10-31 23:00 millert
10302 * tgetpass.c: Make this work again for things like "sudo echo hi |
10303 more" where the tty gets put into character at a time mode. We
10304 read until we read end of line or we run out of space (similar to
10307 1999-10-20 11:23 millert
10309 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10312 1999-10-20 11:23 millert
10316 1999-10-16 13:56 millert
10318 * defaults.c: Error out if syslog parameters are given without a
10319 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10320 since there are no facilities in the 4.2BSD syslog.
10322 1999-10-15 16:37 millert
10324 * defaults.c: Ignore the syslog facility for systems w/ old syslog
10327 1999-10-15 12:51 millert
10329 * TROUBLESHOOTING: people with "." early in their path can have
10330 problems running sudo from the build dir ;-)
10332 1999-10-13 00:18 millert
10334 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10336 1999-10-12 22:34 millert
10338 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10339 auth/sudo_auth.h: New krb5 code from Frank Cusack
10340 <fcusack@iconnet.net>.
10342 1999-10-12 22:33 millert
10344 * CHANGES: update to reality
10346 1999-10-11 20:53 millert
10348 * auth/fwtk.c: include <auth.h> to get function prototypes.
10350 1999-10-11 20:05 millert
10352 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10354 1999-10-11 19:42 millert
10356 * sudo.c: in set_perms(), always call setuid(0) before changing the
10357 ruid/euid so we always know it will succeed.
10359 1999-10-11 12:24 millert
10361 * defaults.h: #undef T_FOO to avoid conflicts with system defines
10364 1999-10-11 11:55 millert
10366 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10367 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10368 needs some fleshing out but this is a start.
10370 1999-10-10 17:21 millert
10372 * defaults.c: use strtol, not strtoul since not everyone has not
10375 1999-10-10 15:01 millert
10377 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10380 1999-10-10 14:38 millert
10382 * lex.yy.c, parse.lex: o Add support for escaped characters in the
10383 WORD macro o Modify fill() to squash escape chars
10385 1999-10-10 13:56 millert
10387 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10388 checks for default values that are supposed to be pathnames. o
10389 Fix a duplicate free when visudo finds an error.
10391 1999-10-09 01:01 millert
10393 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10395 1999-10-07 21:12 millert
10397 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10398 requiretty option o Move O_NOCTTY to compat.h
10400 1999-10-07 21:12 millert
10402 * logging.c: The exit() in log_error() was mistakenly removed in a
10403 previous version. Put it back...
10405 1999-10-07 17:20 millert
10407 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10408 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10409 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10410 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10411 Change defaults stuff to put the value right in the struct. o
10412 Implement mailer_flags o Store syslog stuff both in int and
10413 string form. Setting the string form magically updates the int
10414 version. o Add boolean attribute to strings where it makes sense
10417 1999-10-07 17:13 millert
10419 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10421 1999-10-06 00:48 millert
10423 * auth/API: cleanup function no longer takes a status arg
10425 1999-10-06 00:48 millert
10429 1999-09-15 05:15 millert
10431 * TODO, config.h.in, configure, configure.in, logging.c: Use
10432 strftime() instead of ctime() if it is available.
10434 1999-09-14 12:58 millert
10436 * defaults.c: fix copyright date
10438 1999-09-14 12:57 millert
10440 * RUNSON: update ReliantUNIX entry
10442 1999-09-14 12:56 millert
10444 * defaults.c, defaults.h, logging.c: add log_year option
10446 1999-09-14 04:01 millert
10448 * configure, configure.in: add --without-sendmail to help output
10450 1999-09-14 03:42 millert
10452 * configure, configure.in: enforce an otctal arg for
10453 --with-suoders-mode
10455 1999-09-08 04:06 millert
10457 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10458 config.h.in, configure, configure.in, defaults.c, defaults.h,
10459 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10460 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10461 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10462 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10463 "Defaults" line in sudoers to make configuration variables
10464 changable at runtime (and on a global, per-host and per-user
10465 basis). Both the names and the internal representation are still
10466 subject to change. It was necessary to make sudo_user.runas but
10467 a char ** instead of a char * since this value can be changed by
10468 a Defaults line. There is a similar (but more complicated) issue
10469 with sudo_user.prompt but it is handled differently at the
10472 Add a "-L" flag to list the name of options with their
10473 descriptions. This may only be temporary.
10475 Move some prototypes to parse.h
10477 Be much less restrictive on what is allowed for a username.
10479 1999-09-08 04:01 millert
10481 * sample.syslog.conf: Add more info
10483 1999-09-04 03:09 millert
10485 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10486 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10487 from their license.
10489 1999-08-31 05:39 millert
10491 * auth/sudo_auth.h: move dce_verofy proto to correct section
10493 1999-08-31 05:39 millert
10495 * auth/dce.c: remove XXX
10497 1999-08-28 06:00 millert
10499 * emul/fnmatch.h: Add fnmatch() prototype
10501 1999-08-28 06:00 millert
10503 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10504 emul/fnmatch.h to be after sudo.h for __P
10506 1999-08-28 05:59 millert
10508 * sudo.h: add strcasecmp proto
10510 1999-08-28 05:50 millert
10512 * auth/sudo_auth.c: add check for case where there are no auth
10515 1999-08-28 05:36 millert
10517 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10518 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10520 1999-08-28 05:24 millert
10522 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10523 everywhere we include string.h
10525 1999-08-28 05:22 millert
10527 * version.c: nicer output when showing auth methods
10529 1999-08-28 05:00 millert
10531 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10533 1999-08-28 04:49 millert
10535 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10537 1999-08-28 04:22 millert
10539 * parse.lex, lex.yy.c: fix definition of OCTECT
10541 1999-08-28 04:10 millert
10543 * configure, configure.in: aix_auth.o not authenticate.o
10545 1999-08-27 17:02 millert
10547 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10548 generated from the keyboard). Since we run with ruid/euid == 0
10549 the user can't really signal us in nasty ways.
10551 1999-08-27 17:01 millert
10553 * visudo.c: Don't need to worry about catching too many signals
10554 since we do locking on the tmp file. If a lockfile is really
10555 stale, it will be detected and overwritten.
10557 1999-08-27 16:09 millert
10559 * INSTALL, Makefile.in: include auth/API in tarball
10561 1999-08-27 16:09 millert
10563 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10564 loop and only do the memset if we are *not* in standalone mode.
10566 1999-08-27 13:46 millert
10568 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10570 1999-08-27 11:53 millert
10572 * sudo.c: fix --enable-noargs-shell
10574 1999-08-27 11:06 millert
10576 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10578 1999-08-27 10:54 millert
10580 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10582 1999-08-27 10:50 millert
10584 * auth/dce.c: there were still some return(0)'s hanging around,
10585 make them AUTH_FAILURE
10587 1999-08-27 10:39 millert
10589 * parse.c: typo in comment
10591 1999-08-27 10:03 millert
10593 * version.c: add missing semicolon
10595 1999-08-27 08:31 millert
10597 * auth/sudo_auth.h: missing backslash
10599 1999-08-26 17:24 millert
10601 * CHANGES, config.h.in, configure, configure.in: Kill
10602 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10604 1999-08-26 09:21 millert
10606 * Makefile.in: add parse.h to HDRS
10608 1999-08-26 09:16 millert
10610 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10611 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10612 in LIBS, commong ld flags go in LDFLAGS and network libs like
10613 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10614 on Solaris and is a bit cleaner in general.
10616 1999-08-26 06:56 millert
10618 * UPGRADE: mention ptmp -> sudoers.tmp
10620 1999-08-26 06:12 millert
10622 * configure.in, configure, config.h.in: Define
10623 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10625 1999-08-26 05:37 millert
10627 * RUNSON: add 2 reports
10629 1999-08-26 05:20 millert
10631 * auth/kerb5.c: Minor changes, mostly cosmetic.
10632 verify_krb_v5_tgt() changed to return a value more like a system
10635 1999-08-26 05:19 millert
10637 * auth/dce.c: Add an XXX
10639 1999-08-26 05:19 millert
10641 * TODO: more things todo!
10643 1999-08-26 05:18 millert
10645 * sample.sudoers: update based on what is in the man page
10647 1999-08-26 05:10 millert
10649 * parse.yacc: minor change to first line printed in -l mode
10651 1999-08-26 05:10 millert
10653 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10654 VARIABLES" section to "ENVIRONMENT" to be more standard and add
10657 1999-08-26 05:08 millert
10659 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10660 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10663 1999-08-26 05:06 millert
10665 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10667 1999-08-26 05:05 millert
10669 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10671 1999-08-26 05:04 millert
10673 * UPGRADE: mention timestamp changes
10675 1999-08-26 05:04 millert
10677 * PORTING: cosmetic cleanup
10679 1999-08-26 05:00 millert
10681 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10682 sudoers(8) man page
10684 1999-08-24 13:45 millert
10686 * version.c: Update comments about syslog name tables
10688 1999-08-24 13:37 millert
10690 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10691 configure.in, parse.yacc: include strcasecmp() for those without
10694 1999-08-24 12:43 millert
10696 * sample.sudoers: Use the : operator some more and fix a typo
10698 1999-08-24 12:43 millert
10700 * HISTORY: update the history of sudo
10702 1999-08-24 12:42 millert
10704 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10706 1999-08-24 12:41 millert
10708 * CHANGES: recent changes
10710 1999-08-24 12:40 millert
10712 * sudo.tab.h: these should be generated with byacc, not bison
10714 1999-08-24 12:40 millert
10718 1999-08-24 11:58 millert
10720 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10721 the stored (expanded) alias was not stored with the contents.
10722 This could lead to incorrect output if the sudoers file had
10723 different alias types with the same name. Normal parsing (ie:
10724 not in '-l' mode) is unaffected.
10726 1999-08-23 12:47 millert
10728 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10729 proto on some systems
10731 1999-08-22 13:10 millert
10733 * snprintf.c: fix comment
10735 1999-08-22 13:09 millert
10737 * tgetpass.c: don't need limits.h
10739 1999-08-22 07:36 millert
10741 * snprintf.c: kill bogus reference to vfprintf
10743 1999-08-22 07:26 millert
10745 * sample.sudoers, sudoers: better examples
10747 1999-08-22 07:23 millert
10749 * snprintf.c: Add some const in the K&R defs. This is safe since
10750 we define const away if the compiler doesn't grok it.
10752 1999-08-22 07:22 millert
10754 * aclocal.m4, configure: Better test for working long long support.
10755 Ultrix compiler supports basic long long but not all operations
10758 1999-08-22 05:59 millert
10760 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10761 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10762 MAXINT before including hpsecurity.h to silence an HP-UX warning
10763 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10765 1999-08-21 15:00 millert
10767 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10768 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10769 quads if the compiler does. No floating point yet, perhaps
10772 1999-08-20 16:37 millert
10774 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10775 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10776 code as root, not the invoking user. It doesn't really gain us
10777 anything to run as the user since an attacker can just have an
10778 setuid(0) in their egg. Running as root solves potential
10779 problems wrt signalling.
10781 1999-08-19 13:45 millert
10783 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10784 let the signal handler get it if we are still running, else let
10785 init reap it for us. The extra time it takes to wait lets the
10786 user know that mail is being sent.
10788 Install SIGCHLD handler in main() and for POSIX signals, block
10789 everything *except* SIGCHLD.
10791 1999-08-19 12:30 millert
10793 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10794 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10795 a bitmap instead of an int. This makes it possible to express
10796 things like "failed to validate because user not listed for this
10797 host". Some thigns that were previously VALIDATE_FOO are now
10798 FLAG_FOO. This may change later on.
10800 Reorganized code in log_auth() and sudo.c to deal with above
10803 Safer versions of push/pushcp with in the do { ... } while (0)
10806 parse.yacc now saves info on the stack to allow parse.c to
10807 determine if a user was listed, but not for the host he/she tried
10810 Added --with-mail-if-no-host option
10812 1999-08-17 11:29 millert
10814 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10815 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10816 externally visible. o If pedantic > 1, it is a parse error. o
10817 Add -s (strict) option to visudo which sets pedantic to 2.
10819 1999-08-17 11:26 millert
10821 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10823 1999-08-17 11:20 millert
10825 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10827 1999-08-17 10:29 millert
10829 * configure, configure.in, Makefile.in: Add testsudoers to default
10830 build target if --with-devel Don't clean generated parser files
10831 unless "distclean".
10833 1999-08-17 08:47 millert
10835 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10836 not just those that match, or we get spurious warnings.
10838 1999-08-17 05:32 millert
10840 * TROUBLESHOOTING: reference samples.sylog.conf
10842 1999-08-14 11:50 millert
10844 * sample.syslog.conf: Sample entries for syslog.conf
10846 1999-08-14 11:40 millert
10848 * CHANGES: recent changes
10850 1999-08-14 11:36 millert
10852 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10853 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10854 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10855 configured into flags and add a flag to specify an auth method is
10856 running alone (the only one). Pass auth methods their sudo_auth
10857 pointer, not the data pointer. This allows us to get at the
10858 flags and tell if we are the only auth method. That, in turn,
10859 allows the method to be able to decide what should/should not be
10860 a fatal error. Currently only rfc1938 uses it this way, which
10861 allows us to kill the OTP_ONLY define and te hackery that went
10862 with it. With access to the sudo_auth struct, methods can also
10863 get at a string holding their cannonical name (useful in error
10866 1999-08-14 11:34 millert
10868 * Makefile.in, INSTALL, README, config.h.in, configure,
10869 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10870 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10871 o real dependencies in the Makefile o --with-devel option to
10872 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10873 "foo->bar" o ALL goes back to being a token, not a string but
10874 don't leak memory o rename hsotspec -> host in parse.yacc
10876 1999-08-12 12:26 millert
10878 * BUGS, CHANGES: recent changes
10880 1999-08-12 12:24 millert
10882 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10883 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10884 *snprintf() before -ldb is added to LIBS since -ldb includes a
10885 bogus snprintf(). o Add forward refs for struct mbuf and struct
10886 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10887 to fix -Wall o Add missing includes to fix more -Wall
10889 1999-08-12 10:37 millert
10891 * INSTALL, check.c, config.h.in, configure, configure.in,
10892 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10893 o Add a "pedentic" flag to the parser. This makes sudo warn in
10894 cases where an alias may be used before it is defined. Only
10895 turned on for visudo and testsudoers. o Add
10896 --disable-authentication option that makes sudo not require
10897 authentication by default. The PASSWD tag can be used to require
10898 authentication for an entry. We no longer overload
10901 1999-08-12 10:29 millert
10903 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10904 USERNAME. These days a username can contain just about anything
10905 so be very permissive. Also drop the unused \. punctuation.
10907 1999-08-09 18:25 millert
10909 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10910 parse.h o find_alias() now returns an aliasinfo * instead of
10911 boolean o add_alias() now takes a value parameter to store in the
10912 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10913 return: 1) positive match 0) negative match (due to '!') -1) no
10914 match This means setting $$ explicitly in all cases, which I
10915 should have done in the first place. It also means that we
10916 always store a value that is != -1 and when we see a '!' we can
10917 set *_matches to !rv if rv != -1. The upshot of all of this is
10918 that '!' now works the way it should in lists and some of the
10919 rules are more uniform and sensible.
10921 1999-08-09 18:17 millert
10923 * Makefile.in: add parse.h dependency
10925 1999-08-09 18:17 millert
10927 * parse.h: kill unused *_matched macros
10929 1999-08-09 10:35 millert
10931 * parse.yacc: Allow a list of users as the first thing in a user
10932 spec, not just a single entry. This makes things more uniform,
10933 though it does allow you to write user specs that are hard to
10936 1999-08-09 10:08 millert
10940 1999-08-09 10:08 millert
10942 * configure.in: fix check for crypt() in libufc
10944 1999-08-07 14:03 millert
10946 * README: sudo-users list now exists
10948 1999-08-07 07:46 millert
10950 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10953 1999-08-07 05:59 millert
10955 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10956 config.h.in, configure.in, logging.c, sudo.h, version.c,
10957 visudo.c, configure, fileops.c: o Move lock_file() and touch()
10958 into fileops.c so visudo can use them o Visudo now locks the
10959 sudoers temp file instead of bailing when the temp file already
10960 exists. This fixes the problem of stale temp files but it does
10961 *require* that you not try to put the temp file in a
10962 world-writable directory. This shoud not be an issue as the temp
10963 file should live in the same dir as sudoers. o Visudo now only
10964 installs the temp file as sudoers if it changed.
10966 1999-08-06 09:49 millert
10968 * logging.c: add fcntl locking
10970 1999-08-06 09:33 millert
10972 * configure, config.h.in, configure.in, logging.c: Lock the log
10975 1999-08-06 05:36 millert
10977 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10978 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10979 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10980 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10981 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10983 1999-08-05 17:38 millert
10985 * INSTALL, check.c, config.h.in, configure, configure.in,
10986 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10987 more things to root sudo -V config reporting
10989 1999-08-05 10:56 millert
10991 * configure, configure.in: aix_auth.o not authenticate.o
10993 1999-08-05 10:48 millert
10995 * config.h.in: Add --with-goodpri and --with-badpri configure
10996 options to specify the syslog priority to use.
10998 1999-08-05 10:30 millert
11000 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
11001 and --with-badpri configure options to specify the syslog
11004 1999-08-05 10:25 millert
11006 * compat.h: kill crufty AIX stuff
11008 1999-08-05 06:55 millert
11010 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
11011 deal with $< like I would expect. Both GNU and BSD makes get
11012 this right but... So, we just expand $< inline at the cost of
11015 1999-08-05 06:52 millert
11017 * version.c: If the invoking user is root, sudo will now print
11018 configure info in -V mode. Currently just prints logging info,
11019 to be expanded later.
11021 1999-08-05 06:51 millert
11023 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
11024 facility and priority o use new print_version() functino for -V
11027 1999-08-05 06:49 millert
11029 * check.c: Don't need version.c
11031 1999-08-05 06:21 millert
11033 * configure, configure.in, aclocal.m4, config.h.in: Add check for
11034 syslog facilities and priorities tables in syslog.h
11036 1999-08-05 05:23 millert
11038 * Makefile.in: o authenticate -> aix_auth o add version.c
11040 1999-08-05 05:21 millert
11042 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
11044 1999-08-04 13:32 millert
11046 * TODO: sudo should lock its logfile
11048 1999-08-04 13:28 millert
11050 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
11051 shortcut macros for append() to make things more readable. o The
11052 separator in append() is now a string instead of a char. o In
11053 append(), only prepend the separator if the last char is not a
11054 '!'. This is a hack but it greatly simplifies '!' handling. o
11055 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
11056 inherited across entries in a list (matches current behavior).
11057 o Fix formatting in -l mode such that items in a list are
11058 separated by a space. Greatlt improves readability. o Space
11059 for name field in struct aliasinfo is now allocated dyanically
11060 instead of using a (big) buffer. o In add_alias(), only search
11061 the list once (lsearch instead of lfind + lsearch)
11063 1999-08-04 11:31 millert
11065 * lex.yy.c, sudo.tab.h: regen
11067 1999-08-04 10:54 millert
11069 * configure, configure.in: Solais pam doesn't require anye xtra
11072 1999-08-04 05:35 millert
11074 * parse.yacc: o Simpler '!' support now that the lexer deals with
11075 multiple !'s for us. o In the case of opFOO, have FOO give a
11076 boolean return value and set foo_matches in opFOO, not FOO. o
11077 Treat 'ALL' as a string since it gets fill()'d in
11078 parse.lex--fixes a small memory leak. In the long run it may
11079 be better to just fix parse.lex and make ALL back into a token.
11080 However, having it be a string is useful since it can be
11081 easily passed back to the parent rule if we so desire.
11083 1999-08-04 03:54 millert
11085 * parse.lex: o Remove some unnecessary backslashes o collapse
11086 multiple !'s by using !+ and checking if yyleng is even or odd.
11087 this allows us to simplify ! handling in parse.yacc
11089 1999-08-04 03:53 millert
11091 * sudo.c: -u flag was being ignored
11093 1999-08-01 13:04 millert
11095 * Makefile.in: correct fix
11097 1999-08-01 12:37 millert
11099 * Makefile.in: work around pod2man stupididy
11101 1999-08-01 12:35 millert
11103 * Makefile.in: correct dependencies for .cat
11105 1999-08-01 12:26 millert
11107 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11109 1999-08-01 12:25 millert
11111 * sudo.pod, visudo.pod: Add copyright Update to reality
11113 1999-08-01 11:42 millert
11115 * parse.c, sudo.c, sudo.h: rename validate() to the more
11116 descriptive sudoers_lookup()
11118 1999-08-01 06:49 millert
11120 * auth/aix_auth.c: use tgetpass
11122 1999-07-31 12:32 millert
11126 1999-07-31 12:31 millert
11128 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11129 configure, configure.in, sudo.c: Sudo, not CU Sudo
11131 1999-07-31 12:19 millert
11133 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11134 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11135 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11136 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11137 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11138 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11139 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11140 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11141 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11142 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11143 LICENSE: add 4th term to license similar to term 5 in the apache
11146 1999-07-31 12:02 millert
11148 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11149 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11151 1999-07-28 05:24 millert
11155 1999-07-28 05:21 millert
11157 * check.c: Use dirs instead of files for timestamp. This allows
11158 tty and non-tty schemes to coexist reasonably. Note, however,
11159 that when you update a tty ticket, the mtime on the user dir gets
11162 1999-07-28 05:17 millert
11164 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11165 to link with "-lprot -lx" when linking test program, not just
11166 -lprot. Also add check for getspnam(). The SCO docs indicate
11167 that /etc/shadow can be used but this may be a lie.
11169 1999-07-24 03:35 millert
11171 * auth/API: first cut at auth API description
11173 1999-07-22 15:48 millert
11175 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11176 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11177 now an init method that gets run before the main loop. This
11178 allows auth routines to differentiate between initialization that
11179 happens once vs. setup that needs to run each time through the
11182 1999-07-22 12:23 millert
11184 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11186 1999-07-22 12:22 millert
11188 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11189 versions of asprintf() and vasprintf()
11191 1999-07-22 09:14 millert
11193 * TODO: remove 2 items. One done, one won't do.
11195 1999-07-22 09:10 millert
11197 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11198 visudo.cat, visudo.html, configure, lex.yy.c: regen
11200 1999-07-22 09:06 millert
11202 * CHANGES: new changes
11204 1999-07-22 09:01 millert
11206 * sudo.pod: o Document -K flag and update meaning of -k flag. o
11207 BSD-style copyright o Document clearing of BIND resolver
11208 environment variables o Clarify bit about shared libs o suggest
11209 rc files create /tmp/.odus if your OS gives away files
11211 1999-07-22 08:59 millert
11213 * visudo.pod: BSD license
11215 1999-07-22 08:58 millert
11217 * tgetpass.c: o BSD copyright o no need to block signals, we now do
11218 that in main() o cosmetic changes
11220 1999-07-22 08:57 millert
11222 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11223 sudo_user" instead of old globals. o some cometic cleanup
11225 1999-07-22 08:56 millert
11227 * sudo_setenv.c, version.h: BSD-style copyright
11229 1999-07-22 08:56 millert
11231 * sudo.h: o BSD copyright o logging and parser bits moved to their
11232 own .h files o new "struct sudo_user" to encapsulate many of the
11235 1999-07-22 08:55 millert
11237 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11238 use new logging routines o simplified flow of control o BIND
11239 resolver additions to badenv_table
11241 1999-07-22 08:53 millert
11243 * strerror.c: BSD-style copyright
11245 1999-07-22 08:53 millert
11247 * snprintf.c: Now compiles on more K&R compilers
11249 1999-07-22 08:52 millert
11251 * putenv.c: BSD-style copyright, cosmetic changes
11253 1999-07-22 08:51 millert
11255 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11256 Move parser-specific defines and structs into parse.h + other
11259 1999-07-22 08:51 millert
11261 * logging.h: defines for logging routines
11263 1999-07-22 08:49 millert
11265 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11266 interfaces.h, pathnames.h.in: BSD-style copyright
11268 1999-07-22 08:48 millert
11270 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11271 copyright, cosmetic changes
11273 1999-07-22 08:46 millert
11275 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11276 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11277 changes to fill in AUTH_OBJS for new auth api o check for
11278 strerror(), v?snprintf() and v?asprintf() o replace
11279 --with-AuthSRV with --with-fwtk
11281 1999-07-22 08:43 millert
11283 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11284 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11285 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11288 1999-07-22 08:42 millert
11290 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11293 1999-07-22 08:39 millert
11295 * alloc.c: BSD-style copyright
11297 1999-07-22 08:38 millert
11299 * TROUBLESHOOTING: no more --with-getpass
11301 1999-07-22 08:34 millert
11303 * TODO: Take out things I've done...
11305 1999-07-22 08:34 millert
11307 * README: Refer to LICENSE
11309 1999-07-22 08:34 millert
11311 * PORTING: --with-getpass no longer exists
11313 1999-07-22 08:33 millert
11315 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11316 new files and new auth modules.
11318 1999-07-22 08:32 millert
11320 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11321 --with-fwtk and --without-passwd.
11323 1999-07-22 08:31 millert
11325 * HISTORY: Update history a bit
11327 1999-07-22 08:29 millert
11329 * COPYING, LICENSE: Now distributed under a BSD-style license
11331 1999-07-22 08:28 millert
11333 * auth/sudo_auth.c: o BSD-style copyright o Add support for
11334 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11335 rfc1938 code o new struct sudo_user global
11337 1999-07-22 08:25 millert
11339 * auth/: pam.c, sia.c: BSD-style copyright and use new log
11342 1999-07-22 08:24 millert
11344 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11345 Use asprintf() and snprintf() where sensible.
11347 1999-07-22 08:19 millert
11349 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11350 handling is now done more reasonably--better sanity checks and
11351 tty-based stamps are now done as files in a directory with the
11352 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11353 It is not currently possible to mix tty and non-tty based ticket
11354 schemes but this may change in the future (it requires sudo to
11355 use a directory instead of a file in the non-tty case). Also,
11356 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11357 really deletes the file. That way you don't get the lecture
11358 again just because you killed your ticket in .logout. BSD-style
11361 1999-07-22 08:13 millert
11363 * logging.c: o rewritten logging routines. log_error() now takes
11364 printf-style varargs and log_auth() for the return value of
11365 validate(). o BSD-style copyright
11367 1999-07-22 07:04 millert
11369 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11372 1999-07-22 07:02 millert
11374 * auth/fwtk.c: Use snprintf() where it makes sense and add a
11375 BSD-style copyright
11377 1999-07-22 07:00 millert
11379 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11380 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11383 1999-07-22 06:57 millert
11385 * emul/utime.h, utime.c: BSD-style copyright
11387 1999-07-22 06:57 millert
11389 * emul/search.h: this has been rewritten so use my BSD-style
11392 1999-07-15 11:21 millert
11394 * snprintf.c: include malloc.h if no stdlib.h
11396 1999-07-15 10:21 millert
11398 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11400 1999-07-15 10:20 millert
11402 * strerror.c: strerror() for systems w/o it
11404 1999-07-12 06:53 millert
11406 * visudo.c: stylistic changes
11408 1999-07-12 06:25 millert
11410 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11413 1999-07-11 16:10 millert
11415 * auth/pam.c: remove missed ref to PAM_nullpw
11417 1999-07-11 16:10 millert
11419 * auth/sudo_auth.h: pasto
11421 1999-07-11 15:19 millert
11423 * auth/kerb5.c: more or less complete now--still untested
11425 1999-07-11 15:09 millert
11427 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11429 1999-07-11 14:42 millert
11431 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11432 code into rfc1938.c
11434 1999-07-11 07:22 millert
11436 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11437 unchanged from dce_pwent.c
11439 1999-07-11 06:44 millert
11441 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11442 Could probably be much better
11444 1999-07-11 06:43 millert
11446 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11449 1999-07-11 05:37 millert
11451 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11453 1999-07-11 05:33 millert
11455 * auth/pam.c: don't use prompt global, it will go away
11457 1999-07-11 05:32 millert
11459 * auth/secureware.c: correct copyright years
11461 1999-07-10 20:32 millert
11463 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11464 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11465 New authentication API and methods
11467 1999-07-08 06:46 millert
11469 * parse.yacc: only save an entry if user_matches && host_matches,
11470 even if the stack is empty (fix for previous commit)
11472 1999-07-08 06:35 millert
11474 * parse.yacc: 1) Always save an entry on the stack if it is empty.
11475 This fixes the -l and -v flags that were broken by earlier parser
11478 2) In a Runas list, don't negate FALSE -> TRUE since that would
11479 make !foo match any time the user specified a runas user (via -u)
11482 1999-07-08 05:45 millert
11484 * testsudoers.c: interfaces and num_interfaces are now auto, not
11487 1999-07-07 14:09 millert
11489 * auth.c: use a static global to keep stae about empty passwords
11491 1999-07-07 14:08 millert
11493 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11496 1999-07-05 16:53 millert
11498 * auth.c: PAM prompt code was wrong, looks like we have to kludge
11501 1999-07-05 16:35 millert
11503 * auth.c: In the PAM code, when a user hits return at the first
11504 password prompt, exit without a warning just like the normal auth
11507 1999-07-05 16:15 millert
11509 * configure, configure.in: kludge around cross-compiler false
11512 1999-07-05 16:14 millert
11514 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11515 (correct) PAM code Tgetpass now takes an echo flag for use with
11516 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11517 useless umask setting Change error from BAD_ALLOCATION ->
11518 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11519 auth.c for consistency
11521 1999-07-05 16:11 millert
11523 * sudo.c: Some -Wall and kill some trailing spaces
11525 1999-07-05 16:10 millert
11527 * configure.in: define -D__EXTENSIONS__ for solaris so we get
11530 1999-06-22 09:42 millert
11532 * RUNSON: add Dynix 4.4.4
11534 1999-06-22 09:30 millert
11536 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11537 version, fall back on old kerb4 auth code
11539 1999-06-22 06:41 millert
11541 * INSTALL: clarify some things
11543 1999-06-22 06:38 millert
11545 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11547 1999-06-14 19:47 millert
11549 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11551 1999-06-03 12:34 millert
11553 * tgetpass.c: Fix open(2) return value checking, was NULL for
11554 fopen, should be -1 for open
11556 1999-06-03 12:06 millert
11560 1999-06-03 12:06 millert
11562 * configure.in: better wording for solaris pam notice
11564 1999-06-03 11:52 millert
11566 * CHANGES: document recent changes
11568 1999-06-03 11:52 millert
11570 * TROUBLESHOOTING: Update shadow password section
11572 1999-06-03 11:51 millert
11574 * auth.c: move authentication code from check.c to auth.c
11576 1999-06-03 11:51 millert
11578 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11580 1999-05-16 21:36 millert
11582 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11583 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11584 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11585 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11586 interface-related defines to interfaces.h so we don't have to
11587 include <netinet/in.h> everywhere.
11589 1999-05-14 12:30 millert
11591 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11592 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11593 braindeath with our own SUDO_MAX_PASS.
11594 It turns out the old DES crypt does the right thing with
11596 longert than 8 characters.
11597 o Fix common typo (necesary -> necessary)
11600 1999-05-03 12:00 millert
11602 * sudo.c: set $LOGNAME when we set $USER
11604 1999-04-27 00:00 millert
11606 * INSTALL: add comment about digital unix and interfaces.c warning
11609 1999-04-15 01:12 millert
11611 * sample.sudoers: use modern paths and give examples for some of
11612 the new parser features
11614 1999-04-10 13:03 millert
11616 * parse.c: fix comment
11618 1999-04-10 00:49 millert
11620 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11621 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11622 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11623 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11624 Function names should be flush with the start of the line so they
11625 can be found trivially in an editor and with grep
11627 1999-04-10 00:40 millert
11629 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11630 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11631 is already void, no need to cast it
11633 1999-04-10 00:37 millert
11635 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11636 (this should not be possible)
11638 1999-04-10 00:10 millert
11640 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11641 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11642 listed in sudoers) to the command instead of stashing the struct
11643 stat. Should be safer.
11645 1999-04-08 19:56 millert
11647 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11650 1999-04-07 20:20 millert
11654 1999-04-07 19:18 millert
11656 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11657 sudoers.pod: You can now specifiy a host list instead of just a
11658 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11661 1999-04-07 02:59 millert
11663 * testsudoers.c: Quiet -Wall
11665 1999-04-07 02:50 millert
11667 * parse.yacc: Move the push from the beginning of cmndspec to the
11668 end. This means we no longer have to do a push at the end of
11669 privilege, just reset some values.
11671 1999-04-06 20:24 millert
11673 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11674 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11677 1999-04-06 14:12 millert
11679 * sudoers.pod: modernize paths and update su example based on
11682 1999-04-06 14:06 millert
11684 * sample.sudoers: New runas semantics
11686 1999-04-06 13:54 millert
11688 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11689 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11690 ourselves so we don't need to rely on the system strdup(3) which
11691 may or may not exist. There is now no need to provide strdup()
11692 for those w/o it. Also, the prototype for estrdup() was wrong,
11693 it returns char * and its param is const.
11695 1999-04-06 13:40 millert
11697 * getcwd.c: $Sudo tag
11699 1999-04-06 13:20 millert
11701 * check.c: buf should be prompt; Michael Robokoff
11702 <mrobo@networkcs.com>
11704 1999-04-06 01:40 millert
11706 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11707 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11710 1999-04-06 01:38 millert
11712 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11715 1999-04-06 01:08 millert
11717 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11720 1999-04-06 01:00 millert
11722 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11723 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11724 command but the NOPASSWD flag was set. Make runasspec,
11725 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11726 support for '!' in the runas list Fix double printing of '%' and
11727 '+' for groups and netgroups respectively Add *_matched macros
11728 (no need for local stack variable). Should only be used directly
11729 after a pop (since top must be >= 2).
11731 1999-04-05 23:25 millert
11733 * aclocal.m4, configure.in: Add copyright, somewhat silly
11735 1999-04-05 16:57 millert
11737 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11738 check_sia.c, compat.h, config.h.in, configure, configure.in,
11739 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11740 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11741 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11742 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11743 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11744 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11745 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11746 1.6 and combine copyright statements
11748 1999-04-05 16:30 millert
11750 * sample.sudoers: Use ! not ^ to do negation
11752 1999-04-05 16:29 millert
11756 1999-04-05 16:28 millert
11758 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11759 across entris in a command list. Add a PASSWD tag to reverse
11760 NOPASSWD. When you override a runas or *PASSWD tag the value
11761 given becomes the new default for the rest of the command list.
11763 1999-04-02 16:03 millert
11765 * CHANGES, RUNSON: update for 1.5.9
11767 1999-04-02 16:02 millert
11769 * visudo.c: Shift return value of system(3) by 8 to get real exit
11770 value and if it is not 1 or 0 print the retval along with the
11773 1999-03-30 16:45 millert
11775 * Makefile.in: testsudoers needs LIBOBJS too
11777 1999-03-30 12:17 millert
11779 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11780 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11781 would not allow millert to run ls as root.
11783 1999-03-30 01:08 millert
11785 * CHANGES: new change
11787 1999-03-30 01:03 millert
11789 * parse.yacc: Save entries that match a ! command on the matching
11792 1999-03-30 01:01 millert
11794 * sudo.c: Make sudo's usage info better when mutually exclusive
11795 args are given and don't rely on argument order to detect this;
11798 1999-03-29 15:03 millert
11800 * CHANGES, Makefile.in, RUNSON: updates from CU
11802 1999-03-28 23:38 millert
11804 * Makefile.in: use gzip
11806 1999-03-28 23:31 millert
11808 * parse.yacc: Fix off by one error introduced in *alloc changes
11810 1999-03-28 23:05 millert
11812 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11813 check_sia.c, compat.h, config.h.in, configure, configure.in,
11814 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11815 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11816 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11817 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11818 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11819 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11820 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11821 emul/utime.h: ++version
11823 1999-03-28 21:59 millert
11825 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11826 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11827 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11828 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11829 emalloc/erealloc/estrdup
11831 1999-03-28 20:29 millert
11833 * alloc.c: error checking memory allocation routines
11835 1999-03-28 19:23 millert
11837 * parse.yacc: Still not right, this fixes it for real
11839 1999-03-28 19:08 millert
11841 * parse.yacc: Fix for previous commit
11843 1999-03-28 19:05 millert
11845 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11846 when mixing different runas specs and ! commands. For example:
11847 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11848 allow millert to run whoami as root as well as daemon when it
11849 should just allow daemon. The problem was that comma-separated
11850 commands in a list shared the same entry on the matching stack.
11851 Now they get their own entry iff there is a full match. It may
11852 be better to just make the runas spec persistent across all
11853 commands in a list like the user and host entries of the matching
11854 stack. However, since that is a fairly major change it should
11855 gets its own minor rev increase.
11857 1999-03-28 13:50 millert
11859 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11862 1999-03-26 13:17 millert
11866 1999-03-26 13:12 millert
11868 * sample.sudoers: better su entry
11870 1999-03-26 13:10 millert
11874 1999-03-26 13:09 millert
11876 * check.c, configure.in: new pam code that works on solaris, should
11877 work on linux too; aelberg@home.com
11879 1999-03-19 14:44 millert
11881 * RUNSON: more entries
11883 1999-03-19 14:43 millert
11885 * config.h.in: only include strings.h if there is no string.h
11887 1999-03-17 15:25 millert
11889 * config.guess: Sinix is now being called ReliantUNIX;
11890 bjjackso@us.oracle.com
11892 1999-03-13 13:37 millert
11894 * sudo.c: shost must be set before log functions are called #ifdef
11897 1999-03-07 18:34 millert
11899 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11900 command args. Stop processing an arg when you hit a backslash so
11901 the quoted-character detection can catch it.
11903 1999-02-26 01:19 millert
11905 * interfaces.c: include sys/time.h; aparently AIX needs it.
11908 1999-02-23 19:43 millert
11910 * configure, configure.in: add missing case statement so
11911 --without-sendmail works
11913 1999-02-22 21:51 millert
11917 1999-02-22 15:10 millert
11919 * configure, configure.in: only search for -lsun in irix <= 4.x
11921 1999-02-22 15:01 millert
11923 * configure, configure.in: back out last configure.in change now
11924 that I've hacked autoconf to fix the real problem and add a
11927 1999-02-22 14:32 millert
11931 1999-02-22 14:05 millert
11933 * getcwd.c: add def of dirfd() for those without it
11935 1999-02-22 10:58 millert
11937 * configure.in, configure: When falling back to checking for
11938 socket() when linking with "-lsocket -lnsl" check for main()
11939 instead since autoconf has already cached the results of checking
11940 for socket() in -lsocket. This is really an autoconf bug as it
11941 should use the extra libs as part of the cache variable name.
11943 1999-02-22 10:47 millert
11945 * configure.in: typo
11947 1999-02-21 15:18 millert
11949 * configure.in: fix occurrence of $with_timeout that should be
11950 $with_password_timeout;
11951 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11953 1999-02-17 11:40 millert
11955 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11958 1999-02-11 01:41 millert
11960 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11961 it does not have it
11963 1999-02-09 13:11 millert
11965 * configure, configure.in: define for_BSD_TYPES irix
11967 1999-02-06 19:47 millert
11969 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11970 clear that it is the user's password, not root's, that we want.
11972 1999-02-06 19:43 millert
11974 * check.c, sudo.h: If the user enters an empty password and really
11975 has no password, accept the empty password they entered.
11976 Perviously, they could enter anything *but* an empty password.
11977 Also, add GETPASS macro that calls either tgetpass() or getpass()
11978 depending on how sudo was configured. Problem noted by
11979 jdg@maths.qmw.ac.uk
11981 1999-02-02 23:32 millert
11983 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11984 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11985 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11986 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11987 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11988 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11989 emul/utime.h: add explicate copyright
11991 1999-02-02 23:16 millert
11993 * CHANGES: mention -lsocket, -lnsl configure changes
11995 1999-02-02 17:54 millert
11997 * sudo.c: Don't clobber errno after calling check_sudoers().
11999 1999-01-31 19:46 millert
12001 * configure.in, configure: When linking with both -lsocket and
12002 -lnsl be sure to do so in that order. Also, when we can't find
12003 socket() or inet_addr() and have to try linking with both libs,
12006 1999-01-31 19:45 millert
12008 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
12010 1999-01-23 12:18 millert
12012 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
12015 1999-01-22 13:13 millert
12017 * configure, CHANGES, INSTALL, configure.in: fix and correctly
12018 document --with-umask; problem noted by adap@adap.org
12020 1999-01-19 20:38 millert
12022 * configure.in, configure: only use /usr/{man,catman}/local to
12023 store man pages if suer didn't override prefix or mandir
12025 1999-01-19 20:24 millert
12027 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
12030 1999-01-18 21:53 millert
12032 * RUNSON: updates from users
12034 1999-01-18 21:04 millert
12036 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
12037 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
12039 1999-01-18 20:00 millert
12041 * configure, configure.in: better fix for the problem of unresolved
12042 symbols in -lnsl or -lsocket
12044 1999-01-18 19:39 millert
12046 * configure, configure.in: when checking for functions in -lnsl and
12047 -lsocket link with both of them to avoid unresolved symbols on
12048 some weirdo systems
12050 1999-01-17 20:49 millert
12052 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
12053 RCS before the RCS->CVS switch
12055 1999-01-17 18:16 millert
12057 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12058 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
12059 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12060 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
12061 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
12062 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
12063 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
12064 emul/utime.h: add sudo tags
12066 1999-01-17 17:53 millert
12068 * version.h, sudo.h: testing Sudo tag
12070 1999-01-17 17:40 millert
12072 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12073 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12074 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12075 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12076 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12077 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12078 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12079 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12080 emul/utime.h: crank version and regen files
12082 1999-01-17 17:27 millert
12084 * Makefile.in: kill rcs goop in update_version and fix now that
12087 1999-01-17 17:08 millert
12089 * INSTALL, check.c, config.h.in, configure, configure.in,
12090 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12091 fcusack@iconnet.net
12093 1999-01-17 16:45 millert
12095 * realpath.c, sudo_realpath.c: we no longer use realpath
12097 1999-01-17 16:44 millert
12099 * qualify.c: replaced by find_path.c
12101 1999-01-17 16:43 millert
12103 * options.h: all options are now configure flags
12105 1999-01-17 16:42 millert
12109 1999-01-17 16:41 millert
12111 * getwd.c: superceded by getcwd.c
12113 1999-01-17 16:36 millert
12115 * getpass.c: superceded by tgetpass.c
12117 1999-01-17 16:36 millert
12119 * SUPPORTED: superceded by RUNSON
12121 1999-01-17 16:33 millert
12123 * OPTIONS: No longer used now that we have configure options for
12126 1999-01-17 16:32 millert
12128 * configure: regen based on configure.in
12130 1999-01-17 16:31 millert
12132 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12133 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12134 on sudo.pod, sudoers.pod, and visudo.pod
12136 1998-12-11 12:16 millert
12138 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12140 1998-12-07 16:16 millert
12142 * interfaces.c: close sock when we are done with it
12144 1998-11-27 19:37 millert
12146 * parse.yacc: never say "error on line -1"
12148 1998-11-23 23:38 millert
12150 * configure.in: check for -lnsl before -lsocket
12152 1998-11-23 23:29 millert
12154 * configure.in: quote '[', ']' used in ranges correctly
12156 1998-11-21 17:54 millert
12158 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12160 1998-11-20 18:33 millert
12164 1998-11-20 18:33 millert
12166 * INSTALL: more info for 1.5.7
12168 1998-11-20 18:30 millert
12170 * README: update for 1.5.7
12172 1998-11-20 14:26 millert
12174 * parse.yacc: make increases of cm_list_size and ga_list_size be
12175 similar to increases of stacksize (ie: >= not > in initial
12178 1998-11-20 14:22 millert
12180 * parse.yacc: when we get a syntax error, report it for the
12181 previous line since that's generally where the error occurred.
12183 1998-11-18 15:31 millert
12185 * config.h.in, configure.in, interfaces.c: add back check for
12186 sys/sockio.h but only use it if SIOCGIFCONF is not defined
12188 1998-11-18 15:25 millert
12190 * config.h.in: define BSD_COMP for svr4
12192 1998-11-17 23:16 millert
12194 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12195 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12196 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12197 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12200 1998-11-17 23:10 millert
12202 * configure.in: kill check for sockio,h
12204 1998-11-17 23:10 millert
12206 * config.h.in: no more HAVE_SYS_SOCKIO_H
12208 1998-11-17 22:51 millert
12210 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12211 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12212 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12213 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12216 1998-11-16 17:38 millert
12218 * sudo.c: add missing inform_user()
12220 1998-11-13 19:21 millert
12222 * find_path.c: return NOT_FOUND if given fully qualified path and
12223 it does not exist previously it would perror(ENOENT) which
12224 bypasses the option to not leak path info
12226 1998-11-13 19:20 millert
12228 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12229 for kerb, check for -ldes
12231 1998-11-13 14:19 millert
12233 * INSTALL: tty tickets are user:tty now
12235 1998-11-13 14:10 millert
12237 * check.c: when using tty tickets make it user:tty not user.tty as
12238 a username could have a '.' in it
12240 1998-11-09 19:15 millert
12242 * sudo.c: add "ignoring foo found in ." for auth successful case
12244 1998-11-09 17:57 millert
12246 * sudo.c: add missing printf param
12248 1998-11-08 15:56 millert
12250 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12251 go back to printing "command not found" unless
12252 --disable-path-info specified. Also, tell user when we ignore
12253 '.' in their path and it would have been used but for
12256 1998-11-08 13:51 millert
12258 * check.c, sudo.c: Only one space after a colon, not two, in
12261 1998-11-05 12:59 millert
12263 * sudo.pod: document setting $USER
12265 1998-11-04 22:24 millert
12267 * check.c: fix bugs with prompt expansion
12269 1998-11-04 21:21 millert
12271 * sudo.c: set $USER for root too
12273 1998-11-04 17:13 millert
12275 * getspwuid.c: typo
12277 1998-11-04 17:07 millert
12279 * configure.in: HP-UX's iscomsec is in -lsec, not libc
12281 1998-11-03 22:24 millert
12283 * configure.in: remove some entries in the OS case statement that
12286 1998-11-03 22:19 millert
12288 * TROUBLESHOOTING: add "cd" section and flush out syslog section
12290 1998-11-03 20:51 millert
12292 * Makefile.in: no more sudo-lex.yy.c
12294 1998-11-03 20:50 millert
12296 * check_sia.c: add custom prompt support
12298 1998-11-03 20:40 millert
12300 * sudo.c: kill perror("malloc") since we already have a good error
12301 messages pw_ent -> pw for brevity set $USER if -u specified
12303 1998-11-03 20:39 millert
12305 * parse.c: kill perror("malloc") since we already have a good error
12306 messages pw_ent -> pw for brevity when checking if %group
12307 matches, look up user in password file so that %groups works in a
12310 1998-11-03 20:39 millert
12312 * logging.c, parse.yacc: kill perror("malloc") since we already
12313 have a good error messages
12315 1998-11-03 20:38 millert
12317 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12318 perror("malloc") since we already have a good error messages
12319 pw_ent -> pw for brevity
12321 1998-11-03 15:03 millert
12323 * tgetpass.c: the prompt is expanded before tgetpass is called
12325 1998-11-03 15:03 millert
12327 * sudo.h: tgetpass now has the same args as getpass again
12329 1998-11-03 15:02 millert
12331 * getspwuid.c: add iscomsec, issecure support
12333 1998-11-03 15:02 millert
12335 * check.c: we now expand any %h or %u in the prompt before passing
12338 1998-11-03 14:58 millert
12340 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12342 1998-11-03 14:56 millert
12344 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12346 1998-11-03 14:55 millert
12348 * configure.in: add check for iscomsec in HP-UX
12350 1998-11-03 14:51 millert
12352 * configure.in: check for issecure if we have getpwanam on SunOS
12353 some options are incompatible with DUNIX SIA check for dispcrypt
12356 1998-10-25 15:21 millert
12358 * config.h.in: add HAVE_DISPCRYPT
12360 1998-10-25 15:21 millert
12362 * secureware.c: add back support for non-dispcrypt based checking
12365 1998-10-25 00:51 millert
12367 * INSTALL: sia changes
12369 1998-10-25 00:48 millert
12371 * configure.in: SIA becomes the default on Digital UNIX now havbe
12372 --disable-sia to turn it off...
12374 1998-10-24 23:52 millert
12376 * check.c: move local includes after system ones
12378 1998-10-24 19:28 millert
12380 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12381 INCORRECT_PASSWORD or an insult to stderr
12383 1998-10-24 19:07 millert
12385 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12386 password. Only the first iteration was working.
12388 1998-10-21 21:00 millert
12390 * aclocal.m4: don't trust UID_MAX or MAXUID
12392 1998-10-21 20:35 millert
12394 * configure.in: fix two pastos
12396 1998-10-21 20:30 millert
12398 * configure.in: fix typo
12400 1998-10-21 20:19 millert
12402 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12403 legal to be negative in DUNX 5.0
12405 1998-10-21 20:15 millert
12407 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12408 -lm but check for -ldb since DUNX < 4.0 lacks it
12410 1998-10-21 19:50 millert
12412 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12413 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12414 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12417 1998-10-20 17:22 millert
12419 * INSTALL: updated --with-editor blurb
12421 1998-10-20 17:21 millert
12423 * TROUBLESHOOTING: tell how to put sudoers in a different dir
12425 1998-10-20 16:22 millert
12427 * configure.in: add missing quotes around $with_editor
12429 1998-10-20 14:00 millert
12431 * configure.in: typo in --with-editor bits
12433 1998-10-20 01:24 millert
12435 * INSTALL: I don't expect it to work on Solaris
12437 1998-10-20 01:24 millert
12439 * check.c: add back security/pam_misc.h
12441 1998-10-19 17:13 millert
12443 * INSTALL: remove dunix note since configure checks for this now
12445 1998-10-19 16:30 millert
12447 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12450 1998-10-19 14:32 millert
12452 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12455 1998-10-19 14:32 millert
12457 * config.h.in: add HAVE_INITPRIVS
12459 1998-10-19 14:31 millert
12461 * sudo.c: call initprivs() if we have it for getprpwuid later on
12463 1998-10-19 14:30 millert
12465 * Makefile.in: clean pathnames.h too
12467 1998-10-19 14:28 millert
12469 * configure.in: quote "Sorry, try again." with [] since it has a
12470 comma in it set LIBS when we add stuff to SUDO_LIBS set
12471 SECUREWARE when we find getprpwuid() so we can check for
12472 bigcrypt, set_auth_parameters, and initprivs later.
12474 1998-10-19 13:48 millert
12476 * INSTALL: update Digital UNIX note about acl.h
12478 1998-10-18 20:26 millert
12480 * INSTALL: add --with-sia --without-root-sudo ->
12481 --disable-root-sudo some reordering
12483 1998-10-18 20:22 millert
12485 * secureware.c: add whitespace
12487 1998-10-18 20:22 millert
12489 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12490 sudo.h: add SIA support
12492 1998-10-18 20:21 millert
12494 * check_sia.c: Initial revision
12496 1998-10-18 19:42 millert
12498 * configure.in: when checking for -lsocket, -lnsl, and -linet,
12499 check for the specific functions we need from them.
12501 1998-10-18 19:10 millert
12503 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12505 1998-10-18 18:15 millert
12507 * sudo.h, Makefile.in: added check_secureware
12509 1998-10-18 18:12 millert
12511 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12514 1998-10-18 18:00 millert
12516 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12517 other sets defined. configure now does that for us
12519 1998-10-18 17:45 millert
12521 * configure.in: move some --with options around change a bunch of
12522 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12524 1998-10-18 01:09 millert
12526 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12527 that caused a syntax error add some echo verbage
12529 1998-10-17 18:08 millert
12531 * check.c: moved SecureWare stuff into secureware.c
12533 1998-10-17 18:07 millert
12535 * secureware.c: Initial revision
12537 1998-10-17 17:02 millert
12539 * INSTALL: update url to solaris gcc bins
12541 1998-10-17 16:39 millert
12543 * INSTALL: change option formatter and flesh out someentries
12545 1998-10-17 16:18 millert
12547 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12548 environment variable
12550 1998-10-17 16:01 millert
12552 * BUGS: everything is now done via configure
12554 1998-10-17 16:00 millert
12556 * README: prev rev was 1.5.6
12558 1998-10-17 00:33 millert
12560 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12563 1998-10-17 00:32 millert
12565 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12568 1998-10-17 00:31 millert
12570 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12571 sudoers_gid, sudoers_mode from configure
12573 1998-10-17 00:30 millert
12575 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12576 substituted into the Makefile, not config.h
12578 1998-10-17 00:30 millert
12580 * INSTALL: document all --with/--enable options
12582 1998-10-15 02:25 millert
12584 * insults.h: options.h is no more
12586 1998-10-15 02:25 millert
12588 * config.h.in: assimilated options.h
12590 1998-10-15 02:24 millert
12592 * configure.in: moved options from options.h to configure
12594 1998-10-15 01:41 millert
12596 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12597 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12598 sudo_setenv.c, visudo.c: no more options.h
12600 1998-10-15 01:39 millert
12602 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12605 1998-10-15 01:32 millert
12607 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12609 1998-10-15 00:10 millert
12611 * tgetpass.c: if select return < -1 still prompt for pw
12613 1998-10-15 00:03 millert
12615 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12616 IGNORE_DOT_PATH into configure options
12618 1998-10-14 23:57 millert
12620 * parse.c: FAST_MATCH is no longer an optino
12622 1998-10-14 23:52 millert
12624 * check.c: remove_timestamp() if timestamp is preposterous
12626 1998-10-14 23:36 millert
12628 * options.h: convert more options to --with/--enable
12630 1998-10-14 23:36 millert
12632 * INSTALL, aclocal.m4: logfile -> logpath
12634 1998-10-14 23:31 millert
12636 * configure.in: convert more options into --with and --enable
12638 1998-10-14 23:28 millert
12640 * tgetpass.c: catch EINTR in select and restart
12642 1998-10-14 23:15 millert
12644 * logging.c: sys/errno -> errno
12646 1998-09-24 11:40 millert
12648 * sudo.c: UMASK -> SUDO_UMASK.
12650 1998-09-24 11:36 millert
12652 * check.c, logging.c: time.h, not sys/time.h
12654 1998-09-21 19:52 millert
12656 * logging.c: MAILER -> _PATH_SENDMAIL
12658 1998-09-21 00:06 millert
12660 * INSTALL, configure.in: no more --with-C2, now it is
12663 1998-09-21 00:00 millert
12665 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12666 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12667 Always include shadow support if the platform supports it and the
12668 user did not disable it via configure
12670 1998-09-20 19:48 millert
12672 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12674 1998-09-20 19:16 millert
12676 * Makefile.in: pathnames.h -> pathnames.h.in
12678 1998-09-20 19:14 millert
12680 * check.c: fix version string
12682 1998-09-20 19:12 millert
12684 * check.c: move pam_conv to be static to auth function remove
12685 pam_misc.h (solaris doesn't have one)
12687 1998-09-20 19:10 millert
12689 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12692 1998-09-20 19:10 millert
12694 * configure.in: munge pathnames.h.in -> pathnames.h kill
12697 1998-09-20 19:10 millert
12699 * pathnames.h.in: convert to pathnames.h.in
12701 1998-09-18 20:20 millert
12703 * configure.in: fix typo in sysv4 matching case /.
12705 1998-09-18 01:29 millert
12707 * check.c: pam stuff needs to run as root, not user, for shadow
12710 1998-09-17 12:26 millert
12712 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12713 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12714 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12715 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12716 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12717 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12718 BUGS, INSTALL, README, configure.in: updated version
12720 1998-09-17 12:13 millert
12722 * check.c: user version.h for long message
12724 1998-09-17 11:53 millert
12726 * check.c: this is version 1.5.6
12728 1998-09-16 13:42 millert
12730 * Makefile.in: remove errant backslash
12732 1998-09-14 22:25 millert
12734 * options.h, parse.yacc, pathnames.h.in: fix version string
12736 1998-09-14 22:02 millert
12738 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12740 1998-09-14 22:02 millert
12742 * RUNSON: updated for 1.5.6
12744 1998-09-14 11:48 millert
12746 * interfaces.c: kill unused localhost_mask var copy if name to
12747 ifr_tmp after we zero it
12749 1998-09-13 15:50 millert
12751 * INSTALL: Better description of new vs. old sudoers modes fix some
12752 typos better description of /usr/ucb/cc gotchas on slowaris
12754 1998-09-13 15:49 millert
12756 * Makefile.in: add sample.pam
12758 1998-09-13 15:32 millert
12760 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12762 1998-09-12 11:10 millert
12764 * README: mention TROUBLESHOOTING more fix some typos
12766 1998-09-11 20:30 millert
12768 * configure.in: move --enable/--disable to be after --with
12770 1998-09-11 20:30 millert
12772 * INSTALL: document --enable/--disable
12774 1998-09-11 20:26 millert
12776 * INSTALL: document --with-pam
12778 1998-09-11 19:47 millert
12780 * configure.in: Add message for pam users
12782 1998-09-11 19:27 millert
12784 * sample.pam: Initial revision
12786 1998-09-11 19:23 millert
12788 * config.h.in: fix HAVE_PAM
12790 1998-09-11 19:19 millert
12792 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12793 <GCalvin@kenwoodusa.com>
12795 1998-09-10 18:51 millert
12797 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12799 1998-09-10 18:51 millert
12801 * logging.c: add WRAP_LOG and HOST_IN_LOG
12803 1998-09-10 18:37 millert
12805 * configure.in: add --enable-log-host and --enable-log-wrap
12807 1998-09-10 18:32 millert
12809 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12812 1998-09-08 20:45 millert
12814 * compat.h: add howmany macro
12816 1998-09-08 20:43 millert
12818 * tgetpass.c: include sys/param.h to get howmany macro
12820 1998-09-07 20:42 millert
12822 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12825 1998-09-07 12:51 millert
12827 * fnmatch.c: bring in stdio.h for NULL
12829 1998-09-07 12:50 millert
12831 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12833 1998-09-07 12:43 millert
12835 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12837 1998-09-07 12:42 millert
12839 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12841 1998-09-07 12:41 millert
12843 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12846 1998-09-07 12:39 millert
12848 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12850 1998-09-07 12:06 millert
12852 * interfaces.c: initialize previfname
12854 1998-09-07 11:51 millert
12856 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12857 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12858 IFF_LOOPBACK instead of kludging it
12860 1998-09-07 11:49 millert
12862 * configure.in: typo
12864 1998-09-07 00:01 millert
12866 * Makefile.in: don't need special build line for sudo.tab.o
12868 1998-09-06 23:58 millert
12870 * Makefile.in: don't clean sudo.tab.[ch]
12872 1998-09-06 23:48 millert
12874 * sudo.c: Sudo should prompt for a password before telling the user
12875 that a command could not be found.
12877 1998-09-06 23:47 millert
12881 1998-09-06 23:25 millert
12883 * INSTALL, README: no longer require yacc
12885 1998-09-06 23:19 millert
12887 * Makefile.in: typo
12889 1998-09-06 23:18 millert
12891 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12893 1998-09-06 23:09 millert
12895 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12896 command args if you get a '='
12898 1998-09-06 22:59 millert
12900 * insults.h: fix version ,
12902 1998-09-06 22:57 millert
12904 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12907 1998-09-06 22:55 millert
12909 * getcwd.c: getcwd(3) from OpenBSD for those without it.
12911 1998-09-06 22:51 millert
12913 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12915 1998-09-06 22:49 millert
12917 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12920 1998-09-06 22:41 millert
12922 * parse.c: use NAMLEN() macro
12924 1998-09-06 22:34 millert
12926 * fnmatch.c: remove duplicate include of string.h
12928 1998-09-06 22:28 millert
12930 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12932 1998-09-06 22:28 millert
12934 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12936 1998-09-06 22:28 millert
12938 * config.h.in: add dev_t and ino_t
12940 1998-07-28 12:44 millert
12942 * check.c: fix OTP_ONLY for opie
12944 1998-06-24 12:22 millert
12946 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12948 1998-05-19 00:10 millert
12950 * Makefile.in: make update_version saner
12952 1998-05-18 23:32 millert
12954 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12956 1998-05-18 23:32 millert
12958 * configure.in: check for waitpid and wait3 or no waitpid
12960 1998-05-18 23:31 millert
12962 * logging.c: used waitpid or wait3 if we have 'em
12964 1998-05-02 14:16 millert
12966 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12969 1998-04-27 20:09 millert
12971 * configure.in: don't need to explicately mention -lsocket -lnsl
12974 1998-04-25 01:56 millert
12976 * configure.in: dynix should not link with -linet
12978 1998-04-10 15:32 millert
12980 * INSTALL: mention that HP-UX doesn't ship with yacc
12982 1998-04-06 22:35 millert
12984 * check.c: ignore kerberos if we can't get the local realm
12986 1998-04-05 23:37 millert
12988 * configure.in, BUGS, INSTALL, README: ++version
12990 1998-04-05 23:36 millert
12994 1998-04-05 23:35 millert
12996 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12997 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12998 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12999 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
13000 visudo.c: updated version
13002 1998-04-05 23:34 millert
13004 * check.c, sudo.h: fix version
13006 1998-04-05 23:33 millert
13008 * getcwd.c: don't use popen/pclose. Do it inline.
13010 1998-04-05 23:25 millert
13012 * lsearch.c: add rcsid
13014 1998-04-05 23:21 millert
13018 1998-04-05 23:17 millert
13020 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
13021 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13022 check.c: updated version
13024 1998-04-05 23:15 millert
13026 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
13029 1998-04-05 23:14 millert
13031 * Makefile.in: getwd.c -> getcwd.c
13033 1998-04-05 22:49 millert
13035 * config.h.in: kill HAVE_GETWD
13037 1998-04-05 22:49 millert
13039 * configure.in: getcwd, not getwd
13041 1998-04-05 22:48 millert
13043 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
13044 defeats the purpose
13046 1998-03-31 00:15 millert
13048 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
13050 1998-03-31 00:05 millert
13052 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13053 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13054 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13055 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13056 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13057 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13060 1998-03-30 23:54 millert
13062 * configure.in: support *-ccur-sysv4 and fix two typos
13064 1998-03-27 19:52 millert
13066 * configure.in: don't echo about with_logfile and with_timedir
13068 1998-03-27 19:49 millert
13070 * INSTALL: document --with-logfile and --with-timedir
13072 1998-03-27 19:46 millert
13074 * aclocal.m4: support --with-logfile and --with-timedir
13076 1998-03-27 19:46 millert
13078 * configure.in: Add --with-logfile and --with-timedir
13080 1998-03-27 19:27 millert
13082 * sudo.c: change size computation of NewArgv for UNICOS
13084 1998-02-18 20:10 millert
13086 * configure.in: treate -*-sysv4* like *-*-svr4
13088 1998-02-18 18:19 millert
13090 * configure.in: fix spacing for --with-authenticate help
13092 1998-02-18 16:39 millert
13094 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13095 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13096 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13097 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13098 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13099 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13102 1998-02-18 16:23 millert
13104 * parse.yacc: fix off by one error in push macro
13106 1998-02-17 01:15 millert
13108 * configure.in: removed bogus alloca hack
13110 1998-02-17 01:15 millert
13112 * check.c: added AIX 4.x authenticate() support
13114 1998-02-17 01:11 millert
13116 * parse.yacc: include alloca.h if using bison and not gcc and it
13117 exists. fixes an alloca problem on hpux 10.x
13119 1998-02-17 00:39 millert
13121 * INSTALL: mention --with-authenticate
13123 1998-02-17 00:37 millert
13125 * configure.in: added AIX authenticate() support
13127 1998-02-17 00:22 millert
13129 * config.h.in: add HAVE_AUTHENTICATE
13131 1998-02-16 23:58 millert
13133 * interfaces.c: dynamically size ifconf buffer
13135 1998-02-16 23:56 millert
13137 * configure.in: quote '[' and ']'
13139 1998-02-16 21:42 millert
13141 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13142 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13143 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13144 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13145 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13146 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13149 1998-02-16 19:06 millert
13151 * visudo.pod: add ERRORS section
13153 1998-02-16 18:57 millert
13155 * TROUBLESHOOTING: add busy stmp file explanation
13157 1998-02-15 18:49 millert
13159 * configure.in: the name of the cached var that signals whether or
13160 not you are cross compiling changed. It is now
13161 ac_cv_prog_cc_cross
13163 1998-02-11 16:26 millert
13165 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13167 1998-02-06 21:55 millert
13169 * sample.sudoers, sudoers.pod: better example of su but not root su
13171 1998-02-06 15:49 millert
13173 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13174 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13175 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13176 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13177 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13178 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13181 1998-02-06 15:48 millert
13183 * Makefile.in: correct regexp for updating version
13185 1998-02-06 14:05 millert
13187 * tgetpass.c: remove bogus flush of stderr spew prompt before
13188 turning off echo. Seems to fix a weird problem where if sudo
13189 complained about a bogus stamp file the user would sometimes not
13190 have a chance to enter a password
13192 1998-02-06 14:05 millert
13194 * check.c: fix bogus flush of stderr
13196 1998-02-05 19:19 millert
13198 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13200 1998-02-05 19:18 millert
13202 * configure.in: support hpux1[0-9] not just hpux10
13204 1998-01-30 14:59 millert
13206 * parse.c: set sudoers_fp to nil after closing
13208 1998-01-24 01:05 millert
13210 * config.guess, config.sub: updated from autoconf 2.12
13212 1998-01-24 00:50 millert
13214 * configure.in: add *-*-svr4 rule
13216 1998-01-22 22:53 millert
13218 * tgetpass.c: fix select usage for high fd's (dynamically allocate
13221 1998-01-22 22:49 millert
13223 * check.c: kill extra whitespace
13225 1998-01-22 19:28 millert
13227 * sudo.c: do an initgroups() before running a command, unless the
13228 target user is root.
13230 1998-01-22 12:22 millert
13232 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13235 1998-01-21 01:56 millert
13237 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13238 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13241 1998-01-21 01:32 millert
13243 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13246 1998-01-21 01:29 millert
13248 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13249 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13250 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13253 1998-01-21 01:20 millert
13255 * Makefile.in: more tweaks to update_version
13257 1998-01-21 01:19 millert
13259 * Makefile.in: fixed up update_version rule
13261 1998-01-21 00:55 millert
13263 * configure.in: ++version
13265 1998-01-21 00:53 millert
13267 * Makefile.in: removed supe of check.c
13269 1998-01-21 00:51 millert
13271 * INSTALL: ++version I missed
13273 1998-01-21 00:51 millert
13277 1998-01-21 00:48 millert
13279 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13280 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13281 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13282 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13283 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13284 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13285 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13287 1998-01-21 00:47 millert
13289 * CHANGES: updated for 1.5.5
13291 1998-01-21 00:35 millert
13293 * Makefile.in: add rules to update version stuff in files so I
13294 don't need to do it by hand
13296 1998-01-21 00:04 millert
13298 * sudo.h: sudoers_fp is now extern
13300 1998-01-21 00:03 millert
13302 * sudo.c: in check_sudoers, cache the sudoers file handle in
13303 sudoers_fp so we don't have to open it again in the parse. This
13304 may help with weird solaris problems where EAGAIN sometime
13307 1998-01-21 00:02 millert
13309 * parse.c: sudoers file open is now done only in check_sudoers() so
13310 we just do a rewind() instead of an open. May help people on
13311 solaris who were getting EAGAIN.
13313 1998-01-16 11:43 millert
13315 * INSTALL: mention that newer glibc is fixed
13317 1998-01-13 12:58 millert
13319 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13320 so ignore _RLD* instead of _RLD_*
13322 1998-01-13 10:32 millert
13326 1998-01-13 10:19 millert
13328 * parse.c: fix that bug for real
13330 1998-01-13 02:39 millert
13332 * INSTALL: document Linux's libc6 brokenness.
13334 1998-01-13 02:00 millert
13336 * parse.yacc: -Wall
13338 1998-01-13 01:22 millert
13342 1998-01-13 00:50 millert
13344 * TROUBLESHOOTING: remind people to HUP syslogd
13346 1998-01-13 00:05 millert
13348 * Makefile.in: add -O flag to tar
13350 1998-01-13 00:00 millert
13352 * TODO, RUNSON: updated
13354 1998-01-12 23:59 millert
13356 * sudo.pod: remove author's email addr. people should mail
13359 1998-01-12 23:49 millert
13361 * INSTALL: fix version
13363 1998-01-12 23:48 millert
13365 * README, check.c, compat.h, config.h.in, configure.in,
13366 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13367 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13368 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13369 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13370 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13371 visudo.c: ++version
13373 1998-01-12 23:44 millert
13377 1998-01-12 23:42 millert
13379 * INSTALL, Makefile.in: ++version
13381 1998-01-12 23:41 millert
13383 * CHANGES: updated fort 1.5.4
13385 1998-01-12 23:41 millert
13387 * check.c: exit(1) if user enters no passwd
13389 1998-01-12 23:37 millert
13393 1998-01-12 23:10 millert
13395 * parse.c: commands can start with ./* not just /* -- fixes a
13396 serious security hole.
13398 1997-12-21 18:17 millert
13400 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13401 leave it as "unknown".
13403 1997-11-23 13:29 millert
13405 * sample.sudoers: fix usage of (username) in conjunction with , and
13408 1997-11-23 13:28 millert
13410 * visudo.c: catch the case where the user is not in the passwd file
13412 1997-11-23 13:24 millert
13414 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13415 the nfds arg to select(2)
13417 1997-11-23 01:53 millert
13419 * sudo.c: define tty global to an initial value to avoid dumping
13420 core in logging functions when passwd file is unavailable.
13422 1997-11-23 01:51 millert
13424 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13425 gotten the passwd entry
13427 1997-11-23 00:21 millert
13429 * sudo.pod: talk about problem of ALL
13431 1997-10-10 00:54 millert
13433 * README: new web location
13435 1997-10-10 00:54 millert
13437 * INSTALL: fdesc bug is fixed in Open/Net BSD
13439 1997-10-10 00:52 millert
13441 * HISTORY: updates from Nieusma
13443 1997-10-09 18:37 millert
13445 * dce_pwent.c: move compat.h after the system includes
13447 1997-08-06 14:58 millert
13449 * logging.c: save errno from being clobbered by wait(). From Theo
13451 1997-05-21 11:57 millert
13453 * compat.h: fix an occurence of setresuid -> setreuid (typo)
13455 1997-03-19 17:45 millert
13457 * install-sh: check for path to strip
13459 1997-01-15 19:05 millert
13461 * logging.c: deal with maxfilelen < 0 case
13463 1997-01-15 19:05 millert
13465 * OPTIONS: fixed descriptin
13467 1996-12-11 23:10 millert
13469 * sudo.c: correct error message if mode/owner wrong and not
13470 statable by owner but is statable by root.
13472 1996-11-23 02:18 millert
13474 * config.guess, config.sub: autoconf 2.11
13476 1996-11-16 14:42 millert
13478 * CHANGES, RUNSON, TODO: sudo 1.5.3.
13480 1996-11-14 15:08 millert
13482 * sudo.h, parse.yacc: command_alias -> generic_alias
13484 1996-11-13 22:50 millert
13486 * sample.sudoers: added Runas_Alias example and fixed syntax errors
13488 1996-11-13 22:50 millert
13490 * OPTIONS, options.h: updated MAILSUBJECT
13492 1996-11-13 22:49 millert
13494 * logging.c: added %h expansion
13496 1996-11-13 21:37 millert
13498 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13499 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13500 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13501 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13502 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13503 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13504 visudo.c, INSTALL, README, configure.in: ++version
13506 1996-11-13 20:01 millert
13508 * emul/utime.h, BUGS: ++version
13510 1996-11-13 19:45 millert
13512 * sudoers.pod: document Runas_Alias
13514 1996-11-13 19:22 millert
13516 * visudo.pod: q (uid) -> Q
13518 1996-11-13 19:21 millert
13520 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13523 1996-11-13 19:05 millert
13525 * parse.yacc: add size params to sprintf
13527 1996-11-13 19:04 millert
13529 * parse.lex: allow trailing space after '\\' but before '\n'
13531 1996-11-13 19:04 millert
13533 * find_path.c: off by one error in path size check
13535 1996-11-13 19:03 millert
13537 * check.c: sprintf paranoia
13539 1996-11-12 11:59 millert
13541 * parse.yacc: fixed more_aliases
13543 1996-11-12 11:58 millert
13545 * visudo.c: now warns if killed by signal ./
13547 1996-11-11 10:49 millert
13549 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13550 expanded (but it is gross)
13552 1996-11-10 20:32 millert
13554 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13557 1996-11-10 20:08 millert
13559 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13562 1996-11-10 20:02 millert
13564 * parse.lex: Add Runas_Alias and simplify a rule.
13566 1996-11-10 19:15 millert
13568 * parse.yacc: always store User_Alias's since they can be used
13569 inside of a runas list. Sigh. Really need a Runas_Alias
13572 1996-10-30 18:04 millert
13574 * visudo.c: deal with case where there is no sudoers file
13576 1996-10-11 23:01 millert
13578 * TROUBLESHOOTING: added one
13580 1996-10-10 22:11 millert
13582 * HISTORY, testsudoers.c: developement -> development
13584 1996-10-10 22:08 millert
13586 * INSTALL: added a note
13588 1996-10-10 20:36 millert
13590 * RUNSON: for 1.5.2
13592 1996-10-10 20:36 millert
13596 1996-10-10 00:56 millert
13598 * PORTING: removed seteuid() notes
13600 1996-10-09 13:37 millert
13602 * compat.h: better seteuid() emulatino
13604 1996-10-09 13:36 millert
13606 * configure.in: added check for seteuid
13608 1996-10-09 13:36 millert
13610 * config.h.in: added HAVE_SETEUID
13612 1996-10-08 19:22 millert
13614 * configure.in: first stab at sequent support
13616 1996-10-08 19:21 millert
13618 * config.h.in: added HAVE_SYS_SELECT_H
13620 1996-10-08 19:21 millert
13622 * compat.h: sequent -> _SEQUENT_
13624 1996-10-08 19:11 millert
13626 * compat.h: added seteuid() macro for DYNIX
13628 1996-10-08 18:54 millert
13630 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13632 1996-10-07 01:05 millert
13634 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13635 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13636 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13637 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13638 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13639 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13640 visudo.c, tgetpass.c: ++version
13642 1996-10-07 00:59 millert
13644 * sudo.pod: added -H and SUDO_PS1
13646 1996-10-07 00:55 millert
13648 * configure.in: use SUDO_FUNC_FNMATCH
13650 1996-10-07 00:54 millert
13652 * aclocal.m4: added SUDO_FUNC_FNMATCH
13654 1996-10-07 00:53 millert
13656 * sudo.c: added -H flag
13658 1996-10-07 00:53 millert
13660 * sudo.h: added MODE_RESET_HOME /
13662 1996-10-05 00:00 millert
13664 * INSTALL: mention OPIE
13666 1996-10-04 23:59 millert
13668 * configure.in: added opie support
13670 1996-10-04 23:59 millert
13672 * check.c: added HAVE_OPIE and changed to *_OTP_*
13674 1996-10-04 23:58 millert
13676 * compat.h, config.h.in: added HAVE_OPIE
13678 1996-10-04 23:58 millert
13680 * OPTIONS, options.h: SKEY -> OTP
13682 1996-10-03 23:27 millert
13684 * check.c: moved fclose() in skey stuff.
13686 1996-10-03 19:53 millert
13688 * putenv.c: index -> strchr remove unnecesary stuff
13690 1996-10-03 19:43 millert
13692 * check.c: now call skeychallenge() to get challenge instead of
13693 making one up ourselves. this way, we get extra goodies in the
13696 1996-09-10 00:32 millert
13698 * CHANGES: added one
13700 1996-09-10 00:18 millert
13702 * parse.lex: allow logins to start with a number (YUCK!)
13704 1996-09-08 15:18 millert
13706 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13708 1996-09-08 15:15 millert
13710 * configure.in: DUNIX doesn't need -lnsl
13712 1996-09-07 20:22 millert
13714 * CHANGES: [no log message]
13716 1996-09-07 20:21 millert
13718 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13719 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13720 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13721 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13722 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13723 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13725 1996-09-07 20:13 millert
13727 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13730 1996-09-07 20:12 millert
13732 * visudo.pod: [no log message]
13734 1996-09-07 20:00 millert
13736 * sudo.pod, visudo.pod: courtesan
13738 1996-09-07 19:45 millert
13740 * HISTORY: added courtesan ./
13742 1996-09-06 00:12 millert
13744 * sudo.c: added $SUDO_PROMPT support
13746 1996-09-04 17:19 millert
13748 * check.c: print long skey challemged to stderr, not stdout
13750 1996-08-31 23:10 millert
13752 * CHANGES: updated for 1.5.1
13754 1996-08-31 23:07 millert
13756 * emul/utime.h: ++version
13758 1996-08-31 12:34 millert
13760 * RUNSON: updated for 1.5.1
13762 1996-08-30 10:49 millert
13764 * check.c: use shost, not host for tgetpass
13766 1996-08-30 00:21 millert
13768 * OPTIONS, sudo.pod: documented %u and %h
13770 1996-08-29 20:40 millert
13772 * configure.in: fixed typo
13774 1996-08-29 20:37 millert
13776 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13777 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13778 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13779 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13780 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13781 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13782 visudo.c: ++version
13784 1996-08-29 20:30 millert
13788 1996-08-29 18:32 millert
13790 * configure.in, Makefile.in, version.h: ++version
13792 1996-08-29 17:58 millert
13794 * sudo.h: new tgetpass() params
13796 1996-08-29 17:58 millert
13798 * check.c: pass use and host to tgetpass
13800 1996-08-29 17:57 millert
13802 * tgetpass.c: added %u and %h escapes
13804 1996-08-29 16:56 millert
13806 * OPTIONS, options.h, check.c: added NO_MESSAGE
13808 1996-08-29 16:23 millert
13810 * configure.in: added cray (unicos) support
13812 1996-08-27 11:36 millert
13814 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13816 1996-08-25 17:56 millert
13818 * INSTALL: added note about "make install"
13820 1996-08-25 17:50 millert
13822 * parse.yacc: changed length/size params from int to size_t
13824 1996-08-25 13:35 millert
13826 * OPTIONS: now get CSOPS insults as well by default
13828 1996-08-25 13:33 millert
13830 * insults.h: use csops insults too by default
13832 1996-08-25 13:31 millert
13834 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13835 version.h: version = 1.5
13837 1996-08-25 13:27 millert
13839 * sudo.c: added runas_homedir
13841 1996-08-25 13:27 millert
13843 * TODO: updated for 1.5
13845 1996-08-25 13:23 millert
13847 * RUNSON: updated for 1.5
13849 1996-08-25 13:19 millert
13851 * CHANGES: 1.5 release
13853 1996-08-25 13:17 millert
13855 * INSTALL: added "upgrading" notes
13857 1996-08-22 14:00 millert
13859 * visudo.c: now do chmod and chown after edit of temp file and
13862 1996-08-18 12:52 millert
13864 * Makefile.in: ++version added INSTALL.configure
13866 1996-08-18 12:52 millert
13868 * version.h, configure.in: ++version
13870 1996-08-18 12:51 millert
13872 * TROUBLESHOOTING: [no log message]
13874 1996-08-18 12:50 millert
13876 * parse.yacc: added missing cast
13878 1996-08-17 20:37 millert
13880 * sudo.c: sets $HOME to pw_dir of runas user
13882 1996-08-17 20:02 millert
13884 * sudo.pod: document $HOME change
13886 1996-08-17 19:43 millert
13888 * sudo.pod: fixed up some wording
13890 1996-08-17 19:25 millert
13892 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13893 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13894 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13895 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13897 1996-08-17 19:19 millert
13899 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13900 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13903 1996-08-17 19:18 millert
13905 * sudo.h: name nad type changes
13907 1996-08-17 19:17 millert
13909 * testsudoers.c: now works with new sudo
13911 1996-08-17 19:07 millert
13913 * parse.yacc: fixed some XXX
13915 1996-08-17 18:52 millert
13917 * parse.yacc: some variable name changes + comment headers for
13920 1996-08-17 18:41 millert
13922 * tgetpass.c: added extra paren's to make compilers happy
13924 1996-08-17 18:34 millert
13926 * sudo.c: [no log message]
13928 1996-08-17 18:30 millert
13930 * parse.c: now uses init_parser() if not in sudoers and tries
13931 "list" or "validate" scold but don't be nasty.
13933 1996-08-17 18:29 millert
13935 * TROUBLESHOOTING: now can use upper case login names
13937 1996-08-17 18:29 millert
13939 * visudo.c: now uses init_parser()
13941 1996-08-17 18:28 millert
13943 * PORTING: added info about PASSWORD_TIMEOUT
13945 1996-08-17 18:28 millert
13947 * INSTALL, README: updated
13949 1996-08-17 18:28 millert
13951 * INSTALL.configure: Initial revision
13953 1996-08-17 18:27 millert
13955 * BUGS: fixed a bug ,
13957 1996-08-17 18:27 millert
13959 * parse.yacc: now dynamically allocates memory for the stacks -- no
13962 1996-08-17 18:26 millert
13964 * sudo.pod: -l now explands command aliases
13966 1996-08-17 13:22 millert
13968 * parse.yacc: hacks to expand command aliases for `sudo -l'
13970 1996-08-17 13:22 millert
13972 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13975 1996-08-17 13:22 millert
13977 * sudo.h: added struct command_alias
13979 1996-08-17 13:20 millert
13981 * sudo.pod: fixed a bug
13983 1996-08-17 13:15 millert
13985 * lsearch.c: in compar() key should be first arg
13987 1996-08-15 15:48 millert
13989 * BUGS: fixed some bugs
13991 1996-08-15 15:47 millert
13993 * parse.yacc: can now deal with upcase HOST and USER names
13995 1996-08-15 15:47 millert
13997 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13999 1996-08-15 15:46 millert
14001 * sudo.pod: fixed thinko
14003 1996-08-15 15:46 millert
14005 * parse.c: fix comment
14007 1996-08-09 18:07 millert
14009 * parse.c, parse.yacc: added support for new `sudo -l' stuff
14011 1996-08-09 18:06 millert
14013 * sudo.c: now uses list_matches()
14015 1996-08-09 18:06 millert
14017 * sudo.h: added struct sudo_match
14019 1996-08-09 17:37 millert
14021 * configure.in: now more -lgnumalloc
14023 1996-08-01 13:12 millert
14025 * install-sh: added more paths for chown and whoami
14027 1996-07-31 10:41 millert
14031 1996-07-30 13:45 millert
14033 * aclocal.m4: fixed DUNIX check for shadow pw
14035 1996-07-30 13:41 millert
14037 * tgetpass.c: now only turn off echo if it is already on. this
14038 fixes a race when you use sudo in a pipelin
14040 1996-07-30 12:53 millert
14044 1996-07-29 22:29 millert
14046 * configure.in: changed "test -z $foo && do_this" to if; then
14049 1996-07-28 22:47 millert
14051 * configure.in: added missing defines of SHADOW_TYPE
14053 1996-07-26 14:10 millert
14055 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
14056 they are only in dunix 4.x
14058 1996-07-26 14:09 millert
14060 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
14062 1996-07-26 13:23 millert
14064 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
14065 that didn't match. Now we can have runas stuff on more than one
14068 1996-07-25 23:45 millert
14070 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
14071 defined to something
14073 1996-07-25 23:45 millert
14075 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14077 1996-07-25 23:44 millert
14079 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14080 instead of HAVE_C2_SECURITY
14082 1996-07-25 23:44 millert
14084 * check.c: SHADOW_TYPE is always defined so just against its value
14086 1996-07-25 23:44 millert
14088 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14090 1996-07-25 18:47 millert
14092 * sudoers.pod: * -> ?* in one example added another instance of
14093 (runas) and one of NOPASSWD:
14095 1996-07-24 13:02 millert
14097 * configure.in: added back check for config.cache from other host
14100 1996-07-24 12:49 millert
14102 * parse.lex: removed an instance of \"
14104 1996-07-24 12:49 millert
14106 * sample.sudoers: added an example
14108 1996-07-24 12:44 millert
14110 * sudoers.pod: updated wrt new wildcard matching
14112 1996-07-24 10:28 millert
14114 * configure.in: new check for shadow passwords if we don't know
14117 1996-07-24 10:28 millert
14119 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14121 1996-07-24 02:19 millert
14123 * configure.in: added back check for -lsocket (oops)
14125 1996-07-24 02:16 millert
14127 * configure.in: better (working) check for shadow passwd type if we
14130 1996-07-24 01:59 millert
14132 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14134 1996-07-24 01:59 millert
14136 * Makefile.in: added config.{guess,sub}
14138 1996-07-24 01:58 millert
14140 * aclocal.m4: removed unused stuff to figure out os type
14142 1996-07-23 22:58 millert
14144 * config.sub: added openbsd
14146 1996-07-23 22:54 millert
14148 * config.sub: Initial revision
14150 1996-07-23 22:40 millert
14152 * config.guess: Initial revision
14154 1996-07-23 21:18 millert
14156 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14157 it can only be a pathname. need to check against sudoers_args
14158 even if user_args is nil
14160 1996-07-23 21:18 millert
14162 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14163 can only be a pathname need to check against sudoers_args even if
14166 1996-07-23 18:52 millert
14168 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14170 1996-07-23 01:18 millert
14172 * testsudoers.c: now takes command line args and uses cmnd_args
14174 1996-07-23 01:10 millert
14176 * parse.lex: fill_args was adding an extra leading space
14178 1996-07-22 15:50 millert
14180 * visudo.c: fixed dummy command_matches()
14182 1996-07-22 15:50 millert
14184 * parse.yacc: fixed prototype
14186 1996-07-22 15:31 millert
14188 * sudo.h: added cmnd_args
14190 1996-07-22 15:31 millert
14192 * parse.yacc: now uses flat args string
14194 1996-07-22 15:30 millert
14196 * parse.c, parse.lex: now uses flat arg string
14198 1996-07-22 15:29 millert
14200 * visudo.c: added cmnd_args def
14202 1996-07-22 14:30 millert
14204 * sudo.c: now sets cmnd_args global
14206 1996-07-22 14:30 millert
14208 * logging.c: cmnd_args is now exported from sudo.[ch]
14210 1996-07-21 18:41 millert
14212 * parse.yacc: can't rely on cmnd_matches as much as I thought --
14213 added some $$ stuff back in to prevent namespace pollution
14216 1996-07-21 18:01 millert
14218 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14221 1996-07-20 00:45 millert
14223 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14224 starts a 'runas' if in the initial state to avoid collision with
14227 1996-07-20 00:23 millert
14229 * configure.in: added checks for specific shadow passwd schemes
14231 1996-07-20 00:18 millert
14233 * aclocal.m4: added routines to check for specific shadow passwd
14236 1996-07-18 18:27 millert
14238 * configure.in: added support for ncr boxen
14240 1996-07-18 18:26 millert
14242 * aclocal.m4: added support for detecting ncr boxen
14244 1996-07-16 14:57 millert
14246 * configure.in: added sinix support
14248 1996-07-13 22:29 millert
14250 * TROUBLESHOOTING: added info about "config.cache from other other"
14253 1996-07-13 22:22 millert
14255 * aclocal.m4: now makes sure you don't have a config.cache file
14258 1996-07-13 21:36 millert
14260 * configure.in: now sets $LIBS when needed to configure links with
14261 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14262 check for bigcrypt(3) if SPW_SECUREWARE
14264 1996-07-13 21:30 millert
14266 * getspwuid.c: fixed typo
14268 1996-07-13 21:05 millert
14270 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14271 AUTH_MAX_PASSWD_LENGTH
14273 1996-07-13 21:05 millert
14275 * getspwuid.c: no more SPW_HPUX10
14277 1996-07-13 21:04 millert
14279 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14281 1996-07-13 21:04 millert
14283 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14285 1996-07-13 21:04 millert
14287 * check.c: SPW_SECUREWARE now uses bigcrypt
14289 1996-07-13 18:24 millert
14291 * sample.sudoers: fixed 2 syntax errors
14293 1996-07-13 18:24 millert
14295 * sudoers: root may now run ALL as ALL
14297 1996-07-11 20:59 millert
14299 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14301 1996-07-08 16:08 millert
14303 * check.c, configure.in: updated AFS support
14305 1996-07-08 16:07 millert
14307 * TROUBLESHOOTING: added entry about /usr/ucb/cc
14309 1996-07-08 16:06 millert
14311 * INSTALL: prep no longer holds gcc binaries
14313 1996-07-08 15:48 millert
14315 * INSTALL: updated AFS note
14317 1996-07-08 15:43 millert
14319 * Makefile.in: added @AFS_LIBS@
14321 1996-07-08 15:33 millert
14323 * compat.h: AFS allows long passwords
14325 1996-07-08 14:16 millert
14327 * testsudoers.c: fixed -u user support
14329 1996-07-08 14:16 millert
14331 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14333 1996-07-08 13:30 millert
14335 * parse.yacc: fixed no_passwd vs. runas_matched
14337 1996-07-08 10:30 millert
14339 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14342 1996-07-08 10:30 millert
14344 * INSTALL: added --with-libraries > --with-libpath --with-incpath
14346 1996-07-08 10:21 millert
14348 * parse.yacc: was setting runas_matches to -1 in wrong place
14350 1996-07-08 09:58 millert
14352 * check.c: removed usersec.h which is not present in new AFS
14355 1996-07-08 09:55 millert
14357 * tgetpass.c: now deals with timeout <= 0
14359 1996-07-08 09:51 millert
14363 1996-07-08 00:04 millert
14365 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14367 1996-07-07 22:30 millert
14369 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14370 for root readable/writable filesystems
14372 1996-07-07 20:49 millert
14374 * Makefile.in: now gives INSTALL -c flag
14376 1996-07-07 20:34 millert
14378 * parse.yacc: slightly simpler initialization of no_passwd and
14381 1996-07-07 20:33 millert
14383 * testsudoers.c: added -u username support
14385 1996-07-07 20:32 millert
14387 * configure.in: improved --with-libraries support
14389 1996-07-07 16:27 millert
14391 * configure.in: added --with-incpath, --with-libpath,
14394 1996-07-07 16:01 millert
14396 * parse.yacc: now initializes some fields that weren't getting set
14397 to -1 pretty gross -- need a rewrite.
14399 1996-06-25 23:19 millert
14401 * alloca.c: removed emacs'isms
14403 1996-06-25 22:29 millert
14405 * configure.in: no longer add -lPW to *_LIBS since we include
14408 1996-06-25 22:29 millert
14410 * config.h.in: added HAVE_ALLOCA_H
14412 1996-06-25 22:28 millert
14414 * Makefile.in: added alloca.c
14416 1996-06-25 22:18 millert
14418 * alloca.c: Initial revision
14420 1996-06-25 21:58 millert
14422 * configure.in: ++version
14424 1996-06-25 19:32 millert
14426 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14427 nobody is not always set to a valid uid.
14429 1996-06-25 19:31 millert
14431 * OPTIONS: fixed entry for SUDO_MODE
14433 1996-06-25 18:02 millert
14435 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14436 *and* gid were being set to -2. Now beat NFS to the punch and
14437 set uid to "nobody" ourselves, preserving group 0 to read
14440 1996-06-25 18:02 millert
14442 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14444 1996-06-25 18:00 millert
14446 * logging.c: fixed a typo
14448 1996-06-25 18:00 millert
14450 * configure.in: no longer need AC_PROG_INSTALL
14452 1996-06-25 17:59 millert
14454 * Makefile.in: always use install-sh to avoid install(1)'s that use
14457 1996-06-25 16:07 millert
14459 * INSTALL: make clean -> make distclean
14461 1996-06-20 01:17 millert
14463 * parse.yacc: removed some unnecsary if's
14465 1996-06-20 01:16 millert
14467 * Makefile.in, version.h: ++version
14469 1996-06-20 01:16 millert
14471 * parse.c, testsudoers.c: now includes netgroup.h
14473 1996-06-20 00:45 millert
14475 * interfaces.c: removed cats of ioctl to int since they didn't shut
14478 1996-06-20 00:43 millert
14480 * interfaces.c: explicately cast ioctl() to int since it it not
14483 1996-06-20 00:41 millert
14485 * sudo.h: added declarations for yyparse() and yylex()
14487 1996-06-20 00:27 millert
14489 * parse.yacc: fixed an occurence of '==' -> '='
14491 1996-06-20 00:22 millert
14493 * config.h.in, configure.in: added check for netgroup.h
14495 1996-06-20 00:20 millert
14497 * sudo.c: fixed 2 compiler warnings
14499 1996-06-20 00:08 millert
14501 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14502 weren't being initialized
14504 1996-06-19 13:53 millert
14506 * sudo.pod: fixed a typo
14508 1996-06-17 12:19 millert
14510 * parse.yacc: fixed a formatting thingie
14512 1996-06-17 12:16 millert
14514 * parse.c, parse.yacc: fixed -u support with multiple user lists on
14517 1996-06-17 10:23 millert
14519 * configure.in: unixware needs -lgen
14521 1996-06-17 10:23 millert
14523 * README: updated ftp location
14525 1996-06-17 00:08 millert
14527 * sudoers.pod: add net_addr/netmask support
14529 1996-06-17 00:07 millert
14531 * sample.sudoers: added net_addr/mask example
14533 1996-06-17 00:02 millert
14535 * parse.lex, parse.c: added support for net_addr/netmask
14537 1996-06-15 20:13 millert
14539 * sudoers.pod: ^ -> !
14541 1996-06-15 18:12 millert
14543 * RUNSON: updated for 1.4.3
14545 1996-06-15 18:12 millert
14547 * CHANGES: udpated for 1.4.3
14549 1996-06-15 18:11 millert
14551 * TROUBLESHOOTING, TODO, BUGS: updated
14553 1996-06-15 18:11 millert
14555 * sample.sudoers: updated with examples of new stuff
14557 1996-06-15 18:10 millert
14559 * INSTALL, README: ++version
14561 1996-06-15 18:01 millert
14563 * sudoers.pod: updated wrt -u and NOPASSWD
14565 1996-06-15 17:58 millert
14567 * sudo.pod: updated wrt -u and CAVEATS
14569 1996-06-08 23:15 millert
14571 * sudo.c: fixed usage()
14573 1996-06-08 22:57 millert
14575 * parse.lex: now use :foo: character classes (makes no diff for
14578 1996-06-07 14:33 millert
14580 * check.c: fixed LONG_SKEY_PROMPT stuff
14582 1996-06-06 15:35 millert
14584 * visudo.c: fixed a comment
14586 1996-06-06 15:03 millert
14588 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14590 1996-06-06 15:02 millert
14592 * emul/search.h: fixed decls of lsearch()
14594 1996-06-05 22:20 millert
14596 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14598 1996-06-05 22:20 millert
14600 * check.c: hpux 10 uses bigcrypt() if C2
14602 1996-06-04 19:57 millert
14604 * parse.c: now always uses fnmatch to match args
14606 1996-06-04 19:40 millert
14608 * tgetpass.c: back to using stdio instead of raw i/o since that
14609 caused some problems
14611 1996-05-28 22:14 millert
14613 * sudo.c: now give usage warning if use -l,-v,-k with args
14615 1996-05-28 18:22 millert
14617 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14619 1996-05-28 12:50 millert
14621 * sudo.c: now sets sudoers to correct group if mode is 0400
14623 1996-05-28 12:02 millert
14625 * install-sh: updated to version used by inn and bind
14627 1996-05-28 00:08 millert
14629 * configure.in: now uses -lgnumalloc if it exists
14631 1996-05-28 00:02 millert
14633 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14636 1996-05-28 00:01 millert
14638 * sudo.c: rmeoved debugging statements
14640 1996-05-28 00:00 millert
14642 * parse.yacc: added a missing free()
14644 1996-05-27 23:58 millert
14646 * sudo.c: now uses user_gid instead of getegid (which was wrong
14647 anyway) to set SUDO_GID Now sets command line args in
14648 SUDO_COMMAND envariabled (logging.c depends on args being in the
14651 1996-05-27 23:57 millert
14653 * logging.c: now uses SUDO_COMMAND envariable to get command args
14654 rather than building it up again.
14656 1996-05-27 22:42 millert
14658 * parse.c: now uses user_gid
14660 1996-05-27 20:02 millert
14662 * sudo.c: fixed off by one error in allocation NewArgv
14664 1996-05-27 20:01 millert
14666 * parse.c: in sudoers, 'command ""' now means command with no args
14668 1996-05-27 20:01 millert
14670 * configure.in: added check for fnmatch(3) and fnmatch.h
14672 1996-05-27 20:01 millert
14674 * config.h.in: added HAVE_FNMATCH
14676 1996-05-27 20:00 millert
14678 * Makefile.in: replaced wildcat.* with fnmatch.*
14680 1996-05-27 20:00 millert
14682 * testsudoers.c: now uses fnmatch()
14684 1996-05-27 19:38 millert
14686 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14687 (*) by itself now matches multiple args added support for
14688 wildcards in the pathname in sudoers
14690 1996-05-25 19:23 millert
14692 * fnmatch.c: now includes compat.h and config.h
14694 1996-05-25 18:09 millert
14696 * config.h.in: added HAVE_FNMATCH_H
14698 1996-05-25 18:07 millert
14700 * configure.in: now checks for alloca() (if needed by bison or dce)
14701 and links with -lPW if it contains alloca() and libv and compiler
14704 1996-05-25 18:03 millert
14706 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14708 1996-04-28 22:38 millert
14710 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14713 1996-04-28 17:44 millert
14715 * Makefile.in: fixed pod2man usage
14717 1996-04-28 17:40 millert
14719 * configure.in, Makefile.in, version.h: ++version
14721 1996-04-28 17:20 millert
14723 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14725 1996-04-28 17:20 millert
14727 * sudo.h: removed PERM_FULL_ROOT
14729 1996-04-28 17:18 millert
14731 * sudo.c: runas_user defaults to "root" so no more need to
14734 1996-04-28 17:16 millert
14736 * parse.c: will now only running commands as root if there was no
14737 runas list (or if root is in the runas list)
14739 1996-04-28 17:15 millert
14741 * logging.c: now logs "USER=%s"
14743 1996-04-28 17:12 millert
14745 * parse.yacc: runas_matches is now set to false if we get a
14748 1996-04-28 15:01 millert
14750 * parse.lex: make #uid work + some minor cleanup
14752 1996-04-27 21:04 millert
14754 * sample.sudoers: added support for NOPASSWD and "runas" from
14757 1996-04-27 21:03 millert
14759 * visudo.c: added support for "runas" from garp@opustel.com
14760 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14761 support for SUDOERS_MODE
14763 1996-04-27 21:03 millert
14765 * testsudoers.c: added support for "runas" from garp@opustel.com
14767 1996-04-27 21:02 millert
14769 * sudo.h: added support for NO_PASSWD and runas from
14770 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14771 SUDOERS_GID and added support fro SUDOERS_MODE
14773 1996-04-27 21:00 millert
14775 * sudo.c: added support for NO_PASSWD and runas from
14776 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14777 SUDOERS_GID and added support fro SUDOERS_MODE
14779 1996-04-27 21:00 millert
14781 * parse.yacc: added support for NO_PASSWD and runas from
14784 1996-04-27 20:58 millert
14786 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14789 1996-04-27 20:56 millert
14791 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14793 1996-04-27 20:40 millert
14795 * configure.in: added --with-CC only link with -lshadow on linux
14796 (with shadow pw) if libc lacks getspnam()
14798 1996-04-27 20:39 millert
14800 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14801 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14802 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14804 1996-04-27 20:26 millert
14806 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14808 1996-04-27 11:20 millert
14810 * INSTALL: added --with-CC
14812 1996-04-06 16:31 millert
14814 * parse.lex: added double quote support
14816 1996-04-06 16:29 millert
14818 * sudoers.pod: documented double quoting
14820 1996-04-05 16:53 millert
14822 * mkinstalldirs: Initial revision
14824 1996-04-05 16:53 millert
14826 * check.c: fixed some indentation
14828 1996-04-05 16:48 millert
14830 * Makefile.in: fixed a typo
14832 1996-04-04 19:39 millert
14834 * Makefile.in: added install-dirs .
14836 1996-04-04 14:16 millert
14838 * dce_pwent.c: new version from "Jeff A. Earickson"
14839 <jaearick@colby.edu>
14841 1996-04-03 13:40 millert
14843 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14845 1996-04-03 13:40 millert
14849 1996-04-03 13:36 millert
14851 * parse.lex: FQHOST now has same constraints as non-FQHOST
14853 1996-04-02 19:00 millert
14855 * INSTALL: added note about OS's w/ shadow passwords turned on by
14858 1996-04-02 18:58 millert
14860 * configure.in: fixed a typo
14862 1996-04-02 18:48 millert
14864 * configure.in: added support for --without-THING sanitized shadow
14865 pw situtation by adding support for --without-C2
14867 1996-04-02 16:42 millert
14869 * tgetpass.c: fixed a typo wrt placement of an end paren
14871 1996-04-02 14:57 millert
14873 * check.c: was closing an fd that may not have been opened
14875 1996-03-21 19:55 millert
14877 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14879 1996-03-19 19:40 millert
14881 * configure.in: now always use shadow pw on some arches
14883 1996-03-19 17:07 millert
14885 * configure.in: added pyramid support
14887 1996-03-19 17:04 millert
14889 * configure.in: no longer check for C2 if alternate passwd method
14890 is used no longer check for some libs twice
14892 1996-03-19 17:00 millert
14894 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14896 1996-03-19 17:00 millert
14898 * parse.lex: added FQHOST rules
14900 1996-03-18 20:57 millert
14902 * tgetpass.c: now define TCSASOFT in necesary
14904 1996-03-18 20:31 millert
14906 * tgetpass.c: now uses read/write instead of stdio string goop to
14907 avoid problems with select(2)
14909 1996-03-18 19:37 millert
14911 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14914 1996-03-17 16:18 millert
14916 * INSTALL: added note about no shadow auto-detect if using
14917 alternate auth schemes
14919 1996-03-17 15:33 millert
14921 * configure.in: don't check for C2 if AFS or DCE (unless they said
14924 1996-03-17 15:08 millert
14926 * testsudoers.c: now groks shost
14928 1996-03-17 15:01 millert
14930 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14932 1996-03-16 14:43 millert
14934 * find_path.c: checkdot now works correctly
14936 1996-03-12 18:01 millert
14938 * configure.in: can't have DCE and C2 passwords both...
14940 1996-03-11 14:05 millert
14942 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14945 1996-03-11 14:04 millert
14947 * configure.in: now looks for skey in /usr/lib and doesn't require
14948 libskey to be in /usr/local/lib just because skey.h is (for my
14951 1996-03-11 02:00 millert
14953 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14956 1996-03-10 21:01 millert
14958 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14960 1996-03-10 20:59 millert
14962 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14964 1996-03-10 20:59 millert
14966 * OPTIONS: udpated FQDN
14968 1996-03-10 20:58 millert
14970 * config.h.in: added _SUDO_PATH_TIMEDIR
14972 1996-03-10 20:58 millert
14974 * aclocal.m4, configure.in: added SUDO_TIMEDIR
14976 1996-03-10 20:58 millert
14978 * sudo.pod: updated wrt /var/run/sudo
14980 1996-03-10 20:16 millert
14982 * sudo.c, sudo.h: added support for shost if FQDN
14984 1996-03-10 20:14 millert
14986 * parse.yacc, visudo.c: now uses shost if FQDN
14988 1996-03-10 20:12 millert
14990 * check.c: Now use skeylookup() instead off skeychallenge()
14992 1996-02-27 20:41 millert
14994 * logging.c: mail_argv should not contain ALERTMAIL as it includes
14997 1996-02-22 17:06 millert
14999 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
15001 1996-02-22 16:27 millert
15003 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
15005 1996-02-22 16:27 millert
15007 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
15009 1996-02-05 19:20 millert
15011 * README, INSTALL: ++version
15013 1996-02-05 19:20 millert
15015 * Makefile.in: ++versoin
15017 1996-02-05 19:16 millert
15019 * Makefile.in: fixed a typo
15021 1996-02-05 19:16 millert
15023 * configure.in: ++version
15025 1996-02-05 18:53 millert
15029 1996-02-05 18:47 millert
15031 * CHANGES: done for 1.4.1 (I hope)
15033 1996-02-05 18:45 millert
15035 * sudoers.pod: added info on wildcards
15037 1996-02-05 18:39 millert
15039 * sample.sudoers: added wildcard example
15041 1996-02-05 17:03 millert
15043 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
15045 1996-02-05 17:03 millert
15047 * configure.in: addedSUDO_PROG_BSHELL !ll
15049 1996-02-05 16:10 millert
15051 * visudo.pod: fixed up some formatting
15053 1996-02-05 16:10 millert
15055 * sudoers.pod: redid section describing sample sudoers stuff
15057 1996-02-05 16:10 millert
15059 * sudo.pod: fixed some formatting
15061 1996-02-04 22:50 millert
15063 * getspwuid.c: now treats "" as bourne shell
15065 1996-02-04 22:49 millert
15067 * Makefile.in: TESTOBJS nwo includes wildmat.o
15069 1996-02-04 22:48 millert
15071 * testsudoers.c: now works with NewArg[cv]
15073 1996-02-04 21:59 millert
15075 * sudo.c: removed an XXX (fixed it in getspwuid.c)
15077 1996-02-04 21:58 millert
15079 * aclocal.m4: added check for bourne shell
15081 1996-02-04 21:58 millert
15083 * pathnames.h.in: added _PATH_BSHELL
15085 1996-02-04 21:58 millert
15087 * config.h.in: added _SUDO_PATH_BSHELL
15089 1996-02-04 16:36 millert
15091 * visudo.c: unixware vi returns 256 instead of 0
15093 1996-02-04 16:24 millert
15095 * INSTALL: added Linux note
15097 1996-02-04 16:13 millert
15099 * logging.c: fixed up some XXX's. file log format now looks a
15100 little more like real syslog(3) format.
15102 1996-02-04 16:13 millert
15104 * README, TROUBLESHOOTING: updated wrt lex/flex
15106 1996-02-04 16:11 millert
15108 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15109 since we ship with a pre-flex'd parser
15111 1996-02-04 16:09 millert
15113 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15115 1996-02-04 02:28 millert
15117 * logging.c: eliminated some strcat()'s
15119 1996-02-04 02:10 millert
15121 * configure.in: no longer checks for lex/flex (now assumes flex)
15123 1996-02-04 02:08 millert
15125 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15126 just kerb_dir_candidate
15128 1996-02-02 20:48 millert
15130 * parse.yacc: now use a 'hook' expression instead of an iffy one
15133 1996-02-02 01:14 millert
15135 * visudo.c: now works with new sudo arg stuff
15137 1996-02-02 01:14 millert
15139 * parse.yacc: fixed dereferencing deadbeef
15141 1996-02-01 23:53 millert
15143 * sudo.c: changed an occurrence of Argv to NewArgv
15145 1996-02-01 23:53 millert
15147 * parse.lex: took out support for quoted commands since there is no
15150 1996-02-01 23:52 millert
15152 * parse.c: fixed a typo in a for() loop
15154 1996-02-01 23:52 millert
15156 * logging.c: protected against dereferencing rogue pointers
15158 1996-02-01 22:34 millert
15160 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15161 needed this also allows us to eliminate some kludges in
15162 parse_args() and eliminate superfluous code.
15164 1996-02-01 22:34 millert
15166 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15168 1996-02-01 22:32 millert
15170 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15171 cmnd_args (no longer used)
15173 1996-02-01 22:31 millert
15175 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15177 1996-02-01 22:30 millert
15179 * parse.yacc: COMMAND is now a struct containing the path and args
15181 1996-02-01 22:30 millert
15183 * parse.lex: replaced append() with fill_cmnd() and fill_args.
15184 command args from a sudoers entry are now stored in an arrary for
15187 1996-02-01 22:28 millert
15189 * parse.c: command line args from sudoers file are now in an array
15190 like ones passed in from the command line
15192 1996-01-31 20:59 millert
15194 * parse.c: wildwat stuff now works
15196 1996-01-29 00:44 millert
15198 * version.h: ++version
15200 1996-01-29 00:44 millert
15202 * Makefile.in: ++version added wildmat.*
15204 1996-01-28 17:55 millert
15206 * parse.lex: added support for quoted commands (w/ or w/o args)
15208 1996-01-22 01:55 millert
15210 * sudo.pod, visudo.pod: cleaned up formatting
15212 1996-01-21 20:53 millert
15214 * sudo.pod, visudo.pod: Initial revision
15216 1996-01-21 02:07 millert
15218 * sudoers.pod: looks reasonable, could be mroe readable
15220 1996-01-20 23:47 millert
15222 * sudoers.pod: Initial revision
15224 1996-01-16 14:38 millert
15228 1996-01-16 14:37 millert
15230 * OPTIONS: updated NO_ROOT_SUDO entry
15232 1996-01-15 11:37 millert
15234 * RUNSON: [no log message]
15236 1996-01-15 11:34 millert
15238 * sudo.c: fixed SECURE_PATH
15240 1996-01-14 20:55 millert
15242 * RUNSON: udpa`ted for 1.4
15244 1996-01-14 20:52 millert
15246 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15248 1996-01-14 20:32 millert
15250 * TROUBLESHOOTING: added entry for anal ansi compilers
15252 1996-01-14 16:13 millert
15254 * INSTALL: added info on libcrypt_i for SCO
15256 1996-01-14 16:05 millert
15258 * TODO: [no log message]
15260 1996-01-14 15:39 millert
15262 * sample.sudoers: added comments
15264 1996-01-14 15:25 millert
15266 * TODO: 1.4 release
15268 1996-01-14 15:22 millert
15270 * README, config.h.in, configure.in, CHANGES: ++version
15272 1996-01-14 15:21 millert
15274 * BUGS: ++version and fixed ISC
15276 1996-01-14 15:19 millert
15278 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15279 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15280 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15281 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15282 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15285 1996-01-14 15:16 millert
15287 * interfaces.c: added STUB_LOAD_INTERFACES ++version
15289 1996-01-14 15:14 millert
15291 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15292 emul/utime.h: ++version
15294 1996-01-14 15:13 millert
15296 * PORTING: added info about fd_set in tgetpass added info on
15299 1996-01-11 13:22 millert
15301 * dce_pwent.c: added sudo header
15303 1996-01-11 13:04 millert
15305 * tgetpass.c: fixed a typo
15307 1996-01-11 13:01 millert
15309 * Makefile.in: tgetpass.o is now only linked in with sudo (not
15312 1996-01-09 12:56 millert
15314 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15315 configure.in: ++version
15317 1996-01-09 12:54 millert
15319 * emul/utime.h: added copyright notice
15321 1996-01-09 12:52 millert
15323 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15324 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15325 interfaces.c, logging.c, options.h, parse.c, parse.lex,
15326 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15327 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15328 visudo.c: ++version
15330 1996-01-09 12:46 millert
15332 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15335 1996-01-09 12:42 millert
15337 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15339 1996-01-09 12:41 millert
15341 * config.h.in: added check for sys/bsdtypes.h
15343 1996-01-07 16:00 millert
15345 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15347 1996-01-07 15:55 millert
15349 * TROUBLESHOOTING: added 2 entries
15351 1996-01-07 15:55 millert
15353 * Makefile.in: added FAQ
15355 1996-01-07 14:26 millert
15357 * TROUBLESHOOTING: added section on syslog
15359 1996-01-07 14:25 millert
15361 * configure.in: added AC_ISC_POSIX for better ISC support
15363 1996-01-07 14:25 millert
15365 * config.h.in: fixed typo
15367 1996-01-07 14:25 millert
15369 * config.h.in: added define for _POSIX_SOURCE
15371 1996-01-04 00:41 millert
15373 * configure.in: fixed check for lsearch()
15375 1995-12-21 21:53 millert
15377 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15378 (should not happen)
15380 1995-12-20 17:02 millert
15382 * configure.in: now only define HAVE_LSEARCH if there is a
15383 corresponding search.h
15385 1995-12-20 15:52 millert
15387 * interfaces.c: works on ISC again
15389 1995-12-18 17:36 millert
15391 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15394 1995-12-18 17:32 millert
15396 * lsearch.c: char * -> const char *
15398 1995-12-18 17:29 millert
15400 * configure.in: now looks in -lcompat for lsearch()
15402 1995-12-18 17:23 millert
15404 * Makefile.in: remove sudo.core visudo.core for clan target
15406 1995-12-17 22:53 millert
15408 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15410 1995-12-17 22:36 millert
15412 * Makefile.in: fixed another occurence of sudo_getpwuid.*
15414 1995-12-17 22:30 millert
15416 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15418 1995-12-17 22:22 millert
15420 * configure.in: moved the "echo"
15422 1995-12-17 22:09 millert
15424 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15425 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15426 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15427 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15428 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15429 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15430 tgetpass.c, utime.c, version.h, visudo.c: ++version
15432 1995-12-17 22:04 millert
15434 * testsudoers.c: added group support
15436 1995-12-17 22:00 millert
15438 * sample.sudoers: added group entry
15440 1995-12-17 21:59 millert
15442 * sudoers.man: documented group support
15444 1995-12-17 21:50 millert
15446 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15448 1995-12-15 17:45 millert
15450 * check.c: tkfile was too short and overflowed the kerberos realm
15452 1995-12-11 17:09 millert
15454 * sudo.c: now copy command args directly from Argv
15456 1995-12-11 15:55 millert
15458 * sudo.c: replaced code to copy cmnd_args so that is does not use
15459 realloc since most realloc()'s really stink
15461 1995-12-08 14:11 millert
15463 * configure.in: syslog() fixed in hpux 10.01
15465 1995-12-06 17:45 millert
15467 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15470 1995-12-06 17:30 millert
15472 * configure.in: better error if cannot find skey incs or libs
15474 1995-12-06 17:26 millert
15476 * aclocal.m4: now use a temp file for determining max len of uid_t
15477 in string form. the old hacky way broke on netbsd
15479 1995-12-05 19:02 millert
15481 * sudo.c: added set of parens and a space
15483 1995-12-05 18:58 millert
15485 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15487 1995-12-05 18:58 millert
15489 * check.c: modified a comment
15491 1995-12-05 18:57 millert
15493 * Makefile.in: fixed up testsudoers target
15495 1995-12-05 18:56 millert
15497 * configure.in: DCE changes from Jeff Earickson
15498 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15499 SUDO_FDFLAGS and VISUDO_LDFLAGS
15501 1995-12-05 18:17 millert
15503 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15504 SUDO_LDFLAGS, VISUDO_LDFLAGS
15506 1995-11-27 23:32 millert
15508 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15510 1995-11-27 23:17 millert
15512 * check.c: LONG_SKEY_PROMPT is less of a klusge /
15514 1995-11-27 23:17 millert
15516 * configure.in: fixed typos w/ dce stuff
15518 1995-11-27 23:14 millert
15520 * Makefile.in: added dce_pwent.c
15522 1995-11-26 13:48 millert
15524 * INSTALL: amended section on combining authentication mechanisms
15526 1995-11-26 13:48 millert
15528 * PORTING: minor updates for 1.3.6
15530 1995-11-26 13:47 millert
15532 * TROUBLESHOOTING: added 2 more entries
15534 1995-11-26 13:39 millert
15536 * BUGS: updated for 1.3.6
15538 1995-11-26 13:39 millert
15540 * README: overhauled
15542 1995-11-25 21:23 millert
15544 * INSTALL: rewrote for sudo 1.3.6
15546 1995-11-25 21:23 millert
15548 * TROUBLESHOOTING: added 3 entries
15550 1995-11-25 13:53 millert
15552 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15553 since many includes don't prototype it. gag me.
15555 1995-11-25 13:23 millert
15557 * sudo.h: removed prototype for sudo_getpwuid() since convex C
15558 compiler choked on it.
15560 1995-11-25 13:23 millert
15562 * sudo.c: added prototype for sudo_getpwuid()
15564 1995-11-25 13:23 millert
15566 * lsearch.c: now compiles on strict ANSI compilers
15568 1995-11-24 23:56 millert
15570 * check.c: added LONG_SKEY_PROMPT support
15572 1995-11-24 23:55 millert
15574 * Makefile.in: added extra $'s for make to eat up, yum.
15576 1995-11-24 23:38 millert
15578 * OPTIONS, options.h: added LONG_SKEY_PROMPT
15580 1995-11-24 18:48 millert
15582 * check.c: s/key support now works with normal s/key as well as
15585 1995-11-24 18:46 millert
15587 * options.h, OPTIONS: added SKEY_ONLY
15589 1995-11-24 18:46 millert
15591 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15593 1995-11-24 00:42 millert
15595 * INSTALL: added DCE note added more AIX notes
15597 1995-11-24 00:39 millert
15599 * sudo.c: now include pthread.h for DCE support
15601 1995-11-23 22:22 millert
15603 * check.c: dce_pwent() is ok after all .,
15605 1995-11-23 22:21 millert
15607 * logging.c: now uses SYSLOG() macro that equates to either
15608 syslog() or syslog_wrapper
15610 1995-11-23 21:44 millert
15612 * dce_pwent.c: minor formatting changes. renamed check() to
15613 somthing less generic
15615 1995-11-23 21:27 millert
15617 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15618 visudo.c: now uses user_pw_ent and simple macros to get at the
15621 1995-11-22 20:35 millert
15623 * check.c: simpler dec unix C2 support
15625 1995-11-22 20:35 millert
15627 * getspwuid.c: now sets crypt_type for DEC unix C2
15629 1995-11-21 18:00 millert
15631 * configure.in: added csops paths for skey
15633 1995-11-21 16:27 millert
15635 * getspwuid.c: now includes string.h for strdup() prototype
15637 1995-11-21 01:47 millert
15639 * getspwuid.c: fixed a few typos
15641 1995-11-20 22:59 millert
15643 * check.c: now includes skey.h
15645 1995-11-20 22:10 millert
15647 * getspwuid.c: fixed up comments
15649 1995-11-20 22:04 millert
15651 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15653 1995-11-20 22:01 millert
15655 * sudo.c: now uses sudo_pw_ent
15657 1995-11-20 21:50 millert
15659 * testsudoers.c: now uses sudo_pw_ent
15661 1995-11-20 21:40 millert
15663 * visudo.c: now sets sudo_pw_ent
15665 1995-11-20 21:28 millert
15667 * getspwuid.c: Initial revision
15669 1995-11-20 21:28 millert
15671 * tgetpass.c: moved dce stuff into compat.h
15673 1995-11-20 21:27 millert
15675 * sudo.h, logging.c: now uses sudo_pw_ent
15677 1995-11-20 21:27 millert
15679 * Makefile.in: added sudo_getpwuid.c
15681 1995-11-20 21:25 millert
15683 * compat.h: added dce support
15685 1995-11-20 21:13 millert
15687 * parse.yacc: now uses sudo_pw_ent
15689 1995-11-20 14:40 millert
15691 * check.c: fixed exempt_group stuff for OS's that don't put base
15692 gid in group vector
15694 1995-11-20 01:39 millert
15696 * check.c: S/Key support now works with sunos4 shadow passwords
15698 1995-11-19 22:31 millert
15700 * Makefile.in: fixed clean rule
15702 1995-11-19 22:31 millert
15704 * config.h.in, configure.in: added DCE support
15706 1995-11-19 22:30 millert
15708 * tgetpass.c: DCE & KERB support
15710 1995-11-19 22:30 millert
15712 * check.c: first stab at dce support
15714 1995-11-19 22:24 millert
15716 * dce_pwent.c: now smells like sudo
15718 1995-11-19 22:11 millert
15720 * dce_pwent.c: Initial revision
15722 1995-11-19 21:36 millert
15724 * check.c: skey'd sudo now works w/ normal password as well
15726 1995-11-19 18:37 millert
15728 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15729 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15730 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15731 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15732 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15733 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15735 1995-11-19 18:32 millert
15737 * README: updated to reflect version change
15739 1995-11-19 18:27 millert
15741 * configure.in: --with options now line up ++version
15743 1995-11-19 18:26 millert
15745 * sudo.h: removed unecesary S/Key stuff
15747 1995-11-19 18:25 millert
15749 * configure.in: fixed S/Key support
15751 1995-11-19 18:24 millert
15753 * Makefile.in: -I stuff now goes in CPPFLAGS
15755 1995-11-19 18:23 millert
15757 * check.c: fixed SKey support
15759 1995-11-19 15:23 millert
15761 * README: updated version
15763 1995-11-19 13:59 millert
15765 * OPTIONS: fixed description of EXEMPTGROUP
15767 1995-11-19 10:47 millert
15769 * sudo.c: more people use _RLD_ than just alphas...
15771 1995-11-18 21:35 millert
15773 * Makefile.in: replaced $man_prefix with $mandir
15775 1995-11-18 21:30 millert
15777 * configure.in: fixed a typo
15779 1995-11-18 21:28 millert
15781 * Makefile.in: now use more GNU'ish dir names
15783 1995-11-18 21:27 millert
15785 * configure.in: now set *dir correctly (can override from command
15788 1995-11-18 19:17 millert
15790 * sudo.c: now deal with situations where we getwd() fails
15792 1995-11-17 00:37 millert
15794 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15796 1995-11-17 00:37 millert
15798 * configure.in: added sbin_dir
15800 1995-11-16 21:28 millert
15802 * Makefile.in: now ship a flex-generated lex.yy.c
15804 1995-11-16 21:09 millert
15806 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15809 1995-11-16 21:06 millert
15811 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15812 overridden via Makefile
15814 1995-11-16 21:05 millert
15816 * options.h: no more error for redefining SUDOERS_OWNER
15818 1995-11-16 21:05 millert
15820 * OPTIONS: expanded SUDOERS_OWNER section
15822 1995-11-16 03:05 millert
15824 * visudo.c: now warn if chown(2) failed
15826 1995-11-16 02:55 millert
15828 * logging.c: better default warning for NO_SUDOERS_FILE
15830 1995-11-16 02:54 millert
15832 * sudo.c: added missing set_perms() no more cryptic message if the
15833 sudoers file is zero length, now just give a parse error
15835 1995-11-16 02:42 millert
15837 * logging.c: better diagnostics if NO_SUDOERS_FILE
15839 1995-11-16 02:41 millert
15841 * sudo.c: check_sudoers() now catches sudoers files that are not
15842 readable (but are stat'able).
15844 1995-11-13 01:12 millert
15846 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15848 1995-11-13 00:52 millert
15850 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15853 1995-11-13 00:52 millert
15855 * Makefile.in: now uses exec_prefix & prefix from configure
15857 1995-11-13 00:16 millert
15859 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15860 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15861 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15862 so shadow build trees can have a custom copy of options.h
15864 1995-11-13 00:15 millert
15866 * check.c: user_is_exempt() is no longer a hack, it now uses
15869 1995-11-12 23:56 millert
15871 * options.h: EXEMPTGROUP is now "sudo"
15873 1995-11-12 22:25 millert
15875 * configure.in: MAN_POSTINSTALL now contains a leading space
15877 1995-11-12 22:25 millert
15879 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15880 now removes testsudoers in clean:
15882 1995-11-12 22:24 millert
15884 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15886 1995-10-30 15:51 millert
15888 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15889 don't get spoofed into using a bogus server
15891 1995-09-29 17:50 millert
15893 * parse.yacc: now explicately initialize match[] tp be FALSE
15895 1995-09-23 16:48 millert
15897 * sudo.c: removed unused variable now passes -Wall
15899 1995-09-23 16:48 millert
15901 * parse.yacc: yyerror and dumpaliases are now void's now passes
15904 1995-09-23 16:48 millert
15906 * parse.lex: added prototype for yyerror
15908 1995-09-23 16:47 millert
15910 * interfaces.c: rmeoved unused cruft now passes -Wall
15912 1995-09-23 16:47 millert
15914 * check.c, logging.c, parse.c: now passes -Wall
15916 1995-09-23 16:46 millert
15918 * Makefile.in: fixed headers that moved to emul dir
15920 1995-09-23 12:05 millert
15922 * logging.c: fixed deref of nil pointer if no args
15924 1995-09-15 19:18 millert
15926 * OPTIONS: added a caveat to FQDN section
15928 1995-09-13 19:48 millert
15930 * Makefile.in: more $srcdir support for install targets
15932 1995-09-13 17:17 millert
15934 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15935 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15936 visudo.c: don't include malloc.h if we include stdlib.h
15938 1995-09-12 21:44 millert
15940 * parse.yacc: local search.h now lives in emul
15942 1995-09-12 21:41 millert
15944 * lsearch.c: local search.h now lives in emul
15946 1995-09-12 21:41 millert
15948 * check.c, utime.c: local utime.h now lives in emul dir
15950 1995-09-12 21:38 millert
15952 * Makefile.in: added support for building in other than the
15955 1995-09-10 14:01 millert
15957 * OPTIONS: annotated CSOPS_INSULTS option
15959 1995-09-10 13:56 millert
15961 * TROUBLESHOOTING: updated shadow passwords blurb
15963 1995-09-09 21:00 millert
15965 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15966 shell and passes along foo as the arguments
15968 1995-09-09 18:52 millert
15970 * parse.lex: collapsed pathname and dir sections into one -- its
15973 1995-09-09 18:34 millert
15975 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15976 append() and fill() now take args to make the above work
15978 1995-09-08 20:51 millert
15980 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15981 a tty on fd 1 to erroneously have "none" as their tty
15983 1995-09-04 15:35 millert
15985 * check.c: timestampfile is now a global static removed decl of
15986 timestampfile in remove_timestamp since we can just use the
15989 1995-09-04 15:28 millert
15991 * check.c: created touch() to update timestamps added
15992 USE_TTY_TICKETS support (bit of a kludge)
15994 1995-09-04 15:28 millert
15996 * compat.h: added _S_IFDIR and S_ISDIR
15998 1995-09-04 15:22 millert
16000 * OPTIONS, options.h: added USE_TTY_TICKETS
16002 1995-09-04 00:38 millert
16004 * parse.yacc: removed const from casts for lsearch() & lfind() to
16005 placate irix 4.x C compiler
16007 1995-09-03 14:12 millert
16009 * sudo.c: now only strip '/dev/' off of a tty if it starts with
16012 1995-09-03 14:12 millert
16014 * pathnames.h.in: added _PATH_DEV
16016 1995-09-03 14:11 millert
16018 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
16019 tcgetattr only if have termios.h
16021 1995-09-03 14:09 millert
16023 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
16024 not int for c_?flag
16026 1995-09-03 13:19 millert
16028 * parse.lex, parse.yacc: fixed a spelling error
16030 1995-09-03 13:17 millert
16032 * Makefile.in: fixed typo
16034 1995-09-02 12:55 millert
16036 * Makefile.in: fixed a comment
16038 1995-09-02 12:54 millert
16040 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
16041 now that we dynamically allocate strings they need to be free()'d
16043 1995-09-02 12:46 millert
16045 * parse.lex: dynamically allocates space for strings
16047 1995-09-02 12:34 millert
16049 * sudo.h: no more MAXCOMMANDLENGTH
16051 1995-09-01 22:25 millert
16053 * sudo.h: added decl of tty
16055 1995-09-01 22:25 millert
16057 * logging.c, sudo.c: moved tty stuff into sudo.c
16059 1995-09-01 14:18 millert
16061 * parse.c: fixed a logic bug. Was denying a command if user gave
16062 command line args but there were none in the sudoers file which
16065 1995-09-01 01:18 millert
16067 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
16069 1995-09-01 01:13 millert
16071 * parse.lex: return foo; -> return(foo);
16073 1995-09-01 01:03 millert
16075 * parse.yacc: fixed netgr_matches() prototype
16077 1995-09-01 01:02 millert
16079 * parse.lex: added support for escaping "termination" characters
16081 1995-09-01 00:55 millert
16083 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16086 1995-09-01 00:50 millert
16088 * sudo.c: fixed comments
16090 1995-09-01 00:49 millert
16092 * goodpath.c: fixed negation problem (doh!)
16094 1995-09-01 00:25 millert
16096 * parse.yacc: fixed 2nd parameter to lfind()
16098 1995-09-01 00:24 millert
16100 * parse.lex: now do bounds checking in fill() and append()
16102 1995-09-01 00:23 millert
16104 * sudo.c: include netdb.h as we should added a missing void cast
16105 added SHELL_IF_NO_ARGS support now use realloc() properly. would
16106 fail if realloc actually moved the string instead of shrinking it
16108 1995-09-01 00:17 millert
16110 * sample.sudoers: updated with examples of new features
16112 1995-09-01 00:05 millert
16114 * goodpath.c: now set errno to EACCES if not a regular file or not
16117 1995-09-01 00:04 millert
16119 * find_path.c: if given a fully-qualified or relative path we now
16120 check it with sudo_goodpath() and error out with the appropriate
16121 error message if the file does not exist or is not executable
16123 1995-09-01 00:03 millert
16125 * lsearch.c, emul/search.h: now use correct args for lfind
16127 1995-09-01 00:03 millert
16129 * logging.c: added a comment
16131 1995-08-31 23:52 millert
16133 * insults.h: added in CSOps insults
16135 1995-08-31 23:51 millert
16137 * ins_csops.h: Initial revision
16139 1995-08-31 23:35 millert
16141 * tgetpass.c: added RCS id
16143 1995-08-31 22:56 millert
16145 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16148 1995-08-31 22:55 millert
16150 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16152 1995-08-31 22:54 millert
16154 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16155 -p now works with -s
16157 1995-08-31 22:54 millert
16159 * parse.c: don't try to stat() "pseudo commands" like "validate"
16161 1995-08-31 22:53 millert
16163 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16166 1995-08-31 22:53 millert
16168 * configure.in: added SecurID support added other insults to
16171 1995-08-31 22:52 millert
16173 * config.h.in: added HAVE_SECURID
16175 1995-08-31 22:52 millert
16177 * Makefile.in: added clobber target added ins_csops.h now gets
16178 CFLAGS from configure
16180 1995-08-31 22:46 millert
16182 * aclocal.m4: relaxed SUDO_FULL_VOID
16184 1995-08-31 22:44 millert
16186 * visudo.c: function comment blocks are now in same style as rest
16189 1995-08-31 22:44 millert
16191 * testsudoers.c: added support for command line args in
16194 1995-08-31 22:43 millert
16196 * sudoers.man: updated to have command args in the sudoers file
16198 1995-08-31 22:42 millert
16200 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16203 1995-08-19 19:32 millert
16205 * parse.yacc: PATH renamed to COMMAND
16207 1995-08-19 19:31 millert
16209 * parse.lex: it is now a parse error for directories to have args
16212 1995-08-19 19:30 millert
16214 * logging.c: now say command args if telling user to buzz off
16216 1995-08-19 19:30 millert
16218 * sudo.c: -s no longer indicates end of args sped up loading on
16219 cmnd_args in load_cmnd()
16221 1995-08-19 19:29 millert
16223 * parse.c: removed an unreachable statement
16225 1995-08-19 17:53 millert
16227 * parse.lex: made more efficient by pulling out the terminators
16228 when in GOTCMND state and making them their own rule
16230 1995-08-14 00:07 millert
16232 * sudo.h: removed MAXLOGLEN since it is no longer used
16234 1995-08-14 00:07 millert
16236 * parse.lex: now allows command args
16238 1995-08-14 00:06 millert
16240 * parse.c: now groks command arguments
16242 1995-08-13 23:39 millert
16244 * logging.c: now sets tty correctly when piped input
16246 1995-08-13 23:35 millert
16248 * sudo.c: fixed loading of cmnd_args (was including command name
16251 1995-08-13 23:34 millert
16253 * logging.c: fixed a core dump due to incorrect if construct
16255 1995-08-13 00:33 millert
16257 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16260 1995-08-13 00:33 millert
16262 * aclocal.m4: fixed check for ISC
16264 1995-08-13 00:32 millert
16266 * sudo.c: now sets cmnd_args used by log_error() and that will be
16267 used by the parse to check against command args
16269 1995-08-13 00:32 millert
16271 * sudo.h: added cmnd_args
16273 1995-08-13 00:31 millert
16275 * logging.c: now dynamically allocate logline since we can guess at
16278 1995-08-05 13:52 millert
16280 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16281 buffer remove "register" since the compiler knows more than I do
16282 now do a "basename" of the tty
16284 1995-07-31 18:20 millert
16286 * configure.in: ++version
16288 1995-07-30 22:37 millert
16290 * sudo.h: added shell extern changed MODE_* to be bit masks to
16291 allow for several options together
16293 1995-07-30 22:36 millert
16295 * sudo.c: added -s (shell) option made MODE_* masks so we can do
16296 bitwise & and | to see if multiple flags are set.
16298 1995-07-30 22:01 millert
16300 * check.c: added securid support
16302 1995-07-30 14:38 millert
16304 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16307 1995-07-29 17:17 millert
16309 * Makefile.in, version.h: ++version
16311 1995-07-27 06:52 millert
16313 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16315 1995-07-26 22:00 millert
16317 * testsudoers.c: added netgr_matches
16319 1995-07-26 21:29 millert
16321 * parse.c: cleaned up netgr_matches
16323 1995-07-26 00:26 millert
16325 * RUNSON: updated for 1.3.4
16327 1995-07-24 21:51 millert
16329 * Makefile.in: now installs sudoers.man -- really should clean this
16332 1995-07-24 21:18 millert
16334 * Makefile.in: added sudoers.cat and sudoers.man
16336 1995-07-24 21:15 millert
16338 * sudo.man: pulled out stuff on the sudoers file format into a
16341 1995-07-24 21:14 millert
16343 * sudoers.man: Initial revision
16345 1995-07-24 21:04 millert
16347 * HISTORY: fixed up my email address
16349 1995-07-24 20:03 millert
16351 * configure.in: added checks for innetgr and getdomainname
16353 1995-07-24 20:02 millert
16355 * visudo.c: added dummy netgr_matches function
16357 1995-07-24 20:01 millert
16359 * parse.c: added netgr_matches
16361 1995-07-24 20:01 millert
16363 * parse.lex, parse.yacc: added NETGROUP support
16365 1995-07-24 20:01 millert
16367 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16369 1995-07-24 18:07 millert
16371 * sudo.c: rewrote clean_env() that has rm_env() builtin
16373 1995-07-23 19:58 millert
16375 * check.c: now cast uid to long in sprintf
16377 1995-07-23 19:58 millert
16379 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16381 1995-07-23 19:57 millert
16383 * options.h: added _INSULTS suffix to HAL & GOONS
16385 1995-07-23 19:35 millert
16387 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16388 new scheme of insult "unions" end
16390 1995-07-23 17:48 millert
16392 * sudo.c: now uses MAX_UID_T_LEN
16394 1995-07-23 17:48 millert
16396 * configure.in: added SUDO_UID_T_LEN !l
16398 1995-07-23 17:48 millert
16400 * config.h.in: added MAX_UID_T_LEN
16402 1995-07-23 17:47 millert
16404 * check.c: now use MAX_UID_T_LEN
16406 1995-07-23 17:47 millert
16408 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16411 1995-07-19 19:05 millert
16413 * configure.in: corrected version
16415 1995-07-19 17:29 millert
16417 * configure.in: added sco support
16419 1995-07-19 17:29 millert
16421 * aclocal.m4: hack to check for sco
16423 1995-07-18 21:27 millert
16425 * interfaces.c: removed #include <net/route.h> since it was hosing
16428 1995-07-18 13:35 millert
16430 * find_path.c: fixed prreadlink() prototype
16432 1995-07-17 23:54 millert
16434 * check.c: added parens in #if's
16436 1995-07-17 23:53 millert
16438 * configure.in: added SPW_ prefix
16440 1995-07-17 23:20 millert
16442 * sudo.h: moved SPW_* to config.h.in
16444 1995-07-17 23:19 millert
16446 * sudo.c: added a set of parens
16448 1995-07-17 23:19 millert
16450 * config.h.in: added SPW_*
16452 1995-07-17 22:50 millert
16454 * sudo.h: added SPW_* reordered error codes
16456 1995-07-17 22:49 millert
16458 * check.c: moved SPW_* to sudo.h
16460 1995-07-17 14:29 millert
16462 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16464 1995-07-17 14:29 millert
16466 * configure.in: AUTH -> SECUREWARE
16468 1995-07-17 14:29 millert
16470 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16472 1995-07-17 00:22 millert
16474 * check.c: now uses SHADOW_TYPE to make shadow pw support more
16475 readable and modular. It's a start...
16477 1995-07-17 00:21 millert
16479 * configure.in: added autodetection of shadow passwords
16481 1995-07-17 00:20 millert
16483 * sudo.c: now uses SHADOW_TYPE define
16485 1995-07-17 00:19 millert
16487 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16490 1995-07-17 00:19 millert
16492 * aclocal.m4: added SUDO_CHECK_SHADOW
16494 1995-07-12 17:09 millert
16496 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16497 took out test for memmove() since we dno longer use it...
16499 1995-07-12 17:08 millert
16503 1995-07-12 17:05 millert
16505 * logging.c: added BROKEN_SYSLOG support
16507 1995-07-12 17:05 millert
16509 * config.h.in: added BROKEN_SYSLOG
16511 1995-07-12 17:04 millert
16513 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16514 allow for a machine udpating its time from a server
16516 1995-07-12 17:04 millert
16518 * sudo.man: added 2 security notes updated Nieusma's email addr
16520 1995-07-12 14:18 millert
16522 * lsearch.c: changed a memmove() to memcpy() since we don't have to
16523 worry about overlapping segments.
16525 1995-07-11 15:41 millert
16527 * interfaces.c: cleanup up the loop when interfaces are groped in
16528 so that it is readable
16530 1995-07-11 14:52 millert
16532 * Makefile.in, version.h: ++version
16534 1995-07-09 18:17 millert
16536 * CHANGES: annotated 124-126
16538 1995-07-07 16:06 millert
16540 * check.c: fixed permissions check on /tmp/.odus
16542 1995-07-06 19:35 millert
16544 * check.c: fixed some comments
16546 1995-07-06 14:49 millert
16548 * check.c: now checks owner & mode of timedir also checks for bogus
16549 dates on timestamp file
16551 1995-07-06 14:49 millert
16553 * OPTIONS: updated TIMEOUT info
16555 1995-07-06 14:48 millert
16557 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16559 1995-07-06 14:47 millert
16561 * compat.h: added definition of S_IRWXU
16563 1995-07-06 14:47 millert
16567 1995-07-03 14:16 millert
16569 * interfaces.c: added #ifdef to make it compile on strange arches
16571 1995-07-02 18:13 millert
16573 * aclocal.m4: fixed check for fulkl void impl.
16575 1995-07-02 09:56 millert
16577 * check.c: added mssing "static"
16579 1995-07-01 20:41 millert
16581 * insults.h: replaced #elif with #else #if constructs for ancient C
16584 1995-07-01 20:18 millert
16586 * INSTALL: updated irix c2 & kerb5 info
16588 1995-07-01 20:15 millert
16590 * configure.in: added shadow pw support for irix
16592 1995-07-01 16:07 millert
16594 * CHANGES: last changes for sudo 1.3.3
16596 1995-07-01 16:07 millert
16598 * TODO, BUGS: updated
16600 1995-07-01 16:04 millert
16602 * configure.in: now calls SUDO_SOCK_SA_LEN
16604 1995-07-01 16:04 millert
16606 * config.h.in: added HAVE_SA_LEN
16608 1995-07-01 16:04 millert
16610 * aclocal.m4: added SUDO_SOCK_SA_LEN
16612 1995-07-01 15:49 millert
16614 * interfaces.c: now works with ip implementations that use sa_len
16617 1995-07-01 14:26 millert
16619 * INSTALL: added note about buggy AIX compiler
16621 1995-07-01 14:24 millert
16623 * interfaces.c: now include sys/time.h for AIX
16625 1995-06-27 22:35 millert
16627 * Makefile.in: getcwd -> getwd
16629 1995-06-27 21:28 millert
16631 * interfaces.c: now works for ISC and others. yay.
16633 1995-06-26 14:24 millert
16635 * Makefile.in, version.h: version++
16637 1995-06-22 20:26 millert
16639 * aclocal.m4: fixed test for full void impl
16641 1995-06-22 20:25 millert
16643 * sudo.c: now check to see that st_dev is non-zero before assuming
16644 that we are being spoofed
16646 1995-06-20 16:56 millert
16648 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16651 1995-06-19 16:32 millert
16653 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16655 1995-06-19 16:10 millert
16657 * logging.c: added cast for ttyname()
16659 1995-06-19 15:23 millert
16661 * configure.in: fixed typo
16663 1995-06-19 15:19 millert
16665 * check.c: now deal correctly with all known variation of utime()
16668 1995-06-19 15:19 millert
16670 * configure.in: added SUDO_FUNC_UTIME_POSIX
16672 1995-06-19 15:19 millert
16674 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16676 1995-06-19 15:14 millert
16678 * config.h.in: added HAVE_UTIME_POSIX
16680 1995-06-19 13:38 millert
16682 * check.c: fixed a typo
16684 1995-06-19 13:29 millert
16686 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16688 1995-06-19 13:20 millert
16690 * check.c: fixed fascist C compiler warning
16692 1995-06-18 23:14 millert
16694 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16695 initialize num_interfaces to 0 (just to be anal)
16697 1995-06-18 18:06 millert
16699 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16701 1995-06-18 18:05 millert
16703 * logging.c: added tty logging
16705 1995-06-18 16:04 millert
16707 * interfaces.c: reworked the ISC code
16709 1995-06-18 15:27 millert
16711 * Makefile.in, version.h: updated version
16713 1995-06-18 15:24 millert
16715 * check.c: now expect old-style utime(3) if utime() can't take NULL
16718 1995-06-18 15:08 millert
16720 * configure.in: added check for utime.h
16722 1995-06-18 15:08 millert
16724 * config.h.in: added HAVE_UTIME_H
16726 1995-06-18 14:48 millert
16728 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16730 1995-06-18 13:58 millert
16732 * configure.in: now search for kerb libs and includes
16734 1995-06-18 13:03 millert
16736 * check.c: added support for utime(2)'s that can't take a NULL
16739 1995-06-18 13:03 millert
16741 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16744 1995-06-17 20:46 millert
16746 * configure.in: added utime(s) stuff
16748 1995-06-17 20:46 millert
16750 * check.c: now use utime()
16752 1995-06-17 20:46 millert
16754 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16756 1995-06-17 19:12 millert
16758 * utime.c: now use HAVE_UTIME_NULL
16760 1995-06-17 19:02 millert
16762 * utime.c, emul/utime.h: Initial revision
16764 1995-06-17 18:24 millert
16766 * check.c: need to setuid(0) to make kerb4 stuff work.
16768 1995-06-17 18:14 millert
16770 * tgetpass.c: no more special case for kerberos
16772 1995-06-17 18:13 millert
16774 * config.h.in: took out setreuid and setresuid stuff added kerb5
16775 stuff (use kerb4 emulation)
16777 1995-06-17 18:13 millert
16779 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16782 1995-06-17 18:12 millert
16784 * check.c: now use private ticket file for kerberos support to
16785 avoid trouncing on system one
16787 1995-06-15 00:48 millert
16789 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16791 1995-06-15 00:47 millert
16793 * sudo.c: added anti-spoofing support
16795 1995-06-15 00:47 millert
16797 * parse.c: now use global cmnd_st
16799 1995-06-15 00:47 millert
16801 * logging.c: added SPOOF_ATTEMPT suypport
16803 1995-06-14 23:41 millert
16805 * testsudoers.c, visudo.c: added void casts where appropriate
16807 1995-06-14 23:40 millert
16809 * parse.yacc: fixed up spacing and added void casts where
16812 1995-06-14 23:27 millert
16814 * sudo.c: fixed problem with "-p prompt" but no args
16816 1995-06-14 04:43 millert
16818 * sudo.man: added BUGS and annotated -l description
16820 1995-06-14 04:43 millert
16822 * sudo.h: validate() now takes a flag
16824 1995-06-14 04:43 millert
16826 * sudo.c: validate() now takes a flag added -l
16828 1995-06-14 04:42 millert
16830 * parse.yacc: added support for -l
16832 1995-06-14 04:41 millert
16834 * parse.c: validate() now takes a flag that says whether or not to
16837 1995-06-07 21:36 millert
16839 * logging.c: now deals with Argv == 1
16841 1995-06-07 21:34 millert
16843 * sudo.man: added -p option
16845 1995-06-07 21:27 millert
16847 * sudo.c: added prompt support reworked parse_args()
16849 1995-06-07 20:49 millert
16851 * sudo.h: added prompt
16853 1995-06-07 20:49 millert
16855 * options.h: added PASSPROMPT
16857 1995-06-07 20:48 millert
16859 * check.c: now use BUFSIZ as length of kerb password added kpass so
16860 pass is always a char * now use prompt global when asking for a
16863 1995-06-07 20:47 millert
16865 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16867 1995-06-07 20:43 millert
16869 * OPTIONS: added PASSPROMPT
16871 1995-06-07 01:44 millert
16873 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16876 1995-06-07 01:43 millert
16878 * check.c: don't exit on kerb error, just warn if k_errno ==
16879 KDC_PR_UNKNOWN (unknown user) silently fail
16881 1995-06-06 22:44 millert
16883 * INSTALL: added kerb4 note
16885 1995-06-06 22:43 millert
16887 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16889 1995-06-06 22:41 millert
16891 * check.c: removed debugging printf
16893 1995-06-06 22:33 millert
16895 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16898 1995-06-06 22:32 millert
16900 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16903 1995-06-06 22:32 millert
16905 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16906 setreuid emulation with setresuid if applic
16908 1995-06-06 22:31 millert
16910 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16911 chown() hack if no setreuid() or a broken one
16913 1995-06-05 23:44 millert
16915 * config.h.in: added HAVE_KERBEROS
16917 1995-06-05 23:43 millert
16919 * tgetpass.c: added KERBEROS support (long passwords)
16921 1995-06-05 23:42 millert
16923 * check.c, configure.in: added kerberos support
16925 1995-06-03 19:36 millert
16927 * sudo.h: added MODE_BACKGROUND
16929 1995-06-03 19:36 millert
16931 * sudo.man: escaped dashes added -b option
16933 1995-06-03 19:34 millert
16935 * sudo.c: added -b option
16937 1995-06-03 18:52 millert
16939 * check.c: added crypt() for osf/1 3.x enhanced secuiry
16941 1995-06-03 18:18 millert
16943 * configure.in: now check for -lcrypt
16945 1995-06-03 18:00 millert
16947 * interfaces.c: added ENXIO like EADDRNOTAVAIL
16949 1995-05-07 23:14 millert
16951 * configure.in: now emulate getwd(), not getcwd()
16953 1995-05-07 23:13 millert
16955 * sudo.c: getcwd() -> getwd()
16957 1995-05-07 23:12 millert
16959 * getwd.c: getcwd -> getwd
16961 1995-05-02 01:34 millert
16963 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16965 1995-05-02 01:34 millert
16967 * insults.h: broke out insults into separate include files
16969 1995-05-02 01:32 millert
16971 * options.h, OPTIONS: added GOONS
16973 1995-05-02 01:32 millert
16975 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16977 1995-05-01 23:34 millert
16979 * Makefile.in, version.h: ++version
16981 1995-05-01 23:34 millert
16983 * visudo.c: moved signal handler setup to setup_signals()
16985 1995-05-01 23:33 millert
16987 * sudo.h: added load_interfaces()
16989 1995-05-01 23:33 millert
16991 * sudo.c: moved load_interfaces to interfaces.c
16993 1995-05-01 23:33 millert
16995 * parse.yacc: added clearaliases
16997 1995-05-01 23:33 millert
16999 * OPTIONS, options.h: added FAST_MATCH
17001 1995-05-01 23:32 millert
17003 * parse.lex: now uses clearaliases variable
17005 1995-05-01 23:31 millert
17007 * interfaces.c: Initial revision
17009 1995-05-01 23:31 millert
17011 * Makefile.in: added interfaces.[co]
17013 1995-05-01 23:30 millert
17015 * testsudoers.c: now uses ip addrs and netmasks via
17018 1995-05-01 22:47 millert
17020 * sudo.c: now remove IFS instead of setting to "sane" value
17022 1995-05-01 16:30 millert
17024 * parse.c: added FAST_MATCH
17026 1995-04-29 20:19 millert
17028 * Makefile.in: sudo_goodpath.c-> goodpath.c
17030 1995-04-29 20:15 millert
17032 * sudo.c: added Andy's new ISC changes
17034 1995-04-14 14:06 millert
17036 * OPTIONS: added a sentence to SECURE_PATH info
17038 1995-04-14 13:57 millert
17042 1995-04-14 13:54 millert
17044 * RUNSON, CHANGES: updated
17046 1995-04-13 17:04 millert
17048 * RUNSON: updated for beta3
17050 1995-04-13 14:32 millert
17052 * Makefile.in, version.h: ++version
17054 1995-04-13 13:56 millert
17056 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
17058 1995-04-13 13:54 millert
17060 * sudo.c: fixed indentation
17062 1995-04-13 13:35 millert
17064 * aclocal.m4: fixed a typo
17066 1995-04-13 13:19 millert
17068 * sudo.c: updated ISC mods
17070 1995-04-13 13:19 millert
17072 * configure.in: added unixware case
17074 1995-04-13 13:19 millert
17076 * check.c: user_is_exempt is no longer hidden
17078 1995-04-13 13:19 millert
17082 1995-04-13 13:19 millert
17084 * aclocal.m4: isc and riscos changes
17086 1995-04-13 13:18 millert
17088 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17091 1995-04-13 13:18 millert
17093 * Makefile.in: fixed a typo and added testsudoers stuff
17095 1995-04-13 12:34 millert
17097 * testsudoers.c: Initial revision
17099 1995-04-12 19:31 millert
17101 * parse.yacc: applied fixed patch from Chris
17103 1995-04-11 14:30 millert
17105 * Makefile.in: fixed a typo
17107 1995-04-11 14:14 millert
17109 * parse.yacc: added a set of braces for bison
17111 1995-04-11 14:01 millert
17113 * parse.yacc: merged in Chris' changes to dekludge the parser.
17115 1995-04-11 00:38 millert
17117 * logging.c: send_mail() was calling find_path() which is wrong
17118 since find_path() stores cmnd in a static var. Anyhow, it
17119 doesn't make much sense since MAILER should always be fully
17122 1995-04-10 19:51 millert
17124 * sample.sudoers: added User_Alias stuff
17126 1995-04-10 19:50 millert
17128 * aclocal.m4: SUDO_NEXT now looks for
17129 /usr/lib/NextStep/software_version
17131 1995-04-10 19:50 millert
17133 * RUNSON: added DEC UNIX 3.0 w/ gcc
17135 1995-04-10 19:49 millert
17137 * visudo.c: Exit was being used in places where exit should be used
17139 1995-04-10 19:44 millert
17141 * sudoers: added "User alias specification"
17143 1995-04-10 18:04 millert
17145 * parse.yacc: fixed probs caused by making nslots and naliases a
17148 1995-04-10 15:09 millert
17150 * RUNSON: added KSR, upped rev to 1.3.1b2
17152 1995-04-10 15:07 millert
17154 * logging.c, parse.yacc: 1024 -> BUFSIZ
17156 1995-04-10 15:05 millert
17158 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17159 to appease lsearch on 64-bit machines
17161 1995-04-09 19:30 millert
17163 * TODO: did a bunch of things and added a bunch :-)
17165 1995-04-09 19:30 millert
17169 1995-04-09 19:24 millert
17171 * visudo.man: closer to BSD manpage style
17173 1995-04-09 19:15 millert
17175 * sudo.man: closer to standard BSD man format
17177 1995-04-09 18:58 millert
17179 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17180 sudo.h, version.h, emul/search.h: added RCS id
17182 1995-04-09 17:35 millert
17184 * sudo.h: removed crufty #defines that are no longer used
17186 1995-04-09 17:13 millert
17188 * BUGS: fixed a bug
17190 1995-04-09 17:12 millert
17192 * sudo.man: updated based on sudo changes
17194 1995-04-09 17:11 millert
17196 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17197 keyword as well as a NAME or ALIAS
17199 1995-04-09 17:11 millert
17203 1995-04-09 17:04 millert
17205 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17207 1995-04-09 15:24 millert
17209 * aclocal.m4: fixed bug with full void impl check
17211 1995-04-08 23:11 millert
17213 * parse.yacc: fixed User_Alias supoprt
17215 1995-04-08 22:27 millert
17217 * parse.yacc: added stubs for User_Alias support
17219 1995-04-08 22:27 millert
17221 * sudo.c: now sets removes # bogus interfaces from num_interfaces
17223 1995-04-08 22:26 millert
17225 * parse.lex: added User_Alias support
17227 1995-04-07 21:10 millert
17229 * Makefile.in: removed extraneous TODO
17231 1995-04-07 19:48 millert
17233 * visudo.c: ntwk_matches -> addr_matches
17235 1995-04-07 15:38 millert
17237 * parse.yacc: ntwk_matches -> addr_matches
17239 1995-04-07 15:37 millert
17241 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17242 inet_network() (which expects octet boundaries) fixes for OSF
17243 (sizeof(int) != sizeof(long))
17245 1995-04-07 15:08 millert
17247 * sudo.c: took out debugging info
17249 1995-04-06 23:45 millert
17251 * aclocal.m4: OS was being set to unknown before non-uname based
17252 host checks. This caused no checks to happen since $OS was not
17255 1995-04-06 23:30 millert
17257 * sudo.c: fixed loading of interfaces struct still has debugging
17260 1995-04-06 22:23 millert
17262 * parse.c: fixed typo
17264 1995-04-06 16:17 millert
17266 * Makefile.in: ++version
17268 1995-04-06 16:16 millert
17272 1995-04-06 16:16 millert
17274 * visudo.c: removed extraneous extern decl of "top
17276 1995-04-06 16:14 millert
17278 * visudo.c: now zeros "top"
17280 1995-04-06 16:13 millert
17282 * parse.yacc: removed parser_cleanup (no need for it now)
17284 1995-04-06 16:13 millert
17286 * parse.lex: now calls reset_aliases() directly
17288 1995-04-04 18:21 millert
17290 * OPTIONS: added a sentence to SECURE_PATH description
17292 1995-04-04 18:17 millert
17294 * parse.c: fixed my stupid bug where I used NAMLEN on something I
17295 wanted to just get the name from. argh.
17297 1995-04-03 16:58 millert
17299 * lsearch.c: fixed argument order of memmove() that i hosed when
17300 converting from bcopy(). arghh.
17302 1995-04-03 15:33 millert
17304 * Makefile.in: finally fixed DISTFILES line
17306 1995-04-03 15:21 millert
17308 * Makefile.in: tabs -> spaces
17310 1995-04-03 15:15 millert
17312 * Makefile.in: added missing files to DISTFILES
17314 1995-04-03 14:50 millert
17316 * Makefile.in: SUPPORTED -> RUNSON
17318 1995-04-01 03:12 millert
17322 1995-04-01 01:54 millert
17324 * RUNSON: updated for pl5b1 release
17326 1995-04-01 01:53 millert
17328 * BUGS, TODO: updated
17330 1995-04-01 01:52 millert
17332 * check.c: fixed bug where if you hit return at first sudo prompt
17333 it would still log as a failure
17335 1995-04-01 01:29 millert
17339 1995-04-01 01:25 millert
17341 * aclocal.m4: better test for bogus void * implementation
17343 1995-03-31 20:33 millert
17345 * logging.c: added PASSWORDS_NOT_CORRECT
17347 1995-03-31 20:32 millert
17349 * check.c: added PASSWORDS_NOT_CORRECT stuff]
17351 1995-03-31 20:30 millert
17353 * sudo.h: added PASSWORDS_NOT_CORRECT
17355 1995-03-31 19:16 millert
17357 * tgetpass.c: moved pathnames.h
17359 1995-03-31 19:16 millert
17361 * sudo.c: removed some unused vars and fixed up uid2str
17363 1995-03-31 19:15 millert
17365 * putenv.c: moved compat.h
17367 1995-03-31 19:14 millert
17369 * getcwd.c, getwd.c: added pathnames.h
17371 1995-03-31 18:18 millert
17373 * parse.yacc: fixed a typo I introduced in the last checkin :-(
17375 1995-03-31 18:11 millert
17377 * parse.lex: can't have #ifdef's where N is defined so just do this
17378 the broken way for AIX
17380 1995-03-31 18:08 millert
17382 * parse.yacc: better hack from Chris (but still a hack)
17384 1995-03-31 18:05 millert
17386 * parse.lex: stupid hack for broken aix lex
17388 1995-03-31 17:47 millert
17390 * tgetpass.c: now includes compat.h
\ 6
17392 1995-03-31 17:27 millert
17394 * visudo.c: now includes fcntl.h
17396 1995-03-31 17:27 millert
17398 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17400 1995-03-31 16:12 millert
17402 * parse.yacc: dirty hack to fix parser bug. i don't really like
17403 this but it works for now...
17405 1995-03-31 16:12 millert
17407 * sudo.c: uid2str is now static like the prototype says
17409 1995-03-29 23:48 millert
17411 * RUNSON: Initial revision
17413 1995-03-29 23:47 millert
17415 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17417 1995-03-29 23:46 millert
17419 * sudo.c: check_sudoers now returns an error code and sudo calls
17420 inform_user and log_error based on the return value.
17422 1995-03-29 23:45 millert
17424 * logging.c, sudo.h: added entries for new errors
17426 1995-03-29 23:03 millert
17428 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17431 1995-03-29 22:52 millert
17433 * Makefile.in: took out testsudoers
\ 6
17435 1995-03-29 22:36 millert
17437 * sudo.c: now explicately checks that it is setuid root
17439 1995-03-29 22:28 millert
17441 * sudo.c: If a user has no passwd entry sudo would segv (writing to
17442 a garbage pointer). Now allocate space before writing :-)
17444 1995-03-29 22:06 millert
17446 * configure.in: reordered AC_CHECK_FUNCS
17448 1995-03-29 22:06 millert
17450 * config.h.in: fixed memset macro
17452 1995-03-29 21:47 millert
17454 * logging.c: bzero -> memset when a parse error is logged the line
17455 number of the error is now logged too
17457 1995-03-29 21:46 millert
17459 * tgetpass.c, visudo.c: bzero -> memset
17461 1995-03-29 21:46 millert
17463 * INSTALL: added Sunos to blurb about c2 security
17465 1995-03-29 21:45 millert
17467 * configure.in: added a SUN4 define for C2 security
17469 1995-03-29 21:44 millert
17471 * config.h.in: bcopy -> memmove bzero -> memset
17473 1995-03-29 21:43 millert
17475 * lsearch.c: bcopy -> memmove char * -> VOID *
17477 1995-03-29 21:30 millert
17479 * check.c: added support for sunos with C2 security
17481 1995-03-29 21:12 millert
17483 * OPTIONS, options.h: reordered
17485 1995-03-29 21:12 millert
17487 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17489 1995-03-29 21:12 millert
17491 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17493 1995-03-29 21:12 millert
17495 * config.h.in: added _SUDO_PATH_LOGFILE
17497 1995-03-29 21:11 millert
17499 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17500 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17501 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17503 1995-03-29 18:17 millert
17505 * TROUBLESHOOTING: Initial revision
17507 1995-03-29 17:59 millert
17509 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17510 load_global() to work around a problem is trusted hpux shadow
17513 1995-03-29 17:41 millert
17515 * parse.yacc: backed out a change in malloc/realloc
17517 1995-03-29 17:38 millert
17519 * parse.yacc: now include stdlib.h
17521 1995-03-29 17:22 millert
17523 * visudo.c: now do an freopen() of the stmp file so that yyin will
17524 always point to the same thing. This is important for flex since
17525 we are doing a YY_NEWFILE
17527 1995-03-29 17:20 millert
17529 * parse.yacc: replaced yywrap() with parser_cleanup() since
17530 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17533 1995-03-29 17:18 millert
17535 * parse.lex: now have a rule that matches anything that doesn't
17536 match an explicite rule. well, you know what i mean (. matches
17537 anything not yet matched). However, this means that there is
17538 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17539 So, yywrap has moved into parse.lex and it calls parser_cleanup()
17540 which is most of the old yywrap() sigh.
17542 1995-03-29 17:17 millert
17544 * SUPPORTED: no longer used
17546 1995-03-29 16:13 millert
17548 * getcwd.c, getwd.c: moved compat.h to be the last include file
17550 1995-03-29 16:11 millert
17552 * parse.yacc: fixed type of aliascmp() args
17554 1995-03-29 15:58 millert
17556 * find_path.c: NULL -> '\0'
17558 1995-03-29 15:42 millert
17560 * parse.yacc: added casts to lfind and lsearch args for irix
17562 1995-03-29 08:20 millert
17564 * Makefile.in: bsdinstall -> install-sh
17566 1995-03-29 08:20 millert
17568 * INSTALL: added info about make realclean
17570 1995-03-29 08:17 millert
17572 * Makefile.in: updated VERSION added dependencies for visudo.cat
17574 1995-03-29 08:17 millert
17576 * version.h: -> pl5b1
17578 1995-03-29 08:16 millert
17580 * sudo.c: took out -l
17582 1995-03-29 00:03 millert
17584 * Makefile.in: now there is a real visudo.man and visudo.cat
17586 1995-03-28 23:54 millert
17588 * sudo.man: took out visudo stuff
17590 1995-03-28 23:54 millert
17592 * visudo.man: Initial revision
17594 1995-03-28 23:12 millert
17596 * parse.c, parse.lex, parse.yacc: updated copyright
17598 1995-03-28 23:05 millert
17600 * README: updated for pl5
17602 1995-03-28 20:02 millert
17604 * sudo.man: updated Nieusma & Hieb email addresses
17606 1995-03-28 19:57 millert
17608 * INSTALL: updated to include options.h and OPTIONS
17610 1995-03-28 19:35 millert
17612 * CHANGES, TODO: updated
17614 1995-03-28 19:35 millert
17616 * BUGS: eliminated bug #1 (yay)
17618 1995-03-28 19:31 millert
17620 * configure.in: sunos no longer gets linked statically
17622 1995-03-28 18:58 millert
17624 * parse.lex: prototype now uses __P()
17626 1995-03-28 18:49 millert
17628 * parse.lex: make fill() non-ansi
17630 1995-03-28 15:26 millert
17632 * parse.c: made -v (validate) work
17634 1995-03-28 15:26 millert
17636 * logging.c: now gives host
17638 1995-03-28 10:34 millert
17640 * find_path.c: don't check for execute/statable if fq or relative
17643 1995-03-28 01:07 millert
17645 * parse.c: added a cast
17647 1995-03-28 00:49 millert
17649 * visudo.c: now include ctype.h for islower and tolower macros
17651 1995-03-28 00:48 millert
17653 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17655 1995-03-28 00:48 millert
17657 * sudo.c: moved a set of parens
17659 1995-03-28 00:48 millert
17661 * strdup.c: now include compat.h
17663 1995-03-28 00:47 millert
17665 * parse.yacc: now cast malloc & realloc return vals added search
17666 for HAVE_LSEARCH now use strcmp if no strcasecmp available
17668 1995-03-28 00:46 millert
17670 * lsearch.c, emul/search.h: void * -> VOID *
17672 1995-03-28 00:45 millert
17674 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17675 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17677 1995-03-28 00:44 millert
17679 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17681 1995-03-28 00:44 millert
17683 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17684 echo and results to most SUDO_* macros
17686 1995-03-28 00:43 millert
17688 * Makefile.in: no more -I.
17690 1995-03-28 00:22 millert
17692 * configure.in: various 1.x ro 2.x autoconf changes now check for
17693 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17694 check for fully woorking void implementation
17696 1995-03-28 00:02 millert
17698 * Makefile.in: added lsearch & search.h visudo links into
17701 1995-03-27 23:43 millert
17703 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17705 1995-03-27 23:40 millert
17707 * visudo.c: whatnow_help was prototyped to be static be was not
17710 1995-03-27 21:15 millert
17712 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17713 used) added check for dirent/dir/ndir.h
17715 1995-03-27 21:09 millert
17717 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17719 1995-03-27 20:38 millert
17721 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17723 1995-03-27 20:23 millert
17725 * emul/search.h, lsearch.c: Initial revision
17727 1995-03-27 18:26 millert
17729 * parse.yacc: eliminated bison warnings
17731 1995-03-27 17:10 millert
17733 * parse.lex: added missing case
17735 1995-03-27 17:04 millert
17737 * visudo.c: now iincludes signal.h
17739 1995-03-27 15:16 millert
17741 * parse.yacc: only clear data structures on a parse error
17743 1995-03-27 15:01 millert
17745 * visudo.c: whatnow() now gives help on invalid input
17747 1995-03-27 14:54 millert
17749 * visudo.c: added a whatnow() function (sort of like mh)
17751 1995-03-27 14:53 millert
17753 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17754 by calling reset_aliases() and clearing top took reset stuff out
17755 of yyerror() since it doesn't beling there (and doesn't work
17756 anyway). errorlineno is now initially set to -1 so we can set it
17757 to the first error that occurrs (it was getting set to the last)
17759 1995-03-27 14:53 millert
17761 * parse.lex: added a void cast
17763 1995-03-27 13:26 millert
17765 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17767 1995-03-26 01:33 millert
17769 * sudo.c, sudo.h: removed ocmnd
17771 1995-03-26 01:19 millert
17773 * sudo.h: no more sudo_realpath() and find_path() changed params
17775 1995-03-26 01:19 millert
17777 * sudo.c: find_path() changed since no more realpath()
17779 1995-03-26 01:18 millert
17781 * parse.yacc: on error, errorlineno is set to the line where the
17782 error occurred added kill_aliases() to free the aliases struct
17783 now clean up in yyerror() so we can reparse cleanly
17785 1995-03-26 01:17 millert
17787 * logging.c: changed to use new find_path()
17789 1995-03-26 01:17 millert
17791 * options.h, parse.c: no more USE_REALPATH
17793 1995-03-26 01:16 millert
17795 * find_path.c: removed all the realpath() stuff
17797 1995-03-26 01:16 millert
17799 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17801 1995-03-26 01:12 millert
17803 * visudo.c: now works correctly with utk parser
17805 1995-03-26 00:04 millert
17807 * goodpath.c: Initial revision
17809 1995-03-25 23:23 millert
17811 * sudo_realpath.c: eliminated a compiler warning
17813 1995-03-25 21:56 millert
17815 * sudo.c: elinated compiler warning
17817 1995-03-25 20:40 millert
17819 * sudo_realpath.c: added sudo_goodpath()
17821 1995-03-25 20:40 millert
17823 * sudo.h: added prototype for sudo_goodpath
17825 1995-03-25 20:39 millert
17827 * parse.c: added support for /sys/dir.h
17829 1995-03-25 20:39 millert
17831 * options.h: USE_REALPATH turned off
17833 1995-03-25 20:39 millert
17835 * find_path.c: added calls to sudo_goodpath()
17837 1995-03-25 20:39 millert
17839 * configure.in: added check for dirent.h
17841 1995-03-25 20:38 millert
17843 * config.h.in: added HAVE_DIRENT_H
17845 1995-03-25 19:27 millert
17847 * configure.in: added in linux shadow pass stuff
\ 6
17849 1995-03-24 14:43 millert
17851 * visudo.c: added back host, user, cmnd, parse_error
17853 1995-03-24 14:19 millert
17855 * visudo.c: added in utk changes plus some minor cosmetic changes
17857 1995-03-24 14:17 millert
17859 * sudo.c, sudo_realpath.c: added void casts for printf's
17861 1995-03-24 14:17 millert
17863 * options.h: added a define of USE_REALPATH
17865 1995-03-24 14:17 millert
17867 * configure.in: there is no more visudoers/Makefile
17869 1995-03-24 14:16 millert
17871 * Makefile.in: added in utk changes (visudo is now built from the
17874 1995-03-24 14:15 millert
17876 * find_path.c: added (void) casts to printf's
17878 1995-03-23 22:32 millert
17880 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17883 1995-03-22 23:13 millert
17885 * find_path.c: now check to see that what we are trying to run is a
17886 file (or a link to a file, we do a stat(2) so there is no diff)
17888 1995-03-13 15:56 millert
17892 1995-03-13 15:56 millert
17894 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17897 1995-03-13 15:11 millert
17899 * sudo.man: added myself as maintainer
17901 1995-02-16 23:31 millert
17903 * sudo.c: changed setegid -> setgid
17905 1995-02-06 17:43 millert
17907 * configure.in: fixed the test for irix 5.x to skip bad libs
17909 1995-02-06 17:43 millert
17911 * aclocal.m4: now initialize OS and OSREV
17913 1995-01-26 20:52 millert
17915 * configure.in: irix5 changes
17917 1995-01-26 20:28 millert
17919 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17920 for autoconf 2.1 compatibility
17922 1995-01-18 19:49 millert
17924 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17925 do the righ thing wrt yyrestart (grrrr)
17927 1995-01-16 18:44 millert
17929 * Makefile.in: added visudoers/compat.h to DISTFILES
17931 1995-01-16 17:01 millert
17933 * configure.in: fixed an echo
17935 1995-01-16 16:36 millert
17937 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17940 1995-01-16 16:35 millert
17942 * sudo.h: added ocmnd extern adjusted find_path() prototype
17944 1995-01-16 16:34 millert
17946 * parse.c: cmndcmp() now takes 3 arguments and checks against the
17947 qualified as well as the unqualified pathname. more code that
17948 should use cmndcmp() but did not, now does
17950 1995-01-16 16:34 millert
17952 * options.h: added to a comment
17954 1995-01-16 16:33 millert
17956 * logging.c: changed to use new find_path() parameter passing
17958 1995-01-16 16:32 millert
17960 * find_path.c: find_path() now takes 2 copyout parameters (one for
17961 the qualified pathname and one for the unqualified pathname).
17962 The third parameter may be NULL.
17964 1995-01-16 16:31 millert
17966 * configure.in: no longer munge pathnames.h
17968 1995-01-16 16:30 millert
17970 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17971 defined in config.h) as a result, pathnames.h does not need to be
17972 run through configure and the user can override the configured
17975 1995-01-16 16:30 millert
17977 * config.h.in: added _SUDO_PATH_* entries
17979 1995-01-16 16:30 millert
17981 * aclocal.m4: _PATH* -> _SUDO_PATH_*
17983 1995-01-16 16:28 millert
17985 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17988 1995-01-13 12:52 millert
17990 * compat.h: removed extraneous #endif
17992 1995-01-13 12:48 millert
17994 * aclocal.m4: added SUDO_PROG_MV
17996 1995-01-13 12:47 millert
17998 * configure.in: added SUDO_PROG_MV added riscos and isc os types
17999 took out -DSHORT_MESSAGE from --with-csops since it is now the
18002 1995-01-13 12:46 millert
18004 * sudo.c: move the include of id.h to compat.h now includes
18007 1995-01-13 12:45 millert
18009 * sudo.h: moved compatibility #defines to compat.h
18011 1995-01-13 12:45 millert
18013 * pathnames.h.in: added _PATH_MV
18015 1995-01-13 12:43 millert
18017 * config.h.in: move __P to compat.h
18019 1995-01-13 12:39 millert
18021 * getcwd.c, getwd.c, putenv.c: now includes compat.h
18023 1995-01-13 12:39 millert
18025 * compat.h: Initial revision
18027 1995-01-11 19:11 millert
18029 * sudo.h: pull user-configurable stuff out and put in options.h
18031 1995-01-11 18:43 millert
18033 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
18034 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
18037 1995-01-11 18:41 millert
18039 * Makefile.in: added visudoers/options.h
18041 1995-01-11 18:40 millert
18043 * options.h, OPTIONS: Initial revision
18045 1995-01-11 18:39 millert
18047 * Makefile.in: added OPTIONS and options.h
18049 1995-01-11 18:36 millert
18051 * logging.c: changed #ifdef's to use LOGGING and
18052 SLOG_SYSLOG/SLOG_FILE
18054 1995-01-11 11:02 millert
18056 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
18058 1994-12-17 18:18 millert
18060 * visudo.c: now only do Editor +line_num if line_num != 0
18062 1994-12-15 21:06 millert
18064 * visudo.c: now use mv if rename(2) fails
18066 1994-12-15 20:32 millert
18068 * BUGS: added a visudo bug
18070 1994-12-15 19:46 millert
18072 * check.c: expanded comment
18074 1994-11-12 18:33 millert
18076 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18079 1994-11-09 19:49 millert
18081 * sudo.c: added mips & isc support
18083 1994-11-09 19:49 millert
18085 * parse.c: added support for non-root owned sudoers file
18087 1994-11-09 19:48 millert
18089 * check.c: added exempt group support
18091 1994-11-09 19:47 millert
18093 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18094 non-root own sudoers file added exempt group support added isc
18097 1994-11-09 19:46 millert
18099 * visudo.c: now copy sudoers to temp file via read/write (not
18100 stdio) now chown new sudoers file to SUDOERS_OWNER
18102 1994-11-07 20:40 millert
18104 * configure.in: added skey support
18106 1994-11-07 20:39 millert
18108 * sudo.h: fixed typo added set_perms support added skey support
18109 added seteuid()/setegid() emulation for AIX
18111 1994-11-07 20:38 millert
18113 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18114 owned by root nread/write by only root
18116 1994-11-07 20:38 millert
18118 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18120 1994-11-07 20:38 millert
18122 * check.c: be_* -> set_perms() added skey support
18124 1994-11-06 18:59 millert
18126 * Makefile.in: ++version
18128 1994-11-06 18:59 millert
18132 1994-10-21 13:16 millert
18134 * sudo.c: now sets IFS
18136 1994-10-21 12:02 millert
18138 * insults.h: fixed typo
18140 1994-10-15 15:48 millert
18142 * config.h.in: added HAVE_SKEY
18144 1994-10-04 13:00 millert
18148 1994-10-04 12:57 millert
18150 * Makefile.in: ++version
18152 1994-10-04 12:57 millert
18156 1994-10-04 12:56 millert
18158 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18160 1994-10-04 12:56 millert
18162 * configure.in: added function check for tcgetattr(3)
18164 1994-10-04 12:55 millert
18166 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18168 1994-10-04 12:53 millert
18170 * config.h.in: added check for tcgetattr
18172 1994-09-26 17:38 millert
18176 1994-09-22 13:30 millert
18178 * parse.lex: now only include unistd.h for linux
18180 1994-09-21 14:29 millert
18182 * Makefile.in: added visudo.8 generation
18184 1994-09-21 14:07 millert
18186 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18188 1994-09-20 19:39 millert
18192 1994-09-20 19:39 millert
18196 1994-09-20 19:38 millert
18198 * README: added mailing list info
18200 1994-09-20 19:37 millert
18202 * parse.yacc: now use sudolineno instead of yylineno fixed bison
18205 1994-09-20 19:37 millert
18207 * configure.in: now use -no_library_replacement for osf don't make
18208 a static binary for hpux >= 9.0
18210 1994-09-20 19:21 millert
18212 * tgetpass.c: added string.h/strings.h inclusion
18214 1994-09-20 19:21 millert
18216 * config.h.in: added ssize_t def
18218 1994-09-20 19:18 millert
18220 * parse.lex: added inclusion of string.h/strings.h
18222 1994-09-20 18:48 millert
18224 * aclocal.m4: fixed uname | sed (needed to quote the '[')
18226 1994-09-20 18:42 millert
18228 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18231 1994-09-20 18:13 millert
18233 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18236 1994-09-20 18:10 millert
18240 1994-09-20 17:52 millert
18242 * parse.c: added code to support command listings
18244 1994-09-20 17:36 millert
18246 * sudo.c: added code for -l flag
18248 1994-09-20 17:35 millert
18250 * sudo.man: fixed typo added info for -l flag
18252 1994-09-20 14:45 millert
18254 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18256 1994-09-20 14:45 millert
18258 * aclocal.m4: added SUDO_SSIZE_T
18260 1994-09-20 14:44 millert
18262 * sudo.h: added MODE_LIST
18264 1994-09-20 14:43 millert
18266 * configure.in: added AC_SSIZE_T
18268 1994-09-19 20:53 millert
18270 * find_path.c, sudo_realpath.c: readlink() is now declared as
18273 1994-09-19 20:44 millert
18275 * configure.in: added -laud for OSF c2
18277 1994-09-02 15:55 millert
18279 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18280 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18281 sudo-bugs@cs.colorado.edu
18283 1994-09-02 15:54 millert
18285 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18286 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18287 sudo_setenv.c, tgetpass.c, version.h: changed
18288 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18290 1994-09-01 15:56 millert
18292 * Makefile.in: ++version
18294 1994-09-01 15:55 millert
18298 1994-09-01 15:55 millert
18300 * logging.c: added host to alertmail messages
18302 1994-09-01 15:55 millert
18304 * CHANGES, TODO: udpated
18306 1994-09-01 15:26 millert
18308 * logging.c: fixed logging problem where mail would not say which
18311 1994-09-01 13:45 millert
18313 * configure.in: added -laud for gcc if osf & c2
18315 1994-09-01 13:39 millert
18317 * check.c: moved set_auth_parameters to sudo.c
18319 1994-09-01 13:38 millert
18321 * sudo.c: added set_auth_parameters for osf
18323 1994-09-01 13:22 millert
18325 * configure.in: cleaned up -static stuff
18327 1994-09-01 13:15 millert
18329 * Makefile.in: ++version
18331 1994-09-01 13:15 millert
18335 1994-09-01 13:15 millert
18337 * sudo.c: changed setenv() to sudo_setenv()
18339 1994-09-01 13:12 millert
18341 * check.c: fixed osf problem
18343 1994-08-31 22:17 millert
18345 * configure.in: added OSF C2 stuff
18347 1994-08-31 22:00 millert
18351 1994-08-31 21:56 millert
18353 * check.c: added osf auth support & removed some extra spaces
18355 1994-08-31 21:52 millert
18357 * INSTALL, SUPPORTED: added osf C2 stuff
18359 1994-08-31 19:52 millert
18361 * TODO: added 2 suggestions
18363 1994-08-31 19:33 millert
18365 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18367 1994-08-31 18:48 millert
18371 1994-08-30 18:31 millert
18373 * version.h: 1.3.1final
18375 1994-08-30 18:30 millert
18377 * Makefile.in: added HISTORY
18379 1994-08-30 18:30 millert
18381 * sudo.man: mention HISTPRY file
18383 1994-08-30 18:30 millert
18385 * sudo.c: use sizeof instead of a constant in 1 place
18387 1994-08-30 18:30 millert
18389 * parse.yacc: added unistd.h
18391 1994-08-30 18:29 millert
18393 * parse.lex: added unistd.h
18395 1994-08-30 18:27 millert
18399 1994-08-30 18:15 millert
18401 * HISTORY: Initial revision
18403 1994-08-17 12:45 millert
18407 1994-08-17 12:39 millert
18411 1994-08-17 12:36 millert
18413 * sudo_setenv.c: added unistd.h include
18415 1994-08-16 15:46 millert
18417 * sudo.c: added sys/time.h for AIX
18419 1994-08-14 21:22 millert
18421 * configure.in: added check for -lsocket and sys/sockio.h
18423 1994-08-14 21:21 millert
18425 * config.h.in: took out libshadow check and added in sys/sockio.h
18428 1994-08-14 21:21 millert
18430 * sudo.c: now include sockio.h instead of ioctl.h if it exists
18431 "sudo -" now gets a better error message
18433 1994-08-14 20:47 millert
18435 * sample.sudoers: now has a dir and subnet entry
18437 1994-08-13 18:15 millert
18439 * sudo.c: removed if_ether.h
18441 1994-08-13 17:16 millert
18443 * TODO: added an item
18445 1994-08-13 17:15 millert
18447 * sudo.man: added network and ip addresses to man page
18449 1994-08-13 17:09 millert
18451 * sudo.c: no error if can't get interfaces or netmask since
18452 networking may not be in the kernel.
18454 1994-08-13 17:08 millert
18456 * parse.c: nwo check for interfaces == NULL
18458 1994-08-12 21:22 millert
18460 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18461 to fail if the last entry in the spec failed (ie: it was only
18462 looking at the last entry). CLeaned things up by adding the
18463 cmndcmp() function--all neat & tidy
18465 1994-08-12 21:21 millert
18467 * CHANGES: added one
18469 1994-08-11 23:42 millert
18471 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18473 1994-08-11 21:58 millert
18475 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18478 1994-08-11 21:58 millert
18480 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18481 visudo.c: added include of netinet/in.h
18483 1994-08-11 21:57 millert
18487 1994-08-11 21:57 millert
18489 * sudo.h: added interfaces global
18491 1994-08-11 21:56 millert
18493 * parse.c: now uses new interfaces global
18495 1994-08-11 21:56 millert
18497 * sudo.c: now ip addresses are gleaned fw/o dns
18499 1994-08-10 19:21 millert
18501 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18503 1994-08-10 19:21 millert
18505 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18508 1994-08-10 19:20 millert
18510 * sudo.h: added ip_addrs def added load_ip_addrs prototype
18512 1994-08-08 16:03 millert
18516 1994-08-08 15:57 millert
18518 * Makefile.in: removed multiple entries in DISTFILES
18520 1994-08-08 13:05 millert
18522 * visudo.c: ansified the !STDC_HEADERS decls
18524 1994-08-08 13:05 millert
18526 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18527 malloc decl if gnuc
18529 1994-08-08 13:04 millert
18531 * sudo.c: can't use getopt(3) since it munges args to the command
18532 to be run as root don't do malloc decl if gnuc
18534 1994-08-08 00:41 millert
18536 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18537 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18540 1994-08-08 00:27 millert
18542 * getcwd.c, getwd.c: added missing paren
18544 1994-08-08 00:23 millert
18546 * Makefile.in: added putenv.c to DISTFILES
18548 1994-08-08 00:08 millert
18550 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18551 not defined now can count on putenv() being there
18553 1994-08-08 00:08 millert
18555 * sudo_realpath.c: took out errno decl since sudo.h does it for us
18556 fixed up a next cc warning added params to func decls when
18557 STDC_HEADERS is not defined
18559 1994-08-08 00:07 millert
18561 * sudo.h: took out environ extern added local declaratio of
18562 putenv() if local version is needed
18564 1994-08-08 00:05 millert
18566 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18567 func decls when STDC_HEADERS is not defined
18569 1994-08-08 00:04 millert
18571 * config.h.in: added memcpy check check to see that ansi vs bsd
18572 macros are ntot already defiend before defining (ie: avoid
18575 1994-08-08 00:03 millert
18577 * configure.in: removed fluff setenv check plus check w/ replace
18578 for putenv if also no setenv
18580 1994-08-08 00:01 millert
18582 * putenv.c: Initial revision
18584 1994-08-06 19:19 millert
18586 * sudo_setenv.c: Initial revision
18588 1994-08-06 19:19 millert
18590 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18592 1994-08-06 19:19 millert
18594 * sudo.c: now use sudo_setenvc
18596 1994-08-06 19:18 millert
18598 * configure.in: added puteenv and setenv, removed realpath
18600 1994-08-06 19:18 millert
18602 * config.h.in: added putenv & setenv
18604 1994-08-06 19:18 millert
18606 * Makefile.in: added sudo_setenv
18608 1994-08-06 19:16 millert
18612 1994-08-05 19:43 millert
18614 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18617 1994-08-05 19:43 millert
18619 * Makefile.in: added MAN_POSTINSTALL
18621 1994-08-05 19:43 millert
18625 1994-08-05 19:10 millert
18627 * sudo.man: added SUDO_* plus new options
18629 1994-08-05 19:10 millert
18631 * CHANGES: added one
18633 1994-08-05 19:07 millert
18635 * configure.in: took out shadow lib
18637 1994-08-05 18:35 millert
18641 1994-08-05 17:52 millert
18643 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18645 1994-08-05 17:49 millert
18647 * Makefile.in: support for installing a cat page instead of a man
18650 1994-08-05 17:48 millert
18652 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18653 looks for nroff to determine whether or not to install a cat or
18656 1994-08-05 17:48 millert
18658 * config.h.in: added HAVE_FLEX
18660 1994-08-05 16:14 millert
18662 * sudo.c: not set ret to MODE_RUN initially
18664 1994-08-05 16:12 millert
18666 * find_path.c: made command (and therefor cmnd dynamically
18669 1994-08-04 20:25 millert
18673 1994-08-04 20:24 millert
18677 1994-08-04 20:24 millert
18679 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18681 1994-08-04 20:24 millert
18683 * sudo.h: added MODE_ removed validate_only and added
18686 1994-08-04 20:22 millert
18688 * sudo.c: usage() now takes an int (exit value) added parse_args()
18689 to parse command line arguments moved call to find_path() from
18690 load_globals to new function load_cmnd() removed validate_only
18691 global -- now use the concept of "modes" added -h and -k options
18693 1994-08-04 20:21 millert
18695 * parse.c: no longer use global validate_only now checks for
18696 command called "validate" removed check for non-fully qualified
18697 commands since that is done by find_path
18699 1994-08-04 20:20 millert
18701 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18703 1994-08-04 20:17 millert
18705 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18708 1994-08-04 20:17 millert
18710 * check.c: check_timestamp no longer runs reminder(), it is implied
18711 in the return val added remove_timestamp()
18713 1994-08-04 20:16 millert
18717 1994-08-04 16:38 millert
18721 1994-08-04 16:38 millert
18723 * sudo_realpath.c: took out old_errno
18725 1994-08-04 16:37 millert
18729 1994-08-03 12:08 millert
18731 * logging.c: moved send_mail to after syslog
18733 1994-08-02 22:41 millert
18735 * sudo.c: now set SUDO_ envariables
18737 1994-08-01 13:40 millert
18741 1994-08-01 13:39 millert
18743 * sudo_realpath.c: now print error if chdir fails
18745 1994-08-01 13:39 millert
18747 * find_path.c: removed an XXX
18749 1994-07-25 20:40 millert
18753 1994-07-25 20:36 millert
18755 * configure.in: no more static binaries for aix
18757 1994-07-25 18:37 millert
18759 * INSTALL: fixed typo
18761 1994-07-25 18:33 millert
18763 * sudo_realpath.c: took out stuff not needed for sudo now does
18764 be_root/be_user itself now uses cwd global
18766 1994-07-25 18:32 millert
18770 1994-07-25 18:31 millert
18772 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18774 1994-07-25 18:26 millert
18776 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18778 1994-07-25 18:25 millert
18780 * find_path.c: now use sudo_realpath()
18782 1994-07-25 18:25 millert
18784 * config.h.in: took out realpth() stuff since we now use
18787 1994-07-25 18:25 millert
18789 * configure.in: ultrix enhanced sec
18791 1994-07-25 18:25 millert
18793 * SUPPORTED: added ultrix enhanced sec.
18795 1994-07-25 18:24 millert
18799 1994-07-25 18:21 millert
18801 * check.c: ultrix enhanced security suport
18803 1994-07-25 18:20 millert
18805 * Makefile.in: added sudo_realpath.c
18807 1994-07-25 18:18 millert
18811 1994-07-25 14:28 millert
18813 * tgetpass.c: increased passwd len to 24 for c2 security
18815 1994-07-25 13:17 millert
18817 * BUGS: updated BUGS
18819 1994-07-15 11:49 millert
18821 * check.c: now use user global var
18823 1994-07-15 11:48 millert
18825 * configure.in: took out -ls
18827 1994-07-14 19:11 millert
18829 * configure.in: added AFS libs
18831 1994-07-14 17:45 millert
18833 * sudo.h: user is now a char * added epasswd
18835 1994-07-14 17:43 millert
18837 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18838 password) global made user dynamically allocated
18840 1994-07-14 17:43 millert
18842 * configure.in: added tzset test
18844 1994-07-14 17:43 millert
18846 * config.h.in: added HAVE_TZSET
18848 1994-07-14 17:42 millert
18850 * check.c: cleaned up encrypted passwd grab somewhat
18852 1994-07-14 12:34 millert
18854 * configure.in: fixed AFS typo
18856 1994-07-14 12:34 millert
18858 * INSTALL: added AFS not
18860 1994-07-14 12:34 millert
18864 1994-07-14 12:33 millert
18866 * logging.c: can now log to both syslog & a file
18868 1994-07-14 12:12 millert
18870 * sudo.h: added BOTH_LOGS
18872 1994-07-14 11:34 millert
18876 1994-07-14 11:32 millert
18878 * configure.in: --with-AFS
18880 1994-07-14 11:32 millert
18882 * config.h.in: added HAVE_AFS
18884 1994-07-14 11:31 millert
18886 * check.c: added afs changes
18888 1994-07-14 11:21 millert
18890 * sudo.h: removed AFS stuff :-)
18892 1994-07-14 11:19 millert
18894 * tgetpass.c: include sys/select for AIX
18896 1994-07-14 11:17 millert
18898 * sudo.h: added AFS
18900 1994-07-14 11:16 millert
18904 1994-07-07 14:45 millert
18906 * SUPPORTED, CHANGES: updated
18908 1994-07-07 14:44 millert
18910 * logging.c: can now have MAILER undefined
18912 1994-07-07 14:37 millert
18914 * INSTALL: new sub-note about MAILER
18916 1994-07-06 23:11 millert
18918 * sudo.man: added blurb about password timeout
18920 1994-07-06 20:52 millert
18922 * configure.in: convex c2 changes
18924 1994-07-06 20:52 millert
18926 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18928 1994-07-06 20:51 millert
18930 * Makefile.in: added OSDEFS
18932 1994-07-06 20:46 millert
18934 * config.h.in: added spaces
18936 1994-07-06 20:08 millert
18938 * tgetpass.c: added a goto if fgets fails
18940 1994-07-06 20:08 millert
18942 * sudo.h: use __hpux not hpux convex c2 stuff
18944 1994-07-06 20:08 millert
18946 * sudo.c: use __hpux not hpux
18948 1994-07-06 20:08 millert
18950 * logging.c: convex c2 stuff
18952 1994-07-06 20:07 millert
18954 * config.h.in: define ansi-ish cpp os defines if non-ansi are
18955 defined for hpux & convex
18957 1994-07-06 20:07 millert
18959 * INSTALL: updated to say we support sonvex C2
18961 1994-07-06 20:05 millert
18963 * check.c: added convex c2 support
18965 1994-07-01 12:06 millert
18967 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18968 select() to timeout
18970 1994-06-29 17:04 millert
18972 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18974 1994-06-29 16:39 millert
18976 * tgetpass.c: now works + uses fgets()
18978 1994-06-28 18:25 millert
18980 * tgetpass.c: select doesn't seem to recognize a single '\n' as
18981 input waiting so we can;t use it, sigh.
18983 1994-06-26 16:38 millert
18985 * PORTING: updated tgetpass() blurb
18987 1994-06-26 16:35 millert
18989 * configure.in: added --with-getpass
18991 1994-06-26 16:35 millert
18993 * Makefile.in: added tgetpass stuff
18995 1994-06-26 15:25 millert
18997 * tgetpass.c: now uses stdio
18999 1994-06-26 15:17 millert
19003 1994-06-24 19:48 millert
19005 * PORTING: updated ,.
19007 1994-06-24 19:46 millert
19009 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
19011 1994-06-24 19:45 millert
19013 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
19015 1994-06-24 19:45 millert
19017 * check.c: added hpux C2 shit
19019 1994-06-24 19:45 millert
19021 * Makefile.in: took out tgetpass.*
19023 1994-06-24 19:45 millert
19025 * INSTALL: added C2 blurb
19027 1994-06-13 15:54 millert
19029 * configure.in: no termio(s) for ultrix since it is broken
19031 1994-06-13 15:41 millert
19033 * check.c: added a space (yeah, anal)
19035 1994-06-13 15:17 millert
19037 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
19039 1994-06-08 14:34 millert
19041 * config.h.in: took out bsd signal stuff for irix
19043 1994-06-08 14:26 millert
19045 * visudo.c: comments in #endif
19047 1994-06-08 14:09 millert
19049 * configure.in: don't define BSD signals for irix
19051 1994-06-08 12:57 millert
19053 * TODO: did some...
19055 1994-06-08 12:57 millert
19059 1994-06-08 12:56 millert
19061 * realpath.c, sudo_realpath.c: took out unneeded code by changing
19062 where a strings was terminated
19064 1994-06-07 19:21 millert
19066 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
19069 1994-06-07 17:40 millert
19071 * sudo.h: move __P to config.h
19073 1994-06-07 17:40 millert
19075 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19078 1994-06-07 17:40 millert
19080 * config.h.in: added __P
19082 1994-06-07 17:21 millert
19084 * config.h.in: added HAVE_FCHDIR
19086 1994-06-07 17:18 millert
19088 * strdup.c: now include stdio
19090 1994-06-07 14:55 millert
19092 * realpath.c, sudo_realpath.c: now works if no fchdir
19094 1994-06-07 14:55 millert
19096 * visudo.c: define SA_RESETHAND to null if not defined
19098 1994-06-07 14:54 millert
19100 * configure.in: added check & replace
19102 1994-06-06 20:05 millert
19104 * configure.in: took out -static for nextstep -- it doesn't work
19106 1994-06-06 19:59 millert
19108 * logging.c: moved #endif to where it belongs
19110 1994-06-06 19:54 millert
19112 * SUPPORTED: correction
19114 1994-06-06 19:42 millert
19116 * configure.in: now checks for strdup realpath getcwd bzero
19118 1994-06-06 19:31 millert
19120 * config.h.in: emulate bzero
19122 1994-06-06 16:57 millert
19124 * visudo.c: added posic signals
19126 1994-06-06 16:57 millert
19128 * tgetpass.c: bzero cast
19130 1994-06-06 16:57 millert
19132 * logging.c: added posix signals
19134 1994-06-06 16:56 millert
19136 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19139 1994-06-06 16:56 millert
19141 * config.h.in: added posix signal stuff
19143 1994-06-06 16:56 millert
19145 * Makefile.in: added new srcs
19147 1994-06-06 12:53 millert
19149 * visudo.c: updated useag
19151 1994-06-06 12:39 millert
19153 * tgetpass.c: now uses posix signals
19155 1994-06-05 20:17 millert
19157 * PORTING: updated sto reflect major changes
19159 1994-06-05 20:05 millert
19161 * TODO, CHANGES: updated
19163 1994-06-05 20:04 millert
19165 * tgetpass.c: uses sysconf() if available
19167 1994-06-05 20:04 millert
19169 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19171 1994-06-05 20:04 millert
19173 * realpath.c, sudo_realpath.c: for those w/o this in libc
19175 1994-06-05 20:03 millert
19177 * getcwd.c, getwd.c: Initial revision
19179 1994-06-05 20:03 millert
19181 * find_path.c: rewrote to use realpath(3) - nis now all my code
19183 1994-06-05 20:02 millert
19185 * config.h.in: added HAVE_REALPATH
19187 1994-06-05 20:02 millert
19189 * check.c: now use tgetpass
19191 1994-06-05 20:02 millert
19193 * Makefile.in: added LIBOBJS use tgetpass.c
19195 1994-06-05 18:55 millert
19197 * tgetpass.c: works now :-)
19199 1994-06-05 18:27 millert
19201 * tgetpass.c: Initial revision
19203 1994-06-05 17:17 millert
19205 * pathnames.h.in: added /dev/tty
19207 1994-06-04 17:12 millert
19209 * version.h: incremented
19211 1994-06-04 15:29 millert
19213 * sudo.c: always use getcwd
19215 1994-06-04 14:49 millert
19217 * config.h.in: added check for getwd
19219 1994-06-04 14:48 millert
19221 * configure.in: replace strdup & realpath & getcwd if missing
19223 1994-06-04 14:47 millert
19225 * pathnames.h.in: added _PATH_PWD
19227 1994-06-04 14:46 millert
19229 * aclocal.m4: added SUDO_PROG_PWD
19231 1994-06-04 14:37 millert
19233 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19235 1994-06-03 11:31 millert
19237 * configure.in: quoted quare brackets
19239 1994-06-02 17:49 millert
19241 * sudo.c: no need to strdup() a constant
19243 1994-06-02 15:45 millert
19247 1994-06-02 15:44 millert
19249 * sudo.man: added validate
19251 1994-06-02 15:42 millert
19253 * sudo.c: added -v to usage
19255 1994-06-02 15:41 millert
19257 * parse.c, sudo.c, sudo.h: added validate_only stuff
19259 1994-05-29 21:29 millert
19261 * configure.in: now finds sed
19263 1994-05-29 21:28 millert
19265 * aclocal.m4: $OSREV is now an int
19267 1994-05-29 19:13 millert
19269 * configure.in: added mtxinu to caser
19271 1994-05-29 18:37 millert
19273 * sudo.h: added EXEC macro
19275 1994-05-29 18:36 millert
19277 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19280 1994-05-29 18:36 millert
19282 * logging.c: changed mail_argv[] def now use EXEC() macro
19284 1994-05-29 18:35 millert
19286 * check.c: took out crypt() definition
19288 1994-05-29 17:23 millert
19290 * version.h: upped the version
19292 1994-05-29 15:52 millert
19294 * configure.in: always look for -lnsl
19296 1994-05-29 15:29 millert
19298 * aclocal.m4: added an echo
19300 1994-05-29 15:25 millert
19302 * sudo.h: SHORT_MESSAGE is now the default
19304 1994-05-29 15:18 millert
19306 * config.h.in: fixed typo
19308 1994-05-29 01:29 millert
19310 * configure.in: added missing AC_DEFINE(SVR4) for solaris
19312 1994-05-28 20:42 millert
19314 * sudo.man: documented the -v flag
19316 1994-05-28 20:34 millert
19318 * SUPPORTED: updated
19320 1994-05-28 20:31 millert
19322 * check.c: proto-ized crypt()
19324 1994-05-28 20:28 millert
19326 * config.h.in: added LIBSHADOW undef
19328 1994-05-28 20:18 millert
19330 * configure.in: nwo set OS to be lowercase
19332 1994-05-28 19:36 millert
19334 * configure.in: now use SUDO_OSTYPE to set $OS
19336 1994-05-28 19:36 millert
19338 * aclocal.m4: now use uname to determine os
19340 1994-05-28 16:23 millert
19342 * visudo.c: added prototypes & moved sig handler around
19344 1994-05-28 15:13 millert
19346 * sudo.h: added prototyppes
19348 1994-05-28 15:13 millert
19350 * parse.c: added comment
19352 1994-05-28 15:12 millert
19354 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19356 1994-05-28 15:11 millert
19358 * check.c, logging.c, sudo.c: added prototypes
19360 1994-05-28 15:11 millert
19362 * aixcrypt.exp: Initial revision
19364 1994-05-28 15:11 millert
19366 * Makefile.in: added aixcrypt.exp
19368 1994-05-28 13:21 millert
19370 * parse.lex, parse.yacc: moved config.h to top of includes
19372 1994-05-25 15:48 millert
19374 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19376 1994-05-24 23:08 millert
19378 * visudo.c: added -v flag and usage()
19380 1994-05-24 23:08 millert
19382 * version.h: fixed a typo
19384 1994-05-24 23:08 millert
19386 * sudo.c: cast Argv to a const for exec added -v flag
19388 1994-05-24 23:07 millert
19390 * logging.c: mail_argv is now a const
19392 1994-05-24 23:07 millert
19394 * configure.in: only set RETSIGTYPE if it is not set already
19396 1994-05-24 23:07 millert
19398 * aclocal.m4: now defines & STDC_HEADERS for Irix
19400 1994-05-24 23:07 millert
19402 * Makefile.in: added version.h
19404 1994-05-24 21:25 millert
19406 * insults.h, sudo.h: prevent multiple inclusion
19408 1994-05-24 21:20 millert
19410 * version.h: Initial revision
19412 1994-05-24 21:09 millert
19414 * parse.lex, parse.yacc: now includes config.h
19416 1994-05-24 20:54 millert
19418 * aclocal.m4: now talks about sunos 4.x
19420 1994-05-24 20:23 millert
19422 * visudo.c: calls to Exit now pass an arg
19424 1994-05-24 18:00 millert
19426 * visudo.c: signal handler now takes an int argument
19428 1994-05-24 18:00 millert
19432 1994-05-24 17:44 millert
19434 * sudo.c: ok, the getcwd() is now *really* done as the user
19436 1994-05-24 17:44 millert
19438 * configure.in: changed AIX STATIC_FLAGS
19440 1994-05-24 16:27 millert
19442 * aclocal.m4: solaris now defines SVR4
19444 1994-05-24 16:18 millert
19446 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19449 1994-05-24 16:18 millert
19451 * sudo.c: moved getcwd stuff into load_globals
19453 1994-05-24 16:18 millert
19455 * parse.c: took out externs that are in suod.h
19457 1994-05-24 16:18 millert
19459 * logging.c: moved cwd into load_globals
19461 1994-05-24 16:17 millert
19463 * find_path.c: moved cwd stuff
19465 1994-05-24 15:55 millert
19467 * Makefile.in: fixed make distclean & realclean
19469 1994-05-24 12:51 millert
19473 1994-05-24 12:51 millert
19475 * CHANGES: added solaris changes
19477 1994-05-24 12:51 millert
19479 * aclocal.m4: added solaris changes, need to rework
19481 1994-05-24 12:50 millert
19483 * configure.in: cleaned up for solaris
19485 1994-05-24 12:13 millert
19487 * logging.c: reinstall reapchild signal handler for non-bsd signals
19489 1994-05-24 12:03 millert
19491 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19494 1994-05-24 12:03 millert
19496 * sudo.c: support for HAVE_SYSCONF
19498 1994-05-24 12:02 millert
19500 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19501 minor prettying up /
19503 1994-05-23 20:26 millert
19505 * config.h.in: added HAVE_SYSCONF
19507 1994-05-16 18:57 millert
19509 * configure.in: now tells you what os you are running /.
19511 1994-05-16 18:56 millert
19513 * aclocal.m4: took out extra ','
19515 1994-05-14 17:56 millert
19517 * config.h.in: added _BSD_COMPAT
19519 1994-05-14 17:56 millert
19521 * aclocal.m4: fixed for irix5
19523 1994-05-14 17:55 millert
19527 1994-05-14 17:27 millert
19529 * sudo.c: uid seinitialized to -2
19531 1994-04-28 12:36 millert
19533 * sudo.c: now removes LIBPATH for AIX
19535 1994-03-12 20:41 millert
19537 * configure.in: now uses ufc if it finds it
19539 1994-03-12 17:42 millert
19541 * sudo.h: no longer define yyval & yylval since yacc does it
19543 1994-03-12 17:42 millert
19545 * parse.lex: now defines yylval as extenr
19547 1994-03-12 17:41 millert
19549 * configure.in: BROKEN_GETPASS is now an OPTION
19551 1994-03-12 17:41 millert
19553 * config.h.in: took out BROKEN_GETPASS
19555 1994-03-12 17:20 millert
19557 * Makefile.in: took out big comment
19559 1994-03-12 16:24 millert
19563 1994-03-12 16:20 millert
19565 * Makefile.in: took out README.beta
19567 1994-03-12 16:19 millert
19569 * SUPPORTED: Initial revision
19571 1994-03-12 16:19 millert
19573 * INSTALL: now reference SUPPORTED .,
19575 1994-03-12 16:17 millert
19577 * config.h.in: now check for convex OR __convex__
19579 1994-03-12 16:16 millert
19581 * aclocal.m4: now check for convex or __convex__
19583 1994-03-12 16:15 millert
19585 * Makefile.in: added dist target
19587 1994-03-12 15:19 millert
19589 * aclocal.m4: use __convex__
19591 1994-03-12 14:33 millert
19593 * find_path.c: now use _S_* stat stuff to be ansi-like
19595 1994-03-12 14:11 millert
19597 * INSTALL: updated for configure directions
19599 1994-03-12 14:05 millert
19601 * Makefile.in: distclean now removes config.h and pathnames.h
19603 1994-03-12 14:03 millert
19607 1994-03-12 14:00 millert
19609 * TODO: fixed typoe
19611 1994-03-12 13:57 millert
19613 * Makefile.in, visudo.c: updated version
19615 1994-03-12 13:57 millert
19617 * config.h.in, pathnames.h.in: added copyright header
19619 1994-03-12 13:55 millert
19621 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19622 parse.yacc, sudo.c, sudo.h: udpated version
19624 1994-03-12 13:39 millert
19626 * visudo.c: udpated to use configure + pathnames.h
19628 1994-03-12 13:37 millert
19630 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19632 1994-03-12 13:37 millert
19634 * sudo.h: now works with configure
19636 1994-03-12 13:36 millert
19638 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19639 updated to work with configure + pathnames.h
19641 1994-03-12 10:40 millert
19643 * Makefile.in: added LEXLIB
19645 1994-03-10 03:18 millert
19647 * COPYING: updated gnu general licence to versio 2
19649 1994-03-10 02:44 millert
19651 * pathnames.h.in, config.h.in: Initial revision
19653 1994-03-10 01:43 millert
19655 * sudo.h: changed to work with configure
19657 1994-03-09 18:51 millert
19659 * Makefile.in, aclocal.m4, configure.in: Initial revision
19661 1994-03-09 17:36 millert
19663 * visudo.c: now uses defines used by configure
19665 1994-03-01 16:31 millert
19667 * find_path.c: sudo won't bitch about EPERM now, for real
19669 1994-02-28 00:36 millert
19671 * logging.c: renamed exec_argv to eliminate a libc name clash with
19674 1994-02-28 00:28 millert
19676 * CHANGES: corrected
19678 1994-02-28 00:27 millert
19680 * logging.c, sudo.c, sudo.h: execve -> execv
19682 1994-02-27 23:27 millert
19686 1994-02-27 23:19 millert
19688 * PORTING: added 2 mroe items
19690 1994-02-27 23:12 millert
19694 1994-02-27 23:11 millert
19696 * sudo.h: added UMASK and mode_t declaration
19698 1994-02-27 23:11 millert
19700 * sudo.c: added UMASK
19702 1994-02-27 20:55 millert
19704 * logging.c: now opens log file with mode 077
19706 1994-02-27 20:55 millert
19708 * check.c: saved current umask ans restores it
19710 1994-02-27 20:36 millert
19712 * sudo.h: added MAXLOGFILELEN
19714 1994-02-27 20:35 millert
19716 * logging.c: split long log lines. FOr syslog, split into multiple
19717 entries, for a log file, indent the extra for readability
19719 1994-02-27 17:22 millert
19721 * CHANGES: added changes
19723 1994-02-27 17:18 millert
19725 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19728 1994-02-25 16:04 millert
19730 * TODO: added input from Brett M Hogden <hogden@rge.com>
19732 1994-02-16 13:35 millert
19734 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19735 execvp() OR execve() becuase of this.
19737 1994-02-16 13:35 millert
19739 * logging.c: now uses execvp() OR execve()
19741 1994-02-16 13:31 millert
19743 * sudo.h: added USE_EXECVE
19745 1994-02-16 13:27 millert
19747 * sudo.h: added environ
19749 1994-02-16 12:53 millert
19751 * find_path.c: now ignore EPERM
19753 1994-02-15 23:52 millert
19755 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19758 1994-02-15 23:52 millert
19762 1994-02-15 23:40 millert
19764 * sudo.h: took out Envp
19766 1994-02-14 12:28 millert
19768 * BUGS: Initial revision
19770 1994-02-10 14:29 millert
19772 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19774 1994-02-10 14:05 millert
19776 * sudo.h: added SECURE_PATH
19778 1994-02-10 13:50 millert
19780 * INSTALL: added sample.sudoers note
19782 1994-02-10 13:47 millert
19784 * sudoers: Initial revision
19786 1994-02-09 14:54 millert
19788 * find_path.c: fixed typo
19790 1994-02-08 23:06 millert
19792 * PORTING: took out SAVED_UID garbage
19794 1994-02-08 22:55 millert
19796 * INSTALL: mentioned HAL
19798 1994-02-08 22:50 millert
19800 * sudo.h: added HAL line
19802 1994-02-08 22:48 millert
19804 * insults.h: added HAL insults
19806 1994-02-08 22:48 millert
19810 1994-02-08 22:02 millert
19812 * logging.c: more verbose error if mailer not found
19814 1994-02-08 22:02 millert
19816 * check.c: now do getpwent as root for soem shadow password systems
19819 1994-02-08 13:22 millert
19821 * sudo.h: took out SAVED_UID garbade
19823 1994-02-08 13:21 millert
19825 * sudo.c: took out SAVED_UID garbage since it don't work
19827 1994-02-06 17:43 millert
19831 1994-02-06 17:40 millert
19833 * insults.h: added a missing space :-)
19835 1994-02-05 19:48 millert
19837 * sudo.c, sudo.h: took out multimax cruft
19839 1994-02-05 19:30 millert
19841 * INSTALL: minor update
19843 1994-02-05 19:30 millert
19845 * PORTING: finished
19847 1994-02-05 19:19 millert
19849 * sudo.c: fixed a typo + indentation
19851 1994-02-05 18:43 millert
19853 * sudo.h: took outumoved some defines to the config file ,. ,.
19855 1994-02-05 15:17 millert
19857 * PORTING: Initial revision
19859 1994-02-05 15:17 millert
19863 1994-02-05 15:16 millert
19865 * sudo.h: added HAS_SAVED_UID
19867 1994-02-05 15:16 millert
19869 * sudo.c: put back AIX cruft
19871 1994-02-03 00:44 millert
19873 * sudo.c: aix changes
19875 1994-02-02 01:31 millert
19879 1994-02-02 01:30 millert
19881 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19884 1994-02-01 22:21 millert
19886 * check.c: added missing %s\n
19888 1994-01-31 02:06 millert
19890 * install-sh: Initial revision
19892 1994-01-31 01:58 millert
19894 * CHANGES, TODO: updated
19896 1994-01-31 01:56 millert
19898 * sudo.c: now removed _RLD_* for alphas
19900 1994-01-31 01:50 millert
19902 * INSTALL: updated for new config scheme
19904 1994-01-30 19:42 millert
19906 * find_path.c: more verbose eror messages
19908 1994-01-27 14:08 millert
19910 * TODO: now have solaris
19912 1994-01-27 14:07 millert
19914 * sudo.h: define __svr4__ for SOLARIS
19916 1994-01-27 14:07 millert
19918 * check.c: added svr4 junk for shadow pws for solaris 2.x
19920 1994-01-27 13:19 millert
19922 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19923 Its not needed since we start out setuid with the correct perms.
19925 1994-01-26 19:51 millert
19927 * check.c, sudo.c, sudo.h: now use setreuid()
19929 1994-01-26 18:58 millert
19931 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19934 1994-01-26 18:52 millert
19936 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19938 1994-01-26 18:52 millert
19940 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19943 1993-12-07 01:33 millert
19945 * README: minor update + spell fix
19947 1993-12-07 01:33 millert
19949 * INSTALL: rewrote most of this
19951 1993-12-07 01:13 millert
19953 * sudo.h: added all options that are in the Makefile
19955 1993-12-07 00:23 millert
19957 * getpass.c: now use USE_TERMIO #define for sgi & hpux
19959 1993-12-06 23:19 millert
19961 * TODO: todo: posix sigs
19963 1993-12-06 01:12 millert
19965 * check.c, find_path.c: always include strings.h
19967 1993-12-05 20:34 millert
19969 * visudo.c: added STATICEDITOR
19971 1993-12-05 20:30 millert
19973 * sudo.h: sgi has vi in /usr/bin too
19975 1993-12-05 20:23 millert
19977 * sudo.man: added VISUAL
19979 1993-12-02 22:20 millert
19981 * sudo.h: sue /usr/bin/vi on some systems
19983 1993-12-02 22:19 millert
19985 * sudo.c: fixed warning (include strings.h)
19987 1993-12-02 22:06 millert
19989 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19992 1993-12-02 21:38 millert
19994 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19996 1993-12-02 21:35 millert
19998 * visudo.c: added EDITOR envar
20000 1993-12-02 21:34 millert
20002 * check.c, find_path.c, parse.c, sudo.c: added patches from
20003 John_Rouillard directory spec uses EDITOR
20005 1993-12-01 19:32 millert
20007 * getpass.c: added flush for hpux
20009 1993-11-30 13:37 millert
20011 * sudo.c: no longer assume malloc returns a char *
20013 1993-11-29 20:35 millert
20015 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
20016 stuff -- now gets removed correctly
20018 1993-11-29 19:31 millert
20020 * sudo.h: added STD_HEADERS macro
20022 1993-11-29 19:14 millert
20024 * sudo.c: now uses STD_HEADERS macor for ansi
20026 1993-11-29 19:14 millert
20028 * find_path.c: now uses STD_HEADERS macro
20030 1993-11-29 19:13 millert
20032 * check.c: niceties for C compiler bitches -- no real change
20034 1993-11-29 13:04 millert
20036 * visudo.c: now doesn't fclose a file never opened.
20038 1993-11-28 16:35 millert
20040 * sudo.man: added visudo line
20042 1993-11-28 16:31 millert
20044 * sudo.man: added error stuff added me in there...
20046 1993-11-28 03:12 millert
20048 * CHANGES: noted insults
20050 1993-11-28 03:01 millert
20052 * INSTALL: added blurb about reading stuff
20054 1993-11-28 03:00 millert
20056 * sudo.h: added insults
20058 1993-11-28 03:00 millert
20060 * insults.h: corrected somments and removed newlines
20062 1993-11-28 03:00 millert
20064 * check.c: now uses insults
20066 1993-11-28 02:45 millert
20068 * insults.h: Initial revision
20070 1993-11-27 19:46 millert
20072 * INSTALL: added dec syslog note
20074 1993-11-27 19:25 millert
20076 * sample.sudoers: added real stuff in there
20078 1993-11-27 19:24 millert
20080 * TODO: added a todo
20082 1993-11-27 19:10 millert
20086 1993-11-27 18:59 millert
20088 * sample.sudoers: Initial revision
20090 1993-11-27 18:59 millert
20092 * sudo.man: updated with changes
20094 1993-11-27 18:52 millert
20096 * sudo.man: Initial revision
20098 1993-11-27 18:48 millert
20100 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20103 1993-11-27 18:46 millert
20105 * visudo.c: updated version number and took out jeff's old addr
20106 since it is no good
20108 1993-11-27 18:42 millert
20110 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20111 parse.yacc, sudo.c: updated version number and took out jeff's
20112 email (since it is invalid)
20114 1993-10-28 09:36 millert
20116 * check.c: added fflush()
20118 1993-10-22 20:46 millert
20120 * find_path.c: now return NULL instead pf
\b\bof exiting for
20121 nopn
\b\bn-fatal errors
20123 1993-10-21 16:57 millert
20125 * check.c: new banner
20127 1993-10-21 16:42 millert
20129 * parse.lex: now sudo.h gets included first
20131 1993-10-17 20:31 millert
20133 * parse.lex: now can use flex
20135 1993-10-17 20:31 millert
20137 * sudo.h: linux patch
20139 1993-10-17 20:30 millert
20141 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20143 1993-10-17 20:30 millert
20145 * check.c: linux diff
20147 1993-10-15 16:03 millert
20149 * find_path.c: stat now ignores EINVAL
20151 1993-10-05 21:48 millert
20153 * find_path.c, sudo.c: now declare strdup as extern
20155 1993-10-04 15:23 millert
20157 * visudo.c: reformatted with indent + by hand
20159 1993-10-04 15:10 millert
20161 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20162 sudo.h: used indent to "fix" coding style
20164 1993-10-03 20:12 millert
20166 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20167 LAST should maybe move the code that does this into the loop
20168 body. makes it messier tho. hmmm.
20170 1993-09-08 11:53 millert
20172 * find_path.c: redid the fix for non-executable files in an easier
20173 to read way plus some minor aethetic changes
20175 1993-09-08 11:39 millert
20177 * find_path.c: fixed bug with non-executable tings of same name in
20178 path introduced by checkig errno after stat(2).
20180 1993-09-05 10:02 millert
20182 * sudo.c: fixed off by one error
20184 1993-09-05 09:55 millert
20186 * find_path.c: now handles decending below '/' correctly
20188 1993-09-05 08:35 millert
20190 * sudo.c: now actually builds Envp instead of munging envp
20192 1993-09-04 15:42 millert
20194 * parse.yacc: now includes sys/param.h
20196 1993-09-04 15:41 millert
20198 * visudo.c: now includes sys/param.h
20200 1993-09-04 15:30 millert
20202 * sudo.h: fixed ifndef -> ifdef
20204 1993-09-04 15:19 millert
20206 * qualify.c: make more like find_path.c
20208 1993-09-04 15:18 millert
20210 * find_path.c: rewritten by millert
20212 1993-09-04 15:17 millert
20214 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20215 added info about new defines in the comment
20217 1993-09-04 15:15 millert
20219 * logging.c: now uses USE_CWD
20221 1993-09-04 14:10 millert
20223 * sudo.h: added delc for clean_envp() and Envp
20225 1993-09-04 14:09 millert
20227 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20230 1993-09-04 14:09 millert
20232 * logging.c: now uses execve()
20234 1993-09-04 14:08 millert
20236 * find_path.c: ENOTDIR is ok now too (in case part of the path is
20239 1993-09-04 08:17 millert
20241 * qualify.c: now works correctly (ttaltotal rewrite)
20243 1993-09-04 07:59 millert
20245 * parse.lex: now includes sys/param.h didn't match trailing / --
20246 fix from rouilj@cs.umb.edu
20248 1993-06-11 18:04 millert
20250 * sudo.c: moved around the #ifndef _AIX
20252 1993-06-11 18:03 millert
20254 * check.c, logging.c, parse.c: Initial revision
20256 1993-03-20 07:57 millert
20258 * qualify.c: Initial revision
20260 1993-03-13 15:09 millert
20262 * find_path.c: now works if you do sudo bin/test
20264 1993-03-13 14:20 millert
20266 * find_path.c: works
20268 1993-03-02 18:28 millert
20270 * sudo.h: Initial revision
20272 1993-03-02 11:35 millert
20274 * visudo.c: Initial revision
20276 1993-03-02 11:32 millert
20278 * parse.lex, parse.yacc: Initial revision
20280 1993-02-16 13:24 millert
20282 * sudo.c: took out errno.h
20284 1993-02-16 13:22 millert
20286 * sudo.c: now spews error if exec fails and exits with -1
20288 1993-02-16 12:07 millert
20290 * sudo.c: Initial revision
20292 1993-02-15 22:27 millert
20294 * find_path.c: now only execs files with (an) executable bit set.
20296 1993-02-15 22:01 millert
20298 * find_path.c: Initial revision
20300 1993-02-15 14:32 millert
20302 * getpass.c: added nice comment
20304 1993-02-15 14:19 millert
20306 * getpass.c: now works on sgi's
20308 1993-02-15 13:57 millert
20310 * getpass.c: Initial revision