1 2010-06-02 Todd C. Miller <Todd.Miller@courtesan.com>
3 * auth/pam.c: Fix OpenPAM detection for newer versions.
5 * vasgroups.c: Sync with Quest sudo git repo
7 * aclocal.m4, configure, configure.in: Adapted from Quest sudo.
8 HP-UX ld uses +b instead of -R or -rpath.
9 Fix typo in libvas check.
10 libvas may need libdl for dlopen().
11 Add missing template for ENV_DEBUG.
14 Fix typos; from Quest Sudo
16 * Makefile.in, configure.in:
17 Use value of SHELL from configure in Makefile
19 2010-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
21 * env.c: Handle duplicate variables in the environment.
22 For unsetenv(), keep looking even after remove the first instance.
23 For sudo_putenv(), check for and remove dupes after we replace an
26 2010-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
28 * visudo.c: Fix a crash when checking a sudoers file that has aliases
29 that reference themselves. Based on a diff from David Wood.
31 2010-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
33 * alias.c: Fix use after free in error message when a duplicate
36 2010-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
38 * visudo.c: Set errorfile to the sudoers path if we set parse_error
39 manually. This prevents a NULL dereference in printf() when
40 checking a sudoers file in strict mode when alias errors are present.
42 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
44 * configure, configure.in: Fix installation of sudoers.ldap
45 in "make install" when --with-ldap was specified without a
46 directory. From Prof. Dr. Andreas Mueller
48 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
50 * find_path.c: Qualify the command even if it is in the
51 current working directory, e.g. "./foo" instead of just
52 returning "foo". This removes an ambiguity between real
53 commands and possible pseudo-commands in command matching.
55 2010-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
57 * sudoers.cat, sudoers.man.in, sudoers.pod: Add a note about
58 the security implications of the fast_glob option.
60 * memrchr.c: Remove duplicate includes
62 2010-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
64 * sudo.c: Fix a bug introduced with def_closefrom. The value
65 of def_closefrom already includes the +1.
67 2010-03-09 Todd C. Miller <Todd.Miller@courtesan.com>
69 * match.c: When doing a glob match, short circuit if
70 gl.gl_pathc is 0. From Mark Kettenis.
72 2010-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
74 * match.c: Check for pseudo-command by looking at the first
75 character of the command in sudoers instead of checking the
76 user-supplied command for a slash.
78 2010-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
80 * toke.l: Fix size arg when realloc()ing include stack.
83 * toke.l: Avoid a duplicate fclose() of the sudoers file.
85 2010-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
87 * aix.c, config.h.in, configure, configure.in: Use setrlimit64(),
88 if available, instead of setrlimit() when setting AIX resource
89 limits since rlim_t is 32bits.
91 * logging.c: Fix use after free when sending error messages.
92 From Timo Juhani Lindfors
94 2009-12-17 15:02 millert
96 * parse.c: Fix printing of entries with multiple host entries on
99 2009-12-09 16:05 millert
101 * logging.c: fix typo in last commit
103 2009-12-08 22:19 millert
105 * logging.c: Convert fmt_first and fmt_confd into macros.
107 2009-11-23 10:56 millert
109 * match.c: cmnd_matches() already deals with negation so
110 _cmndlist_matches() does not need to do so itself. Fixes a bug
111 with negated entries in a Cmnd_List.
113 2009-11-22 11:12 millert
115 * sudo.c: Don't exit() from open_sudoers, just return NULL for all
118 2009-11-22 09:54 millert
120 * toke.c, toke.l: Add missing extern def for parse_error
122 2009-11-20 19:11 millert
124 * toke.c, toke.l: Avoid a parse error when #includedir doesn't find
125 any files. Closes bug #375
127 2009-11-20 19:03 millert
129 * Makefile.in: Include sudo.man.pl and sudoers.man.pl in the
130 distribution tarball.
132 2009-11-04 09:42 millert
134 * configure, configure.in: Fix a few typos in the descriptions;
135 from Jeff Makey Only do the check for
136 krb5_get_init_creds_opt_free() taking two arguments if we find
137 krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
138 positive when using our own krb5_get_init_creds_opt_free which
139 takes only a single argument.
141 2009-11-03 09:58 millert
143 * configure, configure.in: Remove a spurious comma in the kerb5
146 2009-11-03 09:51 millert
148 * auth/kerb5.c: Call krb5_get_init_creds_opt_init() in our emulated
149 krb5_get_init_creds_opt_alloc() for MIT kerberos.
151 2009-09-30 09:50 millert
153 * sudo_edit.c: Always update the stashed mtime of the temp file
154 instead of using what we have for the original because the time
155 resolution of the filesystem the temporary is on may not match
156 that of the filesystem that holds the original. Should fix bz
157 #371 found by Philippe Levan.
159 2009-09-24 21:11 millert
161 * configure, configure.in, sudoers.man.pl, sudoers.pod: Substitute
162 in default value for secure_path
164 2009-09-24 20:31 millert
166 * sudo.pod: Mention that the password must be followed by a newline
169 2009-08-07 10:21 millert
171 * auth/pam.c: Set PAM_RUSER and PAM_RHOST early so they can be used
172 during authentication. Based on a patch from Jamie Beverly.
174 2009-08-07 09:25 millert
176 * match.c: Close dir before returning if strlcpy() reports
177 overflow. From Martynas Venckus.
179 2009-07-18 09:55 millert
181 * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
184 2009-07-12 17:17 millert
186 * mkdefaults: If no arg assume def_data.in
188 2009-07-11 21:27 millert
190 * README, WHATSNEW: Update for 1.7.2
192 2009-07-11 21:12 millert
196 2009-06-30 08:41 millert
198 * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
199 quotes around a colon in Runas_Spec definition. From Elias
202 2009-06-29 09:36 millert
204 * redblack.c: In rbrepair, re-color the root or the first non-block
205 node we find to be black. Re-coloring the root is probably not
206 needed but won't hurt.
208 2009-06-29 09:35 millert
210 * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
212 2009-06-26 16:40 millert
214 * redblack.c: When repairing the tree, don't touch the root node.
216 2009-06-25 08:44 millert
218 * set_perms.c: Protect call to setegid in runas_setup with #ifdef
219 HAVE_SETEUID. Reported by Josef Schmid.
221 2009-06-23 14:29 millert
223 * sudoers.pod: Document that we accept env_pam-style environment
226 2009-06-23 14:24 millert
228 * env.c: Adapt to accept pam_env-style /etc/environment which
229 allows shell-style lines such as: export EDITOR="/usr/bin/vi"
231 2009-06-23 12:22 millert
233 * sudoers.pod: Make it clear that env_delete only works when
234 !env_reset. From Loïc Minier
236 2009-06-15 17:19 millert
238 * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
241 2009-06-15 17:18 millert
243 * Makefile.in: build the .cat page in the current working dir, not
246 2009-06-15 09:10 millert
248 * env.c: Return EINVAL in setenv() if var is NULL or the empty
249 string to match glibc behavior.
251 2009-06-13 16:52 millert
253 * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
256 2009-06-11 16:29 millert
258 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
259 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
262 2009-06-09 10:08 millert
264 * INSTALL: Document --with-libvas and --with-libvas-rpath
266 2009-05-29 09:43 millert
268 * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
269 and key paths may be a directory or a file. However, version 5.0
270 of the SDK only seems to support using a directory. If
271 ldapssl_clientauth_init fails and the cert or key paths look like
272 they could be files, strip off the last path element and try
275 2009-05-29 09:40 millert
277 * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
280 2009-05-26 20:49 millert
282 * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
283 non-Unix group support from Quest, as reworked by me.
285 2009-05-26 20:47 millert
289 2009-05-26 20:46 millert
291 * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
294 2009-05-25 08:02 millert
296 * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
297 fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
298 logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
299 pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
300 sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
301 testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
302 auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
305 2009-05-24 08:33 millert
307 * interfaces.c, lbuf.c: Minor fixes for Minix-3
309 2009-05-22 06:37 millert
311 * set_perms.c: Handle getgroups() returning 0. Also add missing
312 check for HAVE_GETGROUPS.
314 2009-05-19 17:24 millert
316 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
317 version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
318 via AC_INIT in configure.
320 2009-05-18 06:33 millert
322 * set_perms.c: Remove group setting code in setusercontext case, we
323 will do it ourselves later on in runas_setup. Set the gid after
324 initgroups/setgroups is called, since on Mac OS X it seems to
327 2009-05-17 18:19 millert
329 * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
330 vasgroups.c: Initial bits of non-unix group support using Quest
331 Authentication Services
333 2009-05-17 16:52 millert
335 * toke.c, toke.l: Accept %:foo as a non-Unix group
337 2009-05-17 16:22 millert
339 * toke.c, toke.l: Allow user/group to be double quoted in the case
340 of non-Unix groups which contain spaces.
342 2009-05-11 12:47 millert
344 * match.c: Don't allow the user to specify the default runas user
345 if their sudoers entry only allows them to run as a group.
347 2009-05-10 07:59 millert
349 * sudo.c: Must call audit_success before we change uids.
351 2009-05-10 07:52 millert
353 * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
354 set_perm to not exit on failure and use this in the logging
357 2009-05-10 07:33 millert
359 * parse.c: In -l mode, if the user is only allowed to run as a
360 group, display the user's name, not root's before the allowed
363 2009-05-09 21:00 millert
365 * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
366 effect of setting the runas user to root unilaterally.
368 2009-05-08 16:19 millert
370 * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
373 2009-05-08 13:07 millert
375 * pwutil.c: Only cache by the method we fetched for pwd and grp
376 lookups. Previously we cached both by namd and id but this can
377 cause problems for entries that share the same id. Also add more
378 info in the error message in case the insert fails (which should
381 2009-04-30 15:04 millert
383 * sudoers.pod: Add a clarification from Nick Sieger
385 2009-04-25 12:49 millert
387 * env.c: Inline the setting of the environment string.
389 2009-04-24 14:53 millert
391 * env.c: setenv(3) in Linux treats a NUL value as the empty string
392 setenv(3) in BSD doesn't return an error if the name has '=' in
393 it, it just treats the '=' as end of string.
395 2009-04-22 16:32 millert
397 * toke.c, toke.l: Not all systems have d_namlen
399 2009-04-20 13:53 millert
401 * sudoers.pod: Fix up some pod2html issues.
403 2009-04-19 14:09 millert
405 * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
406 from a diff from Quest Software.
408 2009-04-19 09:01 millert
410 * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
413 2009-04-19 08:56 millert
415 * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
418 2009-04-18 19:37 millert
420 * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
421 #includedir, ignore any file containing a dot
423 2009-04-18 19:25 millert
425 * Makefile.in, version.h: Bump version
427 2009-04-18 19:25 millert
429 * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
430 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
431 visudo.c: Implement #includedir directive. Files in an
432 includedir are not edited by visudo unless they contain a syntax
435 2009-04-18 12:06 millert
439 2009-04-18 10:27 millert
441 * WHATSNEW: Forgot umask_override
443 2009-04-18 09:25 millert
445 * ChangeLog, TODO: sync
447 2009-04-16 08:22 millert
449 * visudo.c: Rewind stream if we fdopen sudoers since it may not be
450 at the beginning. Set the keepopen flag on already-open files
451 too so the lexer doesn't close them out from under us.
453 2009-04-16 08:18 millert
455 * visudo.c: Print the proper file name when there is a parse error
458 2009-04-11 07:45 millert
462 2009-04-10 16:59 millert
464 * configure, configure.in: Fix a warning when --without-ldap is
467 2009-04-05 12:25 millert
469 * alias.c, parse.h, visudo.c: Store aliases that we remove during
470 check_aliases in a freelist and free them at the end so we don't
473 2009-03-28 09:30 millert
475 * visudo.c: Check aliases in -c mode too.
477 2009-03-28 09:09 millert
479 * alias.c, parse.h, visudo.c: Make alias_remove return the alias
480 struct instead of freeing it directly. Fixes a use after free in
481 alias_remove_recursive, the only consumer.
483 2009-03-28 09:07 millert
485 * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
486 -> alias_find for consistency.
488 2009-03-27 19:29 millert
490 * visudo.c: When checking for unused aliases, recurse if the alias
491 points to another alias.
493 2009-03-16 12:11 millert
495 * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
496 support will be done later after some refactoring.
498 2009-03-14 12:02 millert
500 * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
502 2009-03-13 21:04 millert
504 * configure, configure.in: Only check for
505 ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
506 compilation with ldapux.
508 2009-03-11 20:03 millert
510 * fileops.c: fix char subscript
512 2009-03-11 19:19 millert
514 * Makefile.in: remove errant carriage returns
516 2009-03-11 19:01 millert
518 * audit.c, env.c: fix K&R compilation
520 2009-03-11 12:12 millert
522 * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
523 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
526 2009-03-10 17:34 millert
528 * config.h.in: Add missing HAVE_BSM_AUDIT
530 2009-03-10 17:21 millert
532 * WHATSNEW: Add 1.7.1 features
534 2009-03-10 17:10 millert
536 * INSTALL: Mention --with-netsvc
538 2009-03-10 17:08 millert
540 * sudoers.ldap.pod: Document netsvc.conf support
542 2009-03-10 16:44 millert
544 * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
545 sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
547 2009-03-08 16:57 millert
549 * configure, config.h.in, configure.in, env.c: Add
550 --enable-env-debug flag to enable environment sanity checks.
552 2009-03-08 11:51 millert
554 * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
556 2009-03-07 17:10 millert
558 * env.c: Only sync environ for putenv, setenv, and unsetenv. We
559 need to make sure that sudo_putenv and sudo_setenv only modify
560 env.envp, not environ.
562 2009-03-02 14:19 millert
564 * env.c: Really fix UNSETENV_VOID
566 2009-03-02 14:18 millert
568 * env.c: Fix unsetenv when UNSETENV_VOID
570 2009-03-02 08:00 millert
572 * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
574 2009-03-02 07:36 millert
576 * ldap.c: tivoli-based ldap does not have ldapssl_err2string
578 2009-03-02 07:30 millert
582 2009-03-01 16:20 millert
584 * config.h.in, configure, configure.in, ldap.c: Add support for
585 Tivoli-based LDAP start TLS as seen in AIX. Untested.
587 2009-03-01 08:52 millert
589 * env.c: Add sanity checks for setenv/unsetenv
591 2009-02-28 20:17 millert
593 * Makefile.in: Include bsm_audit.h in the tarball
595 2009-02-28 20:00 millert
597 * Makefile.in, version.h: bump version for sudo 1.7.1
599 2009-02-28 19:58 millert
601 * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
602 sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
603 calls to setenv/unsetenv and provide our own
604 setenv/unsetenv/putenv that operates on own env pointer. Make
605 sync_env() inline in setenv/unsetenv/putenv functions.
607 2009-02-25 07:33 millert
609 * sudo.c: Make "sudoedit -h" work as expected
611 2009-02-25 07:21 millert
613 * auth/pam.c: Make sure def_prompt is always defined. This is a
614 workaround for pam configs that prompt for a password in the
615 session but don't have an auth line. A better fix is to expand
616 the sudo prompt earlier and set def_prompt to that when
619 2009-02-25 06:17 millert
621 * sudo.pod: Mention that the helper for -A may be graphical.
623 2009-02-25 06:16 millert
625 * TROUBLESHOOTING: Document what happens if there is no tty.
627 2009-02-25 06:05 millert
629 * sudo.c: cosmetic changes
631 2009-02-25 05:47 millert
633 * term.c: Fix term_restore
635 2009-02-24 20:23 millert
637 * sudo.c: Fix "sudo -k" with no other args
639 2009-02-24 08:04 millert
641 * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
642 be specified in conjunction with a command or another option that
643 may require authentication.
645 2009-02-23 09:18 millert
647 * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
648 from Diego E. 'Flameeyes'
650 2009-02-23 09:15 millert
652 * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
654 2009-02-21 17:03 millert
656 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
657 Implement umask_override
659 2009-02-21 16:51 millert
663 2009-02-21 16:49 millert
665 * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
668 2009-02-21 08:43 millert
670 * audit.c: Need to include compat.h
672 2009-02-21 08:37 millert
674 * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
675 sudo.c: Make audit_success and audit_failure generic functions in
676 preparation for integrating linux audit support.
678 2009-02-21 08:06 millert
680 * term.c: remove duplicate include
682 2009-02-20 16:13 millert
684 * bsm_audit.c: Add missing include
686 2009-02-20 15:55 millert
688 * sudo.c: May need to update the runas user after parsing
689 command-based defaults.
691 2009-02-18 10:53 millert
693 * glob.c: Add missing pair of braces introduced with character
696 2009-02-15 15:53 millert
698 * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
699 Rename pwstars to pwfeedback
701 2009-02-10 20:25 millert
703 * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
705 2009-02-10 20:18 millert
707 * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
708 sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
711 2009-02-10 19:58 millert
713 * term.c: This is new code, no DARPA notice.
715 2009-02-10 14:04 millert
717 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
718 simple_glob -> fast_glob
720 2009-02-10 09:39 millert
722 * match.c: g/c unused var
724 2009-02-10 08:09 millert
726 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
727 simple_glob option to use fnmatch() instead of glob(). This is
728 useful when you need to specify patterns that reference network
731 2009-02-10 07:58 millert
733 * tgetpass.c: add term_* proto
735 2009-02-10 07:51 millert
737 * sudoers.pod: mention glob()
739 2009-02-09 07:59 millert
741 * tgetpass.c: Delete any pwstars we wrote after the user hits
742 return. That way there is no record on screen as to the user's
745 2009-02-08 10:27 millert
747 * term.c: Move terminal setting bits from tgetpass.c to term.c
749 2009-02-07 19:50 millert
751 * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
752 tgetpass.c: Add pwstars sudoers option that causes sudo to print
753 a star every time the user presses a key.
755 2009-02-03 10:10 millert
757 * Makefile.in: Fix up F<> brokenness for visudo.man.in and
760 2009-01-27 11:54 millert
762 * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
763 not -1, to indicate no limit. From Mark Janssen.
765 2009-01-17 17:36 millert
767 * toke.c, toke.l: Comments that begin with #- should not be parsed
770 2009-01-08 19:13 millert
772 * sudo.c: Do not try to set the close on exec flag if we didn't
773 actually open sudoers.
775 2008-12-19 12:40 millert
779 2008-12-14 17:40 millert
783 2008-12-09 18:48 millert
785 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
786 enters ^C at the password prompt.
788 2008-12-09 16:13 millert
790 * configure.in, configure: Don't try to build sudo_noexec.so on
791 HP-UX with the bundled compiler as it cannot generate shared
794 2008-12-09 15:55 millert
796 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
799 2008-12-09 08:49 millert
801 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
802 it clear that we are not short-circuiting on last match. When
803 pwcheck is 'all', initialize nopass to TRUE and override it with
804 the first non-TRUE entry.
806 2008-12-08 10:02 millert
808 * parse.c: Do not short circuit pseudo commands when we get a match
809 since, depending on the settings, we may need to examine all
812 2008-12-03 15:58 millert
814 * sudoers.cat, sudoers.man.in: regen
816 2008-12-03 15:57 millert
818 * sudoers.pod: hostnames may also contain wildcards
820 2008-12-03 15:40 millert
822 * Makefile.in: remove stamp-* files and linux core files in clean
825 2008-12-02 12:30 millert
827 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
828 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
830 2008-11-26 15:10 millert
832 * configure, configure.in: correctly enable SIA on Digital UNIX
834 2008-11-25 20:06 millert
838 2008-11-25 20:05 millert
842 2008-11-25 12:01 millert
844 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
845 ttys we may still have /dev/tty available to us.
847 2008-11-24 10:09 millert
849 * sudoers.cat, sudoers.man.in: regen
851 2008-11-24 10:08 millert
853 * sudoers.pod: fix typos; Markus Lude
855 2008-11-24 07:08 millert
859 2008-11-23 19:42 millert
863 2008-11-23 19:41 millert
865 * toke.l: Fix matching of a line that only consists of a comment
868 2008-11-22 13:17 millert
870 * auth/pam.c: MacOS pam will retry conversation function if it
871 fails so just treat ^C as an empty password.
873 2008-11-22 10:12 millert
875 * visudo.c: When checking for alias use, also check defaults
878 2008-11-22 10:01 millert
880 * redblack.c: unused var
882 2008-11-22 09:42 millert
884 * redblack.c: Replace my rbdelete with Emin's version (which
887 2008-11-19 12:01 millert
889 * testsudoers.c: malloc debugging
891 2008-11-19 07:37 millert
893 * visudo.c: malloc options in devel mode for visudo too
895 2008-11-18 10:57 millert
897 * sudo.c: fix compilation on non-C99; from Theo
899 2008-11-18 10:50 millert
901 * visudo.c: fix check_aliases
903 2008-11-18 08:29 millert
905 * alias.c: when destroying an alias, free the correct data pointer
907 2008-11-18 07:54 millert
909 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
911 2008-11-15 13:34 millert
913 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
916 2008-11-15 13:34 millert
918 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
919 'option' for command line options (not flag)
921 2008-11-14 06:18 millert
923 * INSTALL: Add note on configuring HP-UX pam
925 2008-11-11 13:28 millert
927 * check.c, sudo.c: Move tty checks into check_user() so we only do
928 them if we actually need a password.
930 2008-11-11 12:34 millert
932 * sudo.c: Don't error out if no tty or askpass unless we actually
933 need to authenticate.
935 2008-11-10 15:20 millert
939 2008-11-10 08:07 millert
941 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
944 2008-11-09 15:18 millert
946 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
948 2008-11-09 09:15 millert
950 * gram.c, toke.c: regen
952 2008-11-09 09:13 millert
954 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
955 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
956 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
957 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
958 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
959 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
960 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
961 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
962 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
963 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
964 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
967 2008-11-09 08:48 millert
969 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
971 2008-11-08 10:40 millert
973 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
974 far past the end, resulting in a NUL being written immediately
975 after the buffer end.
977 2008-11-08 10:31 millert
979 * UPGRADE, WHATSNEW: add sections on tgetpass changes
981 2008-11-08 10:30 millert
983 * tgetpass.c: Treat EOF w/o newline as an error.
985 2008-11-07 17:42 millert
987 * parse.c: Fix "sudo -v" when NOPASSWD is set.
989 2008-11-07 12:45 millert
991 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
992 longer treat an empty password at the prompt as special. To quit
993 out of sudo you now need to hit ^C at the password prompt.
995 2008-11-06 21:07 millert
997 * sudoers.cat, sudoers.man.in: regen
999 2008-11-06 21:06 millert
1001 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
1002 will now refuse to run if no tty is present unless the new
1003 visiblepw sudoers flag is set.
1005 2008-11-05 19:42 millert
1007 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
1008 RLIM_SAVED_MAX not defined
1010 2008-11-05 19:40 millert
1012 * aix.c: fix fallback value for RLIM_SAVED_MAX
1014 2008-11-05 19:14 millert
1016 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
1019 2008-11-05 19:08 millert
1021 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
1022 authenticate() as it may not be correct for the user we are
1023 running the command as.
1025 2008-11-05 19:05 millert
1027 * isblank.c: Add isblank() function for systems without it. Needed
1028 for POSIX character class matching in fnmatch.c and glob.c.
1030 2008-11-05 11:02 millert
1032 * TROUBLESHOOTING: expound on sudo and cd
1034 2008-11-04 15:52 millert
1038 2008-11-04 15:46 millert
1040 * sudoers.cat, sudoers.man.in: regen
1042 2008-11-04 15:45 millert
1044 * sudoers.pod: mention defauts parse order
1046 2008-11-03 13:19 millert
1048 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
1049 function for systems without it. Needed for POSIX character
1050 class matching in fnmatch.c and glob.c.
1052 2008-11-03 12:54 millert
1054 * Makefile.in: add emul/charclass.h to HDRS
1056 2008-11-02 14:08 millert
1060 2008-11-02 14:06 millert
1062 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
1063 update_defaults into defaults.c and call it properly from visudo
1066 2008-11-02 09:51 millert
1068 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
1069 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
1072 2008-11-02 09:45 millert
1074 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
1075 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
1076 has non-standard entries.
1078 2008-11-02 09:35 millert
1080 * match.c: quiet gcc
1082 2008-11-02 09:28 millert
1084 * match.c: Short circuit glob() checks if basename(pattern) !=
1085 basename(command). Refactor code that checks for a command in a
1086 directory and use it in the glob case if the resolved pattern
1089 2008-11-01 09:20 millert
1091 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
1092 setting runas defaults until after runaspw/gr is setup.
1094 2008-10-29 13:26 millert
1096 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
1097 allocating host/domain name since some systems do not include
1098 space for the NUL in the size. Also manually NUL-terminate
1099 buffer from gethostname() since POSIX is wishy-washy on this.
1101 2008-10-26 17:13 millert
1103 * sudo.c, sudoers.pod: When setting the umask, use the union of the
1104 user's umask and the default value set in sudoers so that we
1105 never lower the user's umask when running a command.
1107 2008-10-26 16:43 millert
1109 * sudo.c: Don't try to read from a zero-length sudoers file.
1110 Remove the bogus Solaris work-around for EAGAIN. Since we now
1111 use fgetc() it should not be a problem.
1113 2008-10-25 09:22 millert
1115 * parse.c: In update_defaults() check the return value of
1116 user*_matches against ALLOW so we don't inadvertantly match on
1119 2008-10-24 09:52 millert
1121 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1122 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1123 regen man pages; no more hyphenation
1125 2008-10-24 09:49 millert
1127 * sudo.c: Don't error out on a zero-length sudoers file. With the
1128 advent of #include the user could create a situation where sudo
1131 2008-10-23 12:06 millert
1133 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
1134 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
1135 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
1136 Add configure tests to handle all the cases.
1138 2008-10-08 17:28 millert
1140 * sudo.pod: resort ENVIRONMENT
1142 2008-10-08 17:09 millert
1144 * sudoers.pod: document sudoers_locale
1146 2008-10-08 16:56 millert
1148 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
1149 uses in preference to VISUAL or EDITOR
1151 2008-10-08 14:27 millert
1153 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
1154 sudo-specific characters. Allows character classes to be used in
1157 2008-10-03 16:02 millert
1159 * lbuf.c: fix typo in non-C89 function declaration
1161 2008-10-03 15:56 millert
1163 * sudoers.pod: Mention POSIX characters classes now that out
1164 fnmatch() and glob() support them.
1166 2008-10-03 15:55 millert
1168 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
1169 UTF8) with [A-Za-z] which is locale agnostic.
1171 2008-10-03 10:02 millert
1173 * parse.h: use __signed char if we are going to assign a negative
1174 value since on Power, char is unsigned by default
1176 2008-10-03 09:59 millert
1178 * configure, configure.in, config.h.in: Add tests for __signed char
1181 2008-10-03 09:19 millert
1183 * aix.c: Fix AIX limit setting. getuserattr() returns values in
1184 disk blocks rather than bytes. The default hard stack size in
1185 newer AIX is RLIM_SAVED_MAX. From Dale King.
1187 2008-09-26 17:13 millert
1189 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1190 to included glob(3) and fnmatch(3).
1192 2008-09-16 08:28 millert
1194 * emul/fnmatch.h: Remove UCB advertising clause and some
1195 compatibility defines.
1197 2008-09-14 16:07 millert
1199 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1200 re-invoking itself or sudo. This allows one to set EDITOR to
1201 sudoedit without getting into an infinite loop of sudoedit
1202 running itself until the path gets too big.
1204 2008-09-13 20:45 millert
1206 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1207 sudoers_locale Defaults option to override the default sudoers
1210 2008-09-13 14:09 millert
1212 * sudo.c: Set locale to system default except for during sudoers
1215 2008-09-12 09:34 millert
1217 * match.c: Redo change in 1.34 to use pointer arithmetic.
1219 2008-09-11 07:06 millert
1221 * match.c: Fix a dereference (read) of a freed pointer. Reported
1222 by Patrick Williams.
1224 2008-08-23 19:09 millert
1226 * sudo.c: Set locale to "C" to avoid interpretation issues with
1227 character ranges in sudoers. May want to make the locale a
1228 sudoers option in the future.
1230 2008-08-20 07:45 millert
1232 * config.h.in: we no longer use setproctitle
1234 2008-08-20 07:41 millert
1236 * sudo.h: remove #if 1
1238 2008-08-20 07:40 millert
1240 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1243 2008-07-12 08:53 millert
1245 * gram.c: regen with yacc skeleton bug fixed
1247 2008-07-12 08:48 millert
1249 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1251 2008-07-02 06:27 millert
1253 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1254 passwd entry used for running commands as a uid not listed in the
1255 passwd database. Fixes an issue with some PAM modules.
1257 2008-07-01 07:57 millert
1259 * sudo.c: Error out in -i mode if the user has no shell. This can
1260 happen when running commands as a uid with no password entry.
1262 2008-06-26 07:49 millert
1264 * toke.c, toke.l: Better fix for line continuation inside double
1265 quotes. Now accepts whitespace between the backslash and the
1266 newline like the main lexer.
1268 2008-06-25 14:31 millert
1270 * toke.c, toke.l: Fix line continuation in strings. It was only
1271 being honored if preceded by whitespace.
1273 2008-06-22 16:19 millert
1275 * config.h.in, configure, configure.in, logging.c: Replace the
1276 double fork with a fork + daemonize.
1278 2008-06-21 14:59 millert
1280 * env.c, sudo.c: The -i flag should imply env_reset. This got
1281 broken in sudo 1.6.9.
1283 2008-06-20 20:34 millert
1285 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1286 is waited for. Instead of having a SIGCHLD handler, use the
1287 double fork trick to orphan the child that opens the pipe to
1288 sendmail. Fixes a problem running su on some Linux distros.
1290 2008-06-20 17:16 millert
1292 * configure, configure.in: Fix configure test for dirfd() on Linux
1293 where DIR is opaque.
1295 2008-06-17 17:42 millert
1297 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1298 QNX still has this problem we'll need to revisit this again.
1300 2008-06-10 21:13 millert
1302 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1303 the mailer. If we only block the signal it may be delivered
1304 later when we unblock. Also, there is no need to block SIGCHLD
1305 since we no longer do the double fork. The normal SIGCHLD
1306 handler is sufficient.
1308 2008-06-08 17:37 millert
1310 * configure, configure.in: Add description for NO_PAM_SESSION, from
1313 2008-06-06 09:36 millert
1315 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1317 2008-05-18 13:54 millert
1319 * configure, configure.in: Redo the test for dgettext() in a way
1320 that hopefully will work around the libintl_dgettext() undefined
1323 2008-05-11 09:21 millert
1325 * schema.ActiveDirectory: change filename in comment
1327 2008-05-10 09:18 millert
1329 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1330 sudoers.ldap.pod: Reference schema.ActiveDirectory
1332 2008-05-09 14:49 millert
1334 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1336 2008-05-09 14:48 millert
1338 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1340 2008-05-09 14:01 millert
1342 * schema.ActiveDirectory: Active Directory schema by Chantal
1343 Paradis and Eric Paquet
1345 2008-05-08 17:54 millert
1347 * parse.c: remove an XXX that was fixed
1349 2008-05-08 12:53 millert
1353 2008-05-08 12:49 millert
1355 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1356 mode. This fixes a problem where the tag value printed was
1357 influenced by defaults set in the first pass through the parser.
1359 2008-05-03 21:29 millert
1361 * Makefile.in, sudo.psf: No point in packaging the TODO file
1363 2008-05-03 21:24 millert
1367 2008-05-02 20:53 millert
1369 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1370 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1371 Defaults option that is similar to /etc/environment on some
1374 2008-05-02 16:38 millert
1376 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1377 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1378 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1381 2008-05-02 16:37 millert
1383 * UPGRADE: initial valgrind pass done
1385 2008-04-23 08:30 millert
1387 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1390 2008-04-11 10:03 millert
1392 * ldap.c: define LDAPS_PORT if the system headers do not
1394 2008-04-10 14:54 millert
1396 * gram.c, gram.y: Fix another memory leak in init_parser().
1398 2008-04-10 12:51 millert
1400 * configure, configure.in: There was a missing space before the
1401 ldap libs in SUDO_LIBS for some configurations.
1403 2008-04-10 11:28 millert
1405 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1406 leaks pointed out by valgrind.
1408 2008-04-07 14:39 millert
1410 * sudo.c: fix "sudo -s" broken by mode/flags breakout
1412 2008-04-07 14:26 millert
1414 * configure, configure.in: remove duplicate check for dgettext
1416 2008-04-05 15:54 millert
1418 * aix.c: Fall back to default stanza if no user-specific limit is
1421 2008-04-02 15:56 millert
1423 * snprintf.c: include stdint.h if present
1425 2008-04-02 15:28 millert
1427 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1429 2008-04-01 19:18 millert
1431 * sudoers.ldap.pod: fix cut and pasto
1433 2008-03-31 11:24 millert
1435 * pwutil.c: Add #ifdef PURITY
1437 2008-03-30 17:36 millert
1439 * auth/bsdauth.c: remove useless cast
1441 2008-03-27 19:07 millert
1445 2008-03-27 19:04 millert
1449 2008-03-27 19:01 millert
1451 * sudo.h: Split MODE_* defines into primary and flags.
1453 2008-03-26 13:11 millert
1455 * aix.c: It turns out the logic for getting AIX limits is more
1456 convoluted than I realized and differs depending on whether the
1457 soft and/or hard limits are defined.
1459 2008-03-23 10:18 millert
1461 * Makefile.in, configure, configure.in: Back out AIX-specific
1462 change to set the sudo_noexec path to the .a file, we do really
1463 want to use the .so file. Since libtool doesn't do that
1464 correctly, just install the .so file ourselves in the Makefile.
1466 2008-03-23 10:12 millert
1468 * install-sh: If the file given to install is a path, only use the
1469 basename of the file when building the destination path.
1471 2008-03-18 16:08 millert
1473 * sudo.c: parse_args() cleanup: Sort command line options in the
1474 getopt() switch The -U option requires a parameter Normalize a
1475 few ISSET calls Split mode into mode and flags and retire the
1476 now-obsolete excl variable
1478 2008-03-18 16:04 millert
1480 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1481 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1483 2008-03-18 15:59 millert
1485 * sudo.c: Move version printing, etc. into a separate function.
1487 2008-03-18 15:57 millert
1489 * sudo.c: Don't try to cleanup nsswitch if it has not been
1492 2008-03-17 11:09 millert
1494 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1495 a problem executing the mailer.
1497 2008-03-14 08:11 millert
1499 * configure.in, configure: AIX shared libs end in .a, not .so.
1501 2008-03-13 07:34 millert
1503 * env.c: Preserve HOME by default too. Matches documentation and
1506 2008-03-12 19:42 millert
1508 * sudo.c: Use getopt() to parse the command line. We need to be
1509 able to intersperse env variables and options yet still honor
1510 "--"" which complicates things slightly.
1512 2008-03-06 14:46 millert
1516 2008-03-06 14:43 millert
1518 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1520 2008-03-06 14:32 millert
1522 * config.guess, config.sub: update from libtool-1.5.26 distribution
1524 2008-03-06 13:18 millert
1526 * aix.c, sudo.h: attempt to fix compilation errors on AIX
1528 2008-03-06 13:08 millert
1530 * Makefile.in: fix typo in last commit
1532 2008-03-06 13:07 millert
1534 * Makefile.in: Add WHATSNEW file to the distribution
1536 2008-03-06 12:43 millert
1538 * visudo.c: use warningx instead of fprintf(stderr, ...)
1540 2008-03-06 12:31 millert
1542 * list.c: add DEBUG to list2tq
1544 2008-03-06 12:28 millert
1546 * ChangeLog, TODO: sync
1548 2008-03-06 12:21 millert
1550 * WHATSNEW: mention mailfrom
1552 2008-03-06 12:19 millert
1554 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1555 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1556 using a combination of getuserattr() and setrlimit(). Currently
1559 2008-03-05 16:52 millert
1561 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1562 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1563 sets the value of the From: field in the warning/error mail. If
1564 unset the login name of the invoking user is used.
1566 2008-03-05 16:18 millert
1568 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1571 2008-03-05 15:19 millert
1573 * gram.c, gram.y: When adding a default, only call list2tq() once
1574 to do the list to tq conversion. It is not legal to call list2tq
1575 multiple times on the same list since list2tq consumes and
1576 modifies the list argument.
1578 2008-03-05 09:38 millert
1580 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1583 2008-03-05 09:36 millert
1585 * WHATSNEW: mention askpass
1587 2008-03-04 17:20 millert
1589 * sudo.c: Error out if both -A and -S are specified Error out if -A
1590 is specified but no askpass is configured
1592 2008-03-04 17:16 millert
1594 * configure, configure.in: we are not going to ship a sudo-specific
1597 2008-03-03 14:30 millert
1599 * sudo.h: fix definition of TGP_ASKPASS
1601 2008-03-03 13:54 millert
1603 * def_data.c, def_data.in: make askpass boolean-capable
1605 2008-03-03 13:53 millert
1607 * INSTALL: document --with-askpass
1609 2008-03-02 19:27 millert
1611 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1612 sudoers.ldap.cat, visudo.cat: regen
1614 2008-03-02 17:31 millert
1616 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1618 2008-03-02 09:31 millert
1620 * check.c, configure, configure.in, def_data.c, def_data.h,
1621 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1622 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1623 running a helper program to read the password when no tty is
1624 present (or when specified with the -A flag). TODO: docs.
1626 2008-03-02 08:38 millert
1628 * def_data.c, def_data.in: add missing printf format to SELinux
1629 role and type strings
1631 2008-02-27 09:26 millert
1633 * INSTALL, configure, configure.in: Disable use of
1634 gss_krb5_ccache_name() by default and add
1635 --enable-gss-krb5-ccache-name configure option to enable it. It
1636 seems that gss_krb5_ccache_name() doesn't work properly with some
1637 combinations of Heimdal and OpenLDAP.
1639 2008-02-22 15:33 millert
1641 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1642 add a call to setkeycreatecon() (though this is probably
1643 insufficient). From Dan Walsh.
1645 2008-02-22 15:19 millert
1647 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1648 conversation function may be called for non-password reading
1649 purposes so we must be careful not to use def_prompt in cases
1650 where it may not be set.
1652 2008-02-20 12:00 millert
1654 * selinux.c: Don't free the new tty context, we need to keep it
1655 around when we restore the tty context after the command
1658 2008-02-19 16:04 millert
1660 * selinux.c: s/newrole/sudo/
1662 2008-02-19 13:21 millert
1664 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1665 if we have login.conf support
1667 2008-02-18 11:05 millert
1669 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1670 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1673 2008-02-18 10:53 millert
1675 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1676 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1677 lines partaining to login.conf, BSD auth and SELinux and only
1678 enable them if pertinent.
1680 2008-02-18 10:42 millert
1682 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1683 Remove the =cut on the first line (above the copyright notice) to
1684 quiet pod2man. Also remove the hackery in the FILES section and
1685 just deal with the fact that there will a newline between each
1688 2008-02-17 08:19 millert
1690 * Makefile.in: run sudo.man.pl when generating sudo.man.in
1692 2008-02-17 08:11 millert
1694 * configure, configure.in, sudo.man.pl: comment out SELinux manual
1695 bits unless --with-selinux was specified
1697 2008-02-17 08:04 millert
1699 * sudoers.pod: document role and type defaults for SELinux
1701 2008-02-16 20:26 millert
1703 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1704 Document "sudo -ll" and make "sudo -l -l" be equivalent.
1706 2008-02-15 15:23 millert
1708 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1709 Fixes compilation problems on Debian GNU/kFreeBSD.
1711 2008-02-13 17:17 millert
1713 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1714 rewrite of verify_krb_v5_tgt()
1716 2008-02-13 07:28 millert
1718 * logging.c, logging.h, sudo.c: Remove dependence on
1719 VALIDATE_NOT_OK in logging functions. Split log_auth() into
1720 log_allowed() and log_denial() Replace mail_auth() with
1721 should_mail() and a call to send_mail()
1723 2008-02-10 18:06 millert
1725 * ldap.c: Add debugging so we can tell if the krb5 ccache is
1728 2008-02-10 17:34 millert
1730 * INSTALL: mention --with-selinux
1732 2008-02-09 09:48 millert
1736 2008-02-09 09:43 millert
1738 * selinux.c: add Sudo tag
1740 2008-02-09 09:30 millert
1742 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1743 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1744 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1745 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1746 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1747 toke.l: Add support for SELinux RBAC. Sudoers entries may
1748 specify a role and type. There are also role and type defaults
1749 that may be used. To make sure a transition occurs, when using
1750 RBAC commands are executed via the new sesh binary. Based on
1751 initial changes from Dan Walsh.
1753 2008-02-08 08:18 millert
1755 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1756 list (sudo -ll) support for printing verbose LDAP and sudoers
1757 file entries. Still need to update manual.
1759 2008-02-03 10:43 millert
1761 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1762 output for file and ldap based sudoers and use lbufs for both.
1763 The ldap output does not currently include options that cannot be
1764 represented as tags. This will be remedied in a long list output
1767 2008-01-27 16:37 millert
1769 * set_perms.c: Use a specific error message for errno == EAGAIN
1770 when setuid() et al fails. On Linux systems setuid() will fail
1771 with errno set to EAGAIN if changing to the new uid would result
1772 in a resource limit violation.
1774 2008-01-27 16:34 millert
1776 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1777 family of syscalls causes the nroc resource limit to be checked.
1778 The limits will be reset by pam_limits.so when PAM is used. In
1779 the non-PAM case the nproc limit will remain unlimited but there
1780 doesn't seem to be a way around that other than having sudo parse
1781 /etc/security/limits.conf directly.
1783 2008-01-27 16:31 millert
1785 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1788 2008-01-23 06:33 millert
1790 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1791 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1792 from going into config.h. Avoid single quotes in variable
1793 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1794 of bash they will end up literally in the resulting define.
1796 2008-01-21 13:22 millert
1798 * README.LDAP: mention --with-nsswitch=no
1800 2008-01-21 11:43 millert
1802 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1805 2008-01-21 11:07 millert
1807 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1808 if we can find it. Needed for the ldapssl_set_strength defines
1811 2008-01-21 10:02 millert
1813 * TODO, sudoers.ldap.pod: sync
1815 2008-01-21 10:01 millert
1817 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1818 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1821 2008-01-21 10:00 millert
1823 * Makefile.in: Use 78n line length when formatting cat pages.
1825 2008-01-21 09:50 millert
1827 * README.LDAP: Remove redundant info that is now in
1830 2008-01-20 16:18 millert
1832 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1833 Reorganize the first section a bit. Substitute the proper path
1836 2008-01-20 10:17 millert
1838 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1839 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1840 Move schema into EXAMPLES
1842 2008-01-20 10:15 millert
1844 * configure.in, configure: Substitute values for ldap.conf,
1845 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1847 2008-01-19 20:35 millert
1849 * configure, configure.in: substitute for sudoers.ldap.man
1851 2008-01-19 20:34 millert
1853 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1856 2008-01-19 20:25 millert
1858 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1859 some of the missing pieces. Still needs some reorganization and
1862 2008-01-19 15:06 millert
1864 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1865 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1866 Currently, much of the information is adapted from README.LDAP.
1868 2008-01-18 17:32 millert
1870 * pwutil.c: When copying gr_mem we must guarantee that the storage
1871 space for gr_mem is properly aligned. The simplest way to do
1872 this is to simply store gr_mem directly after struct group. This
1873 is not a problem for gr_passwd or gr_name as they are simple
1876 2008-01-18 16:47 millert
1878 * ldap.c: Fix a typo/thinko in one of the calls to
1879 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1881 2008-01-17 15:44 millert
1883 * config.h.in, configure, configure.in, ldap.c: include
1884 <mps/ldap_ssl.h> in ldap.c if available
1886 2008-01-16 18:20 millert
1888 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1891 2008-01-16 13:03 millert
1893 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1894 echo) to guarantee that any pending output is discarded
1896 2008-01-15 17:18 millert
1898 * sudoers: no longer need to specify SETENV when user has sudo ALL
1900 2008-01-15 09:40 millert
1902 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1903 group option, renaming old -g to -G Add set_runasgr() and
1904 set_runaspw() and use them
1906 2008-01-15 09:23 millert
1908 * sudo.h, sudo.c: Make set_runaspw static void
1910 2008-01-15 09:17 millert
1912 * testsudoers.c, visudo.c: g/c set_runaspw stub
1914 2008-01-15 07:28 millert
1916 * configure, configure.in: Don't add -llber twice.
1918 2008-01-14 06:40 millert
1922 2008-01-13 15:39 millert
1926 2008-01-13 14:57 millert
1928 * configure, configure.in: Fix check that determines whether -llber
1931 2008-01-13 14:22 millert
1933 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1934 netscape-based LDAP, use ldapssl_set_strength() to implement the
1935 checkpeer ldap.conf option.
1937 2008-01-13 09:49 millert
1939 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1940 to use the cred cache, which is what krb5_verify_user() does.
1941 Better cleanup on failure.
1943 2008-01-12 12:40 millert
1945 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1946 krb5_verify_user() does.
1948 2008-01-09 14:58 millert
1950 * gram.c: The U suffix on constants is an ANSI feature
1952 2008-01-09 12:08 millert
1954 * configure.in, configure: Add check for ber_set_option() in -llber
1956 2008-01-06 19:02 millert
1958 * README.LDAP: default if no nsswitch.conf is files only
1960 2008-01-06 17:28 millert
1962 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1964 2008-01-06 12:32 millert
1966 * README.LDAP: timelimit and bind_timelimit
1968 2008-01-06 08:54 millert
1972 2008-01-06 07:56 millert
1974 * ldap.c: Move ldap.secret reading into a separate function.
1976 2008-01-05 19:09 millert
1978 * check.c: user_runas -> runas_pw
1980 2008-01-05 18:59 millert
1984 2008-01-05 18:59 millert
1986 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1987 the password prompt. Based on a patch from Patrick Schoenfeld.
1989 2008-01-05 18:25 millert
1991 * ldap.c: Check strlcpy() return values.
1993 2008-01-05 18:12 millert
1995 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1997 2008-01-05 16:35 millert
1999 * README.LDAP: Make it clear that host and uri can take multiple
2000 parameters. URI is now supported for more than just openldap
2001 nsswitch.conf does't accept "compat"
2003 2008-01-05 16:27 millert
2005 * sudo.c: comment cleanup and update (c) year
2007 2008-01-05 16:25 millert
2009 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
2010 parse.c to sudo_nss.c. This should make it possible to build an
2011 LDAP-only sudo binary.
2013 2008-01-05 13:27 millert
2015 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
2016 multiple sudoers sources by passing in the previous return value
2017 to the next in the chain
2019 2008-01-05 13:26 millert
2021 * gram.y: Free up parser data structures in sudo_file_close().
2023 2008-01-05 08:13 millert
2025 * gram.c, parse.c: Free up parser data structures in
2028 2008-01-05 07:59 millert
2030 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
2031 ldap_create() instead of deprecated ldap_init() Use
2032 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
2034 2008-01-05 07:56 millert
2036 * config.h.in, configure, configure.in: Add check for
2037 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
2039 2008-01-04 09:56 millert
2041 * configure.in, configure, config.h.in: add check for ldap_create
2043 2008-01-03 16:11 millert
2045 * config.h.in, configure, configure.in, ldap.c: Add
2046 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
2047 dn using the mechanism appropriate for the LDAP SDK in use. Use
2048 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
2049 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
2052 2008-01-03 16:02 millert
2054 * lbuf.c: include unistd.h
2056 2008-01-03 11:05 millert
2058 * config.h.in, configure.in: fix typo in mtim_getnsec
2060 2008-01-02 15:29 millert
2062 * config.h.in, configure.in, configure: add check for st__tim in
2063 struct stat as used by SCO
2065 2008-01-02 11:05 millert
2067 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
2069 2008-01-02 10:09 millert
2071 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
2073 2008-01-01 19:04 millert
2075 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
2076 ldap_str2dn() and ldap_rdn2str().
2078 2008-01-01 18:37 millert
2080 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
2081 of the deprecated ldap_get_values()/ldap_value_free().
2083 2008-01-01 17:07 millert
2085 * TODO, ChangeLog: sync
2087 2008-01-01 17:06 millert
2089 * gettime.c, sudo.c: Remove some already fixed XXXs
2091 2008-01-01 17:03 millert
2093 * ldap.c: Same return value as non-existent sudoers if LDAP was
2096 2008-01-01 16:52 millert
2098 * sudo.pod: mention /etc/environment
2100 2008-01-01 16:42 millert
2102 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
2105 2008-01-01 16:42 millert
2107 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
2110 2008-01-01 16:25 millert
2112 * ldap.c: When building up a query don't list groups in the aux
2113 group vector that are the same as the passwd file group. On most
2114 systems the first gid in the group vector is the same as the
2117 2008-01-01 14:01 millert
2119 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
2120 to disable user ldaprc and system defaults that could affect how
2123 2008-01-01 13:21 millert
2125 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
2126 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
2127 --with-nsswitch to allow users to specify nsswitch.conf path or
2128 disable it. If --with-nsswitch=no but --with-ldap, order is
2129 LDAP, then sudoers. Fix --with-ldap-conf-file and
2130 --with-ldap-secret-file
2132 2008-01-01 13:12 millert
2134 * parse.c: Honor def_ignore_local_sudoers
2136 2007-12-31 16:44 millert
2138 * ldap.c: no longer need to check def_ignore_local_sudoers here
2140 2007-12-31 16:36 millert
2142 * parse.c: Refactor group vector resetting into a function and also
2143 call it from display_cmnd. Stop after the first sucessful match
2144 in display_cmnd. Print a newline between each display_privs
2147 2007-12-31 16:23 millert
2149 * parse.c: fix double free introduced in rev 1.218
2151 2007-12-31 16:10 millert
2153 * ldap.c: belt and suspenders; zero out result after freeing it
2155 2007-12-31 15:04 millert
2157 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
2158 reading into a separate function, sudo_parseln(), which removes
2159 comments, leading/trailing whitespace and newlines. May want to
2160 rethink the use of sudo_parseln() for /etc/ldap.secret
2162 2007-12-31 14:26 millert
2164 * parse.c, sudo.c: Make the inability to read the sudoers file a
2165 non-fatal error if there are other sudoers sources available.
2166 sudoers_file_lookup now returns "not OK" if sudoers was not
2169 2007-12-31 14:24 millert
2171 * ldap.c: make it clear that the global options are from LDAP
2173 2007-12-31 14:13 millert
2175 * logging.c: allocate proper amount of space for error string
2177 2007-12-31 10:24 millert
2179 * sudo_nss.c, sudo_nss.h: actual sudo nss code
2181 2007-12-31 10:08 millert
2183 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2186 2007-12-31 07:54 millert
2188 * defaults.c, parse.c, testsudoers.c, visudo.c: move
2189 update_defaults() to parse.c
2191 2007-12-31 07:39 millert
2193 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2194 Use nsswitch to hide some sudoers vs. ldap implementation details
2195 and reduce the number of #ifdef LDAP TODO: fix display routines
2198 2007-12-28 11:20 millert
2200 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2201 First cut at nsswitch.conf support. Further reorganizaton and
2202 related changes are forthcoming.
2204 2007-12-21 16:53 millert
2206 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2207 and /etc/environment file. Still needs to be documented and
2208 should probably only applies to OSes that have it (AIX and Linux,
2211 2007-12-21 16:20 millert
2213 * ldap.c: include limits.h
2215 2007-12-20 10:02 millert
2217 * WHATSNEW: reword LDAP SASL
2219 2007-12-19 16:40 millert
2223 2007-12-19 16:39 millert
2225 * README.LDAP: Add an example sudoRole, clarify netscape vs.
2228 2007-12-19 14:42 millert
2230 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2232 2007-12-19 14:28 millert
2234 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2235 for ldaps support instead of trying to do it manually with
2236 ldap_init() + ldapssl_install_routines(). Use tls_cert and
2237 tls_key for cert7.db and key3.db respectively. Don't print
2238 debugging info for options that are not set. Add warning if
2239 start_tls specified when not supported.
2241 2007-12-19 14:25 millert
2243 * ldap.c: fix compilation on solaris
2245 2007-12-19 14:23 millert
2247 * Makefile.in: add missing .h and .c files for missing lib objs
2249 2007-12-18 09:54 millert
2251 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2253 2007-12-17 20:10 millert
2255 * ldap.c: fix compilation on Solaris
2257 2007-12-17 10:14 millert
2259 * configure, configure.in: fix typo
2261 2007-12-17 08:08 millert
2263 * README.LDAP: try to clear up which variables are for OpenLDAP and
2264 which are for netscape-derived SDKs
2266 2007-12-17 07:31 millert
2268 * config.h.in, configure, configure.in, ldap.c: Add support for
2269 "ssl on" in both netscape and openldap flavors. Only the
2270 OpenLDAP flavor has been tested.
2272 2007-12-17 07:28 millert
2274 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2275 log_error() instead of calling sudo_ldap_close() directly.
2276 ldap_conn can now be static to sudo.c
2278 2007-12-16 20:02 millert
2280 * sudo.c: ld -> ldap_conn
2282 2007-12-16 14:42 millert
2284 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2286 2007-12-16 14:08 millert
2288 * ldap.c: Distinguish between LDAP conf settings that are
2289 connection-specific (which take an ld pointer) and those that are
2290 default settings (which do not).
2292 2007-12-14 16:46 millert
2294 * ldap.c: Improved warnings on error.
2296 2007-12-14 15:59 millert
2298 * ldap.c: Make ldap config table driven and set the config *after*
2299 we open the connection.
2301 2007-12-13 16:41 millert
2303 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2305 2007-12-13 09:13 millert
2307 * configure, configure.in: some operating systems need to link with
2308 -lkrb5support when using krb5
2310 2007-12-10 17:12 millert
2312 * WHATSNEW: minor update
2314 2007-12-10 10:56 millert
2316 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2318 2007-12-07 19:17 millert
2320 * TODO, ChangeLog: sync
2322 2007-12-07 19:09 millert
2324 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2327 2007-12-03 11:36 millert
2329 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2330 can now take an optional command.
2332 2007-12-02 12:13 millert
2334 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2335 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2336 that will cause the prompt to be overridden in all cases. This
2337 flag is also set when the user specifies the -p flag.
2339 2007-12-01 19:51 millert
2341 * sudo.c: Move setting of login class until after sudoers has been
2342 parsed. Set NewArgv[0] for -i after runas_pw has been set.
2344 2007-12-01 19:34 millert
2346 * configure, configure.in: Move the dgettext check.
2348 2007-12-01 11:22 millert
2350 * config.h.in, configure, configure.in, auth/pam.c: Add basic
2351 support for looking up the string "Password: " in the PAM
2352 localized text db. This allows us to determine whether the PAM
2353 prompt is the default "Password: " one even if it has been
2356 TODO: concatenate non-std PAM prompts and user-specified sudo
2359 2007-11-27 18:40 millert
2361 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2362 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2363 home-grown attempt that was insufficient.
2365 2007-11-27 12:13 millert
2367 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2370 2007-11-25 19:26 millert
2372 * set_perms.c: Don't assume runas_pw is set; it may not be in the
2375 2007-11-25 08:07 millert
2377 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2378 restore group vector for PERM_ROOT if we previously changed it.
2379 Stash the runas group vector so we don't have to call initgroups
2380 more than once. Also add no-op check to check_perms.
2382 2007-11-21 15:11 millert
2384 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2385 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2386 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2387 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2388 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2389 visudo.cat, visudo.man.in: Add support for runas groups. This
2390 allows the user to run a command with a different effective
2391 group. If the -g option is specified without -u the command will
2392 be run as the current user (only the group will change). the -g
2393 and -u options may be used together. TODO: implement runas group
2394 for ldap improve runas group documentation add
2397 2007-11-21 15:02 millert
2399 * configure, configure.in: fix setting of mandir
2401 2007-11-21 14:26 millert
2403 * sudo.pod, sudoers.pod: document that ALL implies SETENV
2405 2007-11-21 13:50 millert
2407 * ldap.c: s/setenv_ok/setenv_implied/g
2409 2007-11-21 13:44 millert
2411 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2413 2007-11-21 13:26 millert
2415 * ldap.c: use strcmp, not strcasecmp when comparing ALL
2417 2007-11-21 11:41 millert
2419 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2420 file-based sudoers this does affect all the commands in the
2423 2007-11-21 11:05 millert
2425 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2426 SETENV tag but, unlike an explicit tag, it is not passed on to
2427 other commands in the list.
2429 2007-11-21 11:02 millert
2431 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2432 Also use sudo_getpwuid() instead of getpwuid().
2434 2007-11-15 11:16 millert
2436 * sudoers: Expand on the dangers of not using visudo to edit
2439 2007-11-08 07:24 millert
2441 * parse.c: Don't quote *?[]! on output since the lexer does not
2442 strip off the backslash when reading those in.
2444 2007-11-07 13:16 millert
2446 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2447 compatibility issues.
2449 2007-11-04 08:33 millert
2451 * logging.c: Refactor log line generation in to new_logline().
2453 2007-10-25 09:23 millert
2455 * TROUBLESHOOTING: fix typo
2457 2007-10-24 12:41 millert
2459 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2460 match.c: Add configure check for struct in6_addr instead of
2461 relying on AF_INET6 since some systems define AF_INET6 but do not
2462 include IPv6 support.
2464 2007-10-21 09:29 millert
2466 * configure, configure.in: Fix block to add -lutil for FreeBSD and
2467 NetBSD when logincap is in use.
2469 2007-10-19 22:28 millert
2471 * configure, configure.in: POSIX states that struct timespec be
2472 declared in time.h so check there regardless of the value of
2475 2007-10-17 11:37 millert
2477 * tgetpass.c: Instead of defining a macro to call the appropriate
2478 method for turning on/off echo, just define tc[gs]etattr() and
2479 the related defines that use the correct terminal ioctls if
2480 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2483 2007-10-08 20:18 millert
2485 * Makefile.in: g/c @ALLOCA@
2487 2007-10-08 20:07 millert
2491 2007-10-08 20:04 millert
2493 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2494 --disable-pam-session configure option to disable calling
2495 pam_{open,close}_session. May work around bugs in some PAM
2498 2007-10-08 12:00 millert
2500 * tgetpass.c: quiet gcc warnings
2502 2007-10-08 08:41 millert
2504 * tgetpass.c: Avoid printing the prompt if we are already
2505 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2506 In this case, the call to tcsetattr() will cause SIGTTOU to be
2509 2007-09-15 16:07 millert
2511 * def_data.c, def_data.h, def_data.in: Reorder things such that the
2512 definition of env_reset come right before the env variable lists.
2514 2007-09-15 07:50 millert
2516 * parse.h: Shrink type and seqno in struct alias from int to
2519 2007-09-15 07:24 millert
2521 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2522 aliases for loop detection. If we find an alias with the seqno
2523 already set to the current (global) value we know we've visited
2524 it before so ignore it.
2526 2007-09-13 19:05 millert
2528 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2529 add user_ttypath which holds the full path to the tty or is NULL
2530 if no tty was present.
2532 2007-09-13 18:42 millert
2534 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2535 lower that results in a segv.
2537 2007-09-11 15:43 millert
2541 2007-09-11 15:42 millert
2543 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2544 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2546 2007-09-10 17:33 millert
2548 * alloc.c: remove some useless casts
2550 2007-09-10 17:32 millert
2552 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2553 inttypes.h predates the final C99 spec and the standard specifies
2554 that it shall include stdint.h anyway
2556 2007-09-06 12:39 millert
2558 * Makefile.in, alloca.c, configure.in: Since we ship with a
2559 pre-generated parser there is no need to ship a bogus alloca
2562 2007-09-06 12:22 millert
2566 2007-09-06 12:19 millert
2568 * configure.in: remove initial setting of CHECKSIA, we require that
2569 it be unset if not used
2571 2007-09-06 11:55 millert
2573 * Makefile.in: add list.c to SRCS
2575 2007-09-06 07:18 millert
2579 2007-09-06 07:17 millert
2581 * configure.in: only do SIA checks on Digital Unix
2583 2007-09-05 18:50 millert
2585 * sudoers.cat, sudoers.man.in: regen
2587 2007-09-05 18:48 millert
2589 * ChangeLog, TODO: sync
2591 2007-09-05 18:39 millert
2593 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2594 needed for modern kerb5.
2596 2007-09-05 18:16 millert
2600 2007-09-05 18:16 millert
2602 * configure.in, aclocal.m4: New method for setting the default
2603 authentication type and avoiding conflicts in auth types.
2605 2007-09-05 14:45 millert
2607 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2608 an associated runaslist so no need to keep track of the most
2609 recent non-NULL one.
2611 2007-09-04 18:51 millert
2613 * ldap.c: back out partial ldaps support mistakenly committed
2615 2007-09-04 10:57 millert
2617 * ldap.c: Add support for unix groups and netgroups in sudoRunas
2619 2007-09-03 16:28 millert
2621 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2624 2007-09-02 17:05 millert
2628 2007-09-02 17:05 millert
2630 * INSTALL: update --passprompt escape info
2632 2007-09-02 17:03 millert
2634 * configure.in: remove now-bogus comment and update copyright date
2636 2007-09-02 16:35 millert
2638 * configure.in: Fix up use of with_passwd
2640 2007-09-02 16:25 millert
2642 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2643 Update to autoconf-2.61 andf libtool-1.5.24
2645 2007-09-02 16:17 millert
2647 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2650 2007-09-01 17:39 millert
2654 2007-09-01 17:39 millert
2656 * gram.y: move tags and runaslist propagation to be earlier
2658 2007-09-01 09:34 millert
2660 * visudo.c: If -f flag given use the permissions of the original
2663 2007-09-01 08:45 millert
2665 * gram.y: prevent a double free() when re-initing the parser
2667 2007-08-31 19:30 millert
2671 2007-08-31 19:30 millert
2673 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2674 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2675 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2676 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2677 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2678 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2679 Remove support for compilers that don't support void *
2681 2007-08-31 19:14 millert
2685 2007-08-31 19:13 millert
2687 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2688 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2689 manipulation macros to list.h and create C versions of the more
2690 complex ones in list.c. The names have been down-cased so they
2691 appear more like normal functions.
2693 2007-08-31 17:21 millert
2695 * Makefile.in: Fix cmp command when regenerating parser. Make
2696 gram.o the first dependency for all programs so gram.h will be
2697 generated before anything that needs it.
2699 2007-08-31 13:56 millert
2701 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2704 2007-08-30 21:21 millert
2706 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2707 permission and short-circuit on the first non-UNSPEC hit we get
2708 for the command. This means that instead of cycling through the
2709 all the parsed sudoers entries we start at the end and work
2710 backwards and quit after the first positive or negative match.
2712 2007-08-30 21:13 millert
2716 2007-08-30 21:12 millert
2718 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2719 Change list head macros to take a pointer, not a struct.
2721 2007-08-30 20:46 millert
2725 2007-08-30 20:46 millert
2727 * gram.y: Propagate the runasspec from one command to the next in a
2730 2007-08-30 16:15 millert
2732 * match.c: Replace has_meta() with a macro that calls strpbrk().
2734 2007-08-30 16:04 millert
2738 2007-08-30 13:26 millert
2740 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2741 testsudoers.c, visudo.c: Use a list head struct when storing the
2742 semi-circular lists and convert to tail queues in the process.
2743 This will allow us to reverse foreach loops more easily and it
2744 makes it clearer which functions expect a list as opposed to a
2747 Add macros for manipulating lists. Some of these should become
2750 When freeing up a list, just pop off the last item in the queue
2751 instead of going from head to tail. This is simpler since we
2752 don't have to stash a pointer to the next member, we always just
2753 use the last one in the queue until the queue is empty.
2755 Rename match functions that take a list to have list in the name.
2756 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2758 2007-08-30 13:12 millert
2760 * parse.c: Fix pasto, append "!" not negated (which is an int) for
2763 2007-08-30 12:45 millert
2765 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2766 dependency is enough. Only move y.tab.h to gram.h if it is
2767 different; avoids needless rebuilding.
2769 2007-08-27 15:51 millert
2771 * sudoers.pod: Defaults lines may be associated with lists of
2772 users, hosts, commands and runas users, not just single entries.
2774 2007-08-26 17:42 millert
2776 * Makefile.in: Revert the "cmp" portion of the last diff, it
2779 2007-08-26 17:10 millert
2781 * Makefile.in: Remove *.lo for clean: When generating the parser,
2782 only move the generated files into place if they differ from the
2785 2007-08-24 22:47 millert
2787 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2788 (readable) one and add an extra check when it matches to make
2789 sure we have a valid address.
2791 2007-08-24 22:36 millert
2793 * match.c: Fix thinko introduced when merging IPV6 support.
2795 2007-08-24 14:23 millert
2797 * HISTORY, LICENSE: regen
2799 2007-08-24 14:23 millert
2801 * license.pod: add 2007
2803 2007-08-24 14:19 millert
2805 * UPGRADE: mention #uid vs. comment pitfall
2807 2007-08-24 09:50 millert
2809 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2810 problem with the latest autoconf. From Stepan Kasal.
2812 2007-08-23 20:28 millert
2814 * parse.h: Back out he XOR swap trick, it is slower than a temp
2815 variable on modern CPUs.
2817 2007-08-23 20:14 millert
2821 2007-08-23 20:14 millert
2823 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2824 and use the XOR swap trick to swap the prev pointers during
2827 2007-08-23 15:31 millert
2829 * parse.h: remove useless statement
2831 2007-08-23 07:47 millert
2833 * toke.c, toke.l: Refactor #include parsing into a separate
2834 function and return unparsed chars (such as newline or comment)
2837 2007-08-22 18:56 millert
2839 * WHATSNEW: mention better uid support
2841 2007-08-22 18:55 millert
2843 * sudoers.pod: Users may now consist of a uid.
2845 2007-08-22 18:39 millert
2847 * gram.c, gram.h, toke.c: regen
2849 2007-08-22 18:32 millert
2851 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2852 characters that would require quoting in sudoers.
2854 2007-08-22 18:31 millert
2856 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2857 characters which should be quoted with a backslash when
2860 2007-08-22 18:28 millert
2862 * toke.l: Require that the first character after a comment not be a
2863 digit or a dash. This allows us to remove the GOTRUNAS state and
2864 treat uid/gids similar to other words. It also means that we can
2865 now specify uids in User_Lists and a User_Spec may now contain a
2868 2007-08-22 18:23 millert
2870 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2871 make the runas portion of the grammar more natural.
2873 2007-08-22 06:35 millert
2875 * Makefile.in, README, BUGS: The BUGS file is history
2877 2007-08-21 09:19 millert
2879 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2880 character after the pound sign isn't a digit or a dash.
2882 2007-08-20 20:43 millert
2884 * WHATSNEW: Glob support was back-ported to 1.6.9
2886 2007-08-20 19:59 millert
2888 * Makefile.in: remove sudo_usage.h in distclean
2890 2007-08-20 19:24 millert
2892 * parse.c: If a Defaults value contains a blank, double-quote the
2895 2007-08-20 19:19 millert
2897 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2898 that span multiple lines using the line continuation char.
2899 Previously, the entire thing, including the continuation char,
2900 newline, and spaces was stored as-is.
2902 2007-08-20 10:46 millert
2904 * sudo.c: Be consistent when using single quotes and backticks.
2906 2007-08-19 16:48 millert
2908 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2909 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2910 dynamically allocated strings and word-wrapped output. Currently
2911 used for sudo's usage() and sudo -l output. Sudo usage strings
2912 are now in sudo_usage.h which is generated at configure time.
2914 2007-08-18 08:22 millert
2916 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2917 actual tty width instead of assuming 80.
2919 2007-08-17 18:32 millert
2921 * history.pod: some more info
2923 2007-08-17 17:28 millert
2925 * history.pod: Mentioned Chris Jepeway's parser and also the new
2926 one that is in sudo 1.7.
2928 2007-08-16 09:38 millert
2930 * sudo.pod, visudo.pod: For the options list, add flag args where
2931 appropriate and increase the indent level so there is room for
2934 2007-08-15 13:49 millert
2936 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2937 some bogosity in the line wrapping.
2939 2007-08-15 11:21 millert
2941 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2942 visudo.man.in, visudo.cat: regen
2944 2007-08-15 11:20 millert
2946 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2947 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2948 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2949 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2950 is a versino of systrace that uses a lookaside buffer (or we have
2951 a better mechanism to use).
2953 2007-08-15 09:22 millert
2955 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2956 instead of gethostbyname() if it is available
2958 2007-08-14 15:27 millert
2960 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2963 2007-08-14 11:19 millert
2965 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2967 2007-08-14 10:04 millert
2969 * sudo.c: If we can open sudoers but fail to read the first byte,
2970 close the file stream before trying again.
2972 2007-08-13 12:34 millert
2974 * gram.c, toke.c: regen
2976 2007-08-13 12:29 millert
2978 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2979 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2981 2007-08-13 12:23 millert
2983 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2986 2007-08-12 18:55 millert
2988 * configure, configure.in: fix sudo_noexec extension which got
2989 broken in the libtool update
2991 2007-08-10 10:41 millert
2993 * Makefile.in: explicitly specify -Tascii to nroff
2995 2007-08-08 16:07 millert
2997 * logging.c: remove an ANSI-ism that crept in
2999 2007-08-06 20:37 millert
3001 * sudo.pod: Adjust list indents Prevent -- from being turned into
3002 an em dash Use a list for the environment instead of a literal
3005 2007-08-06 20:36 millert
3007 * visudo.pod: Use a list for the environment instead of an indented
3010 2007-08-06 20:33 millert
3012 * sudoers.pod: Adjust list indentation
3014 2007-08-06 20:31 millert
3016 * license.pod: add =head3
3018 2007-08-06 10:24 millert
3020 * sudo.pod: mention that when specifying a uid for the -u option
3021 the shell may require that the # be escaped
3023 2007-08-01 22:08 millert
3025 * match.c: Fix off by one in group matching.
3027 2007-07-31 14:04 millert
3029 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
3032 2007-07-30 10:45 millert
3034 * configure, configure.in: Add missing define of
3035 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
3037 2007-07-30 09:29 millert
3039 * aclocal.m4, configure.in, configure: Fix link tests such that new
3040 gcc doesn't optimize away the test.
3042 2007-07-29 19:21 millert
3044 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
3046 2007-07-29 19:09 millert
3048 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
3051 2007-07-29 18:32 millert
3053 * env.c: Add back allocation of the env struct in rebuild_env but
3054 save a copy of the old pointer and free it before returning.
3056 2007-07-29 16:09 millert
3058 * env.c: Don't init the private environment in rebuild_env() since
3059 it may have already been done implicitly
3060 sudo_setenv/sudo_unsetenv.
3062 Multiply length by sizeof(char *) in memcpy/memmove when copying
3063 the environment so we copy the full thing.
3065 Add missing set of parens so we deref the right pointer in
3066 sudo_unsetenv when searching for a matching variable.
3068 2007-07-26 16:35 millert
3070 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
3073 2007-07-26 10:04 millert
3075 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
3077 2007-07-26 07:28 millert
3079 * sudoers.pod: Sort sudoers options; based on a diff from Igor
3082 2007-07-25 16:19 millert
3084 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
3085 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
3086 The Makefile rules for the .man.in file will add @mansectsu@ and
3087 @mansectform@ back in after pod2man is done anyway.
3089 2007-07-22 19:09 millert
3091 * LICENSE, Makefile.in, license.pod: Move license info to pod
3094 2007-07-22 18:43 millert
3096 * configure, configure.in, sudoers.pod: Substitute value of
3097 path_info into sudoers man page.
3099 2007-07-22 16:40 millert
3101 * WHATSNEW: remove features that were back-ported to 1.6.9
3103 2007-07-22 15:20 millert
3105 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
3106 usage. From Igor Sobrado.
3108 2007-07-22 15:19 millert
3110 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
3111 ldap_sasl_interactive_bind_s() but don't have
3112 gss_krb5_ccache_name().
3114 2007-07-22 08:23 millert
3116 * ChangeLog: rebuild without branch info
3118 2007-07-22 08:23 millert
3120 * Makefile.in: Add ChangeLog target
3122 2007-07-22 08:14 millert
3124 * auth/pam.c: Run cleanup code if the user hits ^C at the password
3127 2007-07-22 08:13 millert
3129 * auth/pam.c: Some versions of pam_lastlog have a bug that will
3130 cause a crash if PAM_TTY is not set so if there is no tty, set
3131 PAM_TTY to the empty string.
3133 2007-07-20 09:32 millert
3135 * Makefile.in: ChageLog not Changelog
3137 2007-07-20 09:31 millert
3141 2007-07-20 09:29 millert
3143 * Makefile.in: CHANGE -> Changelog
3145 2007-07-19 20:23 millert
3149 2007-07-19 19:53 millert
3151 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
3152 for gss_krb5_ccache_name() and the gssapi headers.
3154 2007-07-18 12:57 millert
3156 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
3157 return environment pointer, they set environ directly.
3159 No longer need to pass around an envp pointer since we just
3160 operate on environ now.
3162 Add dosync argument to insert_env() that indicates whether it
3163 should reset environ when realloc()ing env.envp.
3165 Use an initial size of 128 for the environment.
3167 2007-07-18 12:41 millert
3169 * env.c: Split sudo_setenv() into an external version and a version
3170 only for use by rebuild_env().
3172 2007-07-16 19:40 millert
3174 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
3175 setting KRB5CCNAME. Also use sudo_unsetenv() in the
3176 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
3177 original environment. TODO: configure setup for
3178 gss_krb5_ccache_name()
3180 2007-07-16 18:44 millert
3182 * README.LDAP: add krb5_ccname
3184 2007-07-16 18:44 millert
3186 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3188 2007-07-16 18:39 millert
3190 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3191 syncing code into sync_env().
3193 2007-07-16 07:27 millert
3195 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3198 2007-07-15 15:44 millert
3200 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3201 If specified, it will override the default value of KRB5CCNAME
3202 in the environment for the duration of the call to
3203 ldap_sasl_interactive_bind_s().
3205 2007-07-15 15:41 millert
3207 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3208 most format_env() + insert_env() combinations. insert_env() no
3209 longer takes a struct environment *
3211 2007-07-15 12:47 millert
3213 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3215 2007-07-15 09:23 millert
3217 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3218 support for SASL auth when connecting to an LDAP server. Adapted
3219 from a diff by Tom McLaughlin.
3221 2007-07-14 16:32 millert
3223 * configure, configure.in: Only enable AIX or BSD auth if no other
3224 exclusive auth method has been chosen. Allows people to e.g.,
3225 use PAM on AIX without adding --without-aixauth. A better
3226 solution is needed to deal with default authentication since if a
3227 non-exclusive method is chosen we will still get an error.
3229 2007-07-11 11:23 millert
3231 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3232 history.pod (which is also used for web pages)
3234 2007-07-09 19:40 millert
3236 * sudo.man.in, sudoers.man.in: regen
3238 2007-07-09 19:25 millert
3240 * sudo.pod: Better explanation of environment handling in the sudo
3243 2007-07-09 15:13 millert
3245 * env.c, sudo.c: Defer setting user-specified env vars until after
3248 2007-07-09 13:25 millert
3250 * env.c: honor def_default_path for PATH set on the command line
3252 2007-07-09 13:22 millert
3254 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3255 environment variables on the command line as long as they are
3256 allowed by env_keep and env_check. Ie: apply the same
3257 restrictions as normal environment variables. TODO: deal with
3260 2007-07-08 14:44 millert
3262 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3263 original envp to sudo_edit(). Don't allow -E or env var setting
3264 in sudoedit mode. More accurate usage() when called as sudoedit.
3266 2007-07-08 14:41 millert
3268 * ldap.c: warn -> warning
3270 2007-07-08 14:11 millert
3272 * sudo.pod: add -c option to sudoedit synopsis
3274 2007-07-08 10:27 millert
3276 * TODO: udpate to reality
3278 2007-07-08 09:43 millert
3280 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3281 the return value from {user,host,runas,cmnd}_matches(). Rename
3282 *matches variables -> *match. Purely cosmetic.
3284 2007-07-08 09:30 millert
3286 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3287 No change in behavior.
3289 2007-07-08 09:17 millert
3291 * sudoers: add SETENV tag
3293 2007-07-06 15:51 millert
3295 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3296 even if user didn't match since Defaults options may still apply.
3298 2007-07-06 14:51 millert
3300 * check.c, sudo.c: Do not update timestamp if user not validated by
3303 2007-07-06 10:14 millert
3305 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3306 and restore to the user's original in PERM_ROOT
3308 2007-07-06 10:04 millert
3310 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3311 now no different than PERM_ROOT so remove PERM_FULL_ROOT
3313 2007-07-06 09:49 millert
3315 * check.c: don't check timestamp mtime if we are just going to
3318 2007-07-06 09:33 millert
3320 * sudoers.pod: Move sudoers defaults parameters into their own
3323 2007-07-05 20:21 millert
3325 * testsudoers.c: Reduce a level of indent by a few placed continue
3328 2007-07-05 20:20 millert
3330 * parse.c: Make matching but negated commands/hosts/runas entries
3331 override a previous match as expected. Also reduce some levels
3332 of indent by a few placed continue statements.
3334 2007-07-05 16:34 millert
3336 * parse.c: Print default runas in "sudo -l" if sudoers don't
3339 2007-07-05 15:46 millert
3341 * match.c: Less hacky way of testing whether the domain was set.
3343 2007-07-04 15:50 millert
3345 * INSTALL: Mention pam-devel and openldap-devel for Linux
3347 2007-07-03 19:38 millert
3349 * README.LDAP: or vs. are
3351 2007-07-01 16:55 millert
3353 * sudo.c: fix typo in Solaris project support
3355 2007-07-01 09:40 millert
3359 2007-07-01 09:07 millert
3361 * sudo.c: Make -- on the command line match the manual page. The
3362 implied shell case has been simplified as a result.
3364 2007-06-28 10:44 millert
3366 * sudoers2ldif: add simplistic support for sudoRunas; note that if
3367 a sudoers entry contains multiple Runas users, all will apply to
3370 2007-06-28 10:42 millert
3372 * sudoers2ldif: honor SETENV and NOSETENV tags
3374 2007-06-24 09:25 millert
3376 * mon_systrace.c: Redo setting of user_args. We now build up a
3377 private copy of argv first and then replace the NULs with spaces.
3379 2007-06-24 09:19 millert
3381 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3384 2007-06-24 07:39 millert
3386 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3388 2007-06-23 20:00 millert
3390 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3391 visudo.man.in: regen
3393 2007-06-23 19:58 millert
3395 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3396 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3397 sudoers.pod, toke.c, toke.l: Add support for setting environment
3398 variables on the command line. This is only allowed if the
3399 setenv sudoers options is enabled or if the command is prefixed
3400 with the SETENV tag.
3402 2007-06-23 19:57 millert
3404 * README.LDAP: replace Aaron's email address with the sudo-workers
3407 2007-06-23 19:55 millert
3411 2007-06-21 20:35 millert
3413 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3414 schema out into separate files.
3416 2007-06-21 18:28 millert
3418 * auth/aix_auth.c: free message if set by authenticate()
3420 2007-06-21 13:03 millert
3422 * match.c: deal with NULL gr_mem
3424 2007-06-20 15:04 millert
3426 * config.h.in: regen
3428 2007-06-20 15:04 millert
3430 * configure.in: add template for HAVE_PROJECT_H
3432 2007-06-20 07:06 millert
3434 * closefrom.c: include fcntl.h
3436 2007-06-19 19:37 millert
3438 * INSTALL: mention --with-project
3440 2007-06-19 18:24 millert
3442 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3443 support. From Michael Brantley.
3445 2007-06-19 17:27 millert
3447 * sudoers.pod: fix typo
3449 2007-06-19 17:22 millert
3453 2007-06-19 17:21 millert
3455 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3457 2007-06-19 17:00 millert
3459 * memrchr.c: Remove dependecy on NULL
3461 2007-06-19 15:37 millert
3465 2007-06-19 15:37 millert
3467 * aclocal.m4, configure.in: Can't use the regular autoconf
3468 fnmatch() check since we need FNM_CASEFOLD so go back to our
3471 2007-06-19 12:52 millert
3473 * env.c: Fix preserving of variables in env_keep.
3475 2007-06-19 07:10 millert
3477 * env.c: add XAUTHORIZATION
3479 2007-06-18 20:41 millert
3481 * UPGRADE: expand upon env resetting and mention that it began in
3484 2007-06-18 20:33 millert
3486 * sudoers.pod: Update descriptions of env_keep and env_check to
3487 match current reality.
3489 2007-06-18 17:33 millert
3491 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3492 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3493 intial_keepenv_table.
3495 2007-06-18 17:23 millert
3497 * env.c, logging.c: Treat USERNAME environemnt variable like
3500 2007-06-18 17:21 millert
3502 * env.c: Don't need to populate keepenv table with the contents of
3505 2007-06-18 08:57 millert
3507 * sudo.c: Don't force sudo into the C locale.
3509 2007-06-18 08:56 millert
3511 * env.c: Make env_check apply when env_reset it true. Environment
3512 variables are passed through unless they contain '/' or '%'.
3513 There is no need to have a variable in both env_check and
3516 2007-06-16 07:31 millert
3518 * visudo.c: Remove an duplicate lock_file() call and add a comment.
3520 2007-06-15 21:16 millert
3522 * UPGRADE: Add sudo 1.6.9 upgrade note.
3524 2007-06-14 12:23 millert
3526 * interfaces.c: Solaris will return EINVAL if the buffer used in
3527 SIOCGIFCONF is too small. From Klaus Wagner.
3529 2007-06-14 12:03 millert
3531 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3532 logging.c, sudo.h: Redo the long syslog line splitting based on a
3533 patch from Eygene Ryabinkin. Include memrchr() for systems
3536 2007-06-14 07:09 millert
3538 * configure.in: Since we need to be able to convert timespec to
3539 timeval for utimes() the last 3 digits in the tv_nsec are not
3540 significant. This makes the sudoedit file date comparison work
3543 2007-06-13 13:41 millert
3545 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3546 deal with adding things to AUTH_OBJS. This deals with exclusive
3547 authentication methods in a simple way.
3549 2007-06-12 13:08 millert
3551 * LICENSE: mkstemp.c is BSD code too.
3553 2007-06-12 09:21 millert
3555 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3557 2007-06-11 18:27 millert
3559 * sudo.c: cleanenv() is no more.
3561 2007-06-10 18:37 millert
3563 * ChangeLog: Display branch info in Changelog
3565 2007-06-10 18:18 millert
3567 * utimes.c: Include config.h early so we have it for
3570 2007-06-10 18:00 millert
3572 * ChangeLog: Fix Changelog generation and update.
3574 2007-06-09 07:26 millert
3576 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3578 Move old-style fd closing into closefrom_fallback() and call that
3579 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3581 2007-06-09 07:24 millert
3583 * config.h.in, configure.in, auth/kerb5.c: o use
3584 krb5_verify_user() if available instead of doing it by hand
3585 o use krb5_init_secure_context() if we have it
3586 o pass an encryption type of 0 to krb5_kt_read_service_key()
3588 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3590 2007-06-09 07:20 millert
3592 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3595 2007-06-09 07:17 millert
3597 * configure.in: Fix closefrom() substitution in the Makefile
3599 2007-06-09 07:15 millert
3601 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3603 2007-06-07 07:52 millert
3605 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3607 2007-06-07 07:22 millert
3609 * auth/kerb5.c: If we cannot get a valid service key using the
3610 default keytab it is a fatal error. Fixes a bug where sudo could
3611 be tricked into allowing access when it should not by a fake KDC.
3612 From Thor Lancelot Simon.
3614 2007-05-12 08:56 millert
3616 * aclocal.m4, configure, configure.in: Update long long checks to
3617 use AC_CHECK_TYPES and to cache values.
3619 2007-05-12 08:07 millert
3621 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3622 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3623 that assumes replacing with GNU fnmatch.
3625 2007-05-11 17:05 millert
3627 * configure, configure.in: Add closefrom() to LIB_OBJS not
3628 SUDO_OBJS if it is missing since we need it for visudo now too.
3630 2007-04-24 14:44 millert
3632 * sudoers.pod: Attempt to clarify the bit talking about network
3633 numbers w/o netmasks.
3635 2007-04-24 14:25 millert
3637 * sudo.pod: Clarify timestamp dir ownership sentence.
3639 2007-04-20 12:40 millert
3641 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3642 __LIBPAM_VERSION. From Dmitry V. Levin.
3644 2007-04-16 12:13 millert
3646 * sudo.c: -i is also one of the mutually exclusive options to list
3647 it in the warning message. Noted by Chris Pepper.
3649 2007-04-12 11:18 millert
3651 * visudo.pod: The sudoers variable is env_editor, not enveditor.
3652 From Jean-Francois Saucier.
3654 2007-03-29 13:30 millert
3656 * redblack.c: I tracked down the original author so credit him and
3657 include his license info.
3659 2007-02-06 13:25 millert
3661 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3662 sudoers.pod: Fix typos; from Jason McIntyre.
3664 2007-02-06 13:23 millert
3666 * logging.c: Restore signal mask before calling reapchild(). Fixes
3667 a possible race condition that could prevent sudo from properly
3668 waiting for the child.
3670 2007-01-31 10:02 millert
3672 * pwutil.c: Don't declare pw_free() if we are not going to use it.
3674 2007-01-31 10:00 millert
3676 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3677 and LDR_PRELOAD64. The 64-bit version is not currently
3678 supported. Remove zero_env() prototype as it no longer exists.
3680 2006-12-11 13:21 millert
3682 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3685 2006-09-29 10:53 millert
3687 * auth/pam.c: If the user enters ^C at the password prompt, abort
3688 instead of trying to authenticate with an empty password (which
3689 causes an annoying delay).
3691 2006-08-17 11:26 millert
3693 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3694 F_CLOSEM support to closefrom(); adapted from a diff by Darren
3697 2006-08-17 11:25 millert
3699 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3702 2006-08-04 11:34 millert
3704 * config.sub, config.guess: Update to latest versions from
3705 cvs.savannah.gnu.org
3707 2006-07-31 13:51 millert
3709 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3710 sudo_end{pw,grp}ent() so we can close the passwd/group files
3713 2006-07-31 13:50 millert
3715 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3716 flavor of set_perms() for systems without setreuid() or
3717 setresuid() that have a working seteuid(). Tested on Darwin.
3719 2006-07-30 15:56 millert
3721 * mon_systrace.c: systrace_read() returns ssize_t
3723 2006-07-30 15:53 millert
3725 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3728 2006-07-28 13:12 millert
3730 * HISTORY: Fix typo; Matt Ackeret
3732 2006-07-17 08:25 millert
3734 * sudo.c: Print sudoers path in -V mode for root.
3736 2006-06-15 14:44 millert
3738 * ldap.c: Do a sub tree search instead of a base search (one level
3739 in the tree only) for sudo right objects. This allows system
3740 administrators to categorize the rights in a tree to make them
3743 2005-12-28 13:52 millert
3745 * sudo.pod: fix typo
3747 2005-12-04 12:16 millert
3749 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3750 timelimit and bind_timelimit support; adapted from gentoo.
3752 2005-11-23 18:57 millert
3754 * ldap.c: Support comments that start in the middle of a line
3756 2005-11-23 18:56 millert
3758 * configure.in, configure: Define LDAP_DEPRECATED until we start
3759 using ldap_get_values_len()
3761 2005-11-18 09:55 millert
3763 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3765 2005-11-17 20:39 millert
3767 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3768 takes an int as an arg so it can be used as a signal handler too.
3770 2005-11-17 20:38 millert
3772 * sudo.c: Make a copy of the shell field in the passwd struct for
3773 NewArgv to avoid a use after free situation after sudo_endpwent()
3776 2005-11-16 20:36 millert
3778 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3779 mkstemp() for those poor souls without it.
3781 2005-11-15 09:25 millert
3783 * env.c: Add PERL5DB to list of environment variables to remove.
3785 2005-11-13 15:49 millert
3787 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3788 function twice with a state cookie use separate check/log
3791 Check more ioctl() calls for failure.
3793 systrace_{read,write} now return the number of bytes read/written
3796 2005-11-13 14:51 millert
3798 * env.c: Add more environment variables to remove; from gentoo
3799 linux Add some comments about what bad env variables go to what
3802 2005-11-11 17:23 millert
3804 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3805 the exec since they free up our cached copy of the passwd
3806 structs, including sudo_user and sudo_runas. Fixes a
3809 2005-11-11 17:19 millert
3811 * visudo.c: Close all fd's before executing editor.
3813 2005-11-11 17:17 millert
3815 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3818 2005-11-11 11:22 millert
3820 * check.c: Fix fd leak when lecture file option is enabled. From
3823 2005-11-07 11:02 millert
3825 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3826 environment variables to remove. From Charles Morris
3828 2005-11-01 13:24 millert
3830 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3832 2005-10-27 20:35 millert
3834 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3836 2005-08-14 20:32 millert
3838 * sudoers.pod: Fix typo; Toby Peterson
3840 2005-08-02 09:57 millert
3842 * tsgetgrpw.c: Make return buffers static so they don't get
3845 2005-07-27 21:14 millert
3847 * auth/securid5.c: Fix securid5 authentication, was not checking
3848 for ACM_OK. Also add default cases for the two switch()es.
3849 Problem noted by ccon at worldbank
3851 2005-06-26 20:10 millert
3853 * ldap.c: Remove ncat() in favor of just counting bytes and
3854 pre-allocating what is needed.
3856 2005-06-26 19:44 millert
3858 * ldap.c: Fix up some comments Add missing fclose() for the
3861 2005-06-26 19:38 millert
3863 * ldap.c: align struct ldap_config
3865 2005-06-26 19:37 millert
3867 * ldap.c: use LINE_MAX for max conf file line size
3869 2005-06-26 18:36 millert
3871 * pathnames.h.in: add _PATH_LDAP_SECRET
3873 2005-06-26 18:36 millert
3875 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3877 2005-06-25 18:03 millert
3879 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3882 2005-06-25 17:46 millert
3884 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3885 variable by default.
3887 2005-06-25 16:39 millert
3889 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3890 is safe for LD_PRELOAD
3892 2005-06-25 16:15 millert
3894 * acsite.m4, configure: set need_version=no for all cases; this is
3897 2005-06-25 14:45 millert
3901 2005-06-25 14:33 millert
3903 * configure, configure.in: Add dragonfly
3905 2005-06-25 14:29 millert
3907 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3909 2005-06-25 14:21 millert
3913 2005-06-25 14:20 millert
3915 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3916 ltoptions.m4 ltsugar.m4 ltversion.m4
3918 2005-06-25 14:08 millert
3920 * config.guess, config.sub, ltmain.sh: merge in local changes:
3921 config.guess: o better openbsd support config.sub: o hiuxmpp
3922 support ltmain.sh o remove requirement that libs must begin with
3923 "lib" o don't print a bunch of crap about library installs o
3926 2005-06-25 14:05 millert
3928 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3930 2005-06-25 14:04 millert
3932 * configure.in: Update with autoupdate and make minor changes for
3935 2005-06-22 23:19 millert
3937 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3939 2005-06-22 23:04 millert
3941 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3942 emul/timespec.h: Move declatation of struct timespec to its own
3943 include files for systems without it since it needs time_t
3946 2005-06-22 22:57 millert
3948 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3950 2005-05-27 01:59 millert
3952 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3953 give pam_limits a chance to run. Idea from Karel Zak.
3955 2005-04-24 19:24 millert
3957 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3958 to silence warnings on Solaris
3960 2005-04-24 19:22 millert
3962 * parse.c: include grp.h to silence a warning on Solaris
3964 2005-04-23 15:10 millert
3966 * parse.c: Fix printing of += and -= defaults.
3968 2005-04-17 01:21 millert
3970 * mon_systrace.c: Sanity check number of syscall args with argsize.
3971 Not really needed but a little paranoia never hurts.
3973 2005-04-17 01:18 millert
3975 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3976 void * Use int, not size_t/ssize_t for systrace lengths (since it
3979 2005-04-16 03:14 millert
3981 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3982 collsion w/ error Check rval of decode_args() and update_env()
3983 Remove improper setting of validated variable
3985 2005-04-11 21:37 millert
3987 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3988 file if def_ignore_sudoers is not set and call LDAP versions from
3989 display_privs() and display_cmnd() instead of directly from
3990 main(). Because of this we need to defer closing the ldap
3991 connection until after -l processing has ocurred and we must pass
3992 in the ldap pointer to display_privs() and display_cmnd().
3994 2005-04-11 21:33 millert
3996 * ldap.c: Reorganize LDAP code to better match normal sudoers
3997 parsing. Instead of storing strings for later printing in -l
3998 mode we do another query since the authenticating user and the
3999 user being listed may not be the same (the new -U flag). Also
4000 add support for "sudo -l command".
4002 There is still a fair bit if duplicated code that can probably be
4005 2005-04-11 00:37 millert
4007 * ldap.c: Replace pass variable with do_netgr for better
4010 2005-04-10 23:49 millert
4012 * ldap.c: use DPRINTF macro
4014 2005-04-10 23:18 millert
4016 * ldap.c: estrdup, not strdup
4018 2005-04-10 17:44 millert
4020 * parse.c: Add macro to test if the tag changed to improve
4023 2005-04-10 17:40 millert
4025 * parse.c: Avoid printing defaults header if there are no defaults
4028 2005-04-10 15:29 millert
4030 * glob.c: Fix a warning on systems without strlcpy().
4032 2005-04-10 13:32 millert
4034 * pwutil.c: Use macros where possible for sudo_grdup() like
4037 2005-04-08 17:04 millert
4039 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
4040 add in tv_usec / 1000000.
4042 2005-03-29 23:38 millert
4044 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
4045 should be 1, not 0 for Heimdal. From Alex Plotnick.
4047 2005-03-29 09:29 millert
4049 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
4050 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4051 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
4052 Add efree() for consistency with emalloc() et al. Allows us to
4053 rely on C89 behavior (free(NULL) is valid) even on K&R.
4055 2005-03-28 22:33 millert
4057 * parse.c, sudo.c: Move initgroups() for -U option into
4058 display_privs() so group matching in sudoers works correctly.
4060 2005-03-26 21:34 millert
4062 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
4063 with sudo_ldap_close.
4065 2005-03-26 20:01 millert
4067 * parse.c: Add missing space in Defaults printing
4069 2005-03-25 12:36 millert
4071 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
4072 size computaton and string copies.
4074 2005-03-18 22:08 millert
4076 * pwutil.c: Zero old pw_passwd before replacing with version from
4079 2005-03-18 22:07 millert
4081 * configure, configure.in: Only attempt shadow password detection
4082 if PAM is not being used Add shadow_* variables to make shadow
4083 password detection more generic.
4085 2005-03-18 21:46 millert
4087 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
4090 2005-03-12 19:27 millert
4092 * sudoers.pod: use a non-breaking space to avoid a double space
4095 2005-03-12 19:26 millert
4097 * sudo.pod: commna, not colon after e.g.
4099 2005-03-12 18:43 millert
4101 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
4102 at least uses __execve() internally.
4104 2005-03-12 12:29 millert
4106 * indent.pro: Match reality a bit more.
4108 2005-03-12 12:27 millert
4110 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
4112 2005-03-11 23:42 millert
4114 * pwutil.c: Store shadow password after making a local copy of
4115 struct passwd in case normal and shadow routines use the same
4116 internal buffer in libc.
4118 2005-03-10 20:57 millert
4120 * alloc.c, logging.c: Make varargs usage consistent with the rest
4123 2005-03-10 10:09 millert
4125 * sudo_noexec.c: Wrap more of the exec family since on Linux the
4126 others do not appear to go through the normal execve() path.
4128 2005-03-10 09:57 millert
4130 * visudo.c: make print_unused static like proto says
4132 2005-03-10 09:55 millert
4134 * glob.c: silence a warning on K&R systems
4136 2005-03-10 09:51 millert
4138 * parse.c, alias.c, error.c: make this build in K&R land
4140 2005-03-07 22:21 millert
4144 2005-03-05 22:46 millert
4146 * ldap.c: return(foo) not return foo optimize _atobool() slightly
4148 2005-03-05 22:40 millert
4150 * ldap.c: Use TRUE/FALSE
4152 2005-03-05 22:31 millert
4154 * ldap.c: Reformat to match the rest of sudo's code.
4156 2005-03-05 19:33 millert
4158 * sudo.pod: I am the primary author
4160 2005-02-22 22:28 millert
4162 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
4163 confused too many people and really isn't needed in a
4164 configure-oriented world.
4166 2005-02-22 22:28 millert
4168 * INSTALL: alternate -> alternative
4170 2005-02-22 22:26 millert
4172 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
4173 have issues with TCSAFLUSH.
4175 2005-02-22 22:16 millert
4177 * toke.l: Allow leading blanks before Defaults and Foo_Alias
4180 2005-02-22 22:14 millert
4182 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4184 2005-02-20 13:00 millert
4186 * sudoers.pod: env_keep overrides set_logname
4188 2005-02-20 12:57 millert
4190 * env.c: Fix disabling set_logname and make env_keep override
4193 2005-02-20 12:28 millert
4195 * compat.h, config.h.in, configure, configure.in: No longer need
4198 2005-02-20 11:48 millert
4200 * env.c, sudo.c: Just clean the environment once. This assumes
4201 that any further setenv/putenv will be able to handle the fact
4202 that we replaced environ with our own malloc'd copy but all the
4203 implementations I've checked do.
4205 2005-02-15 23:16 millert
4207 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4208 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4211 2005-02-13 00:33 millert
4213 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4214 and prev_user into init_vars() since user_shell at least is
4217 2005-02-12 18:51 millert
4219 * Makefile.in: fix devel builds
4221 2005-02-12 18:46 millert
4223 * check.c, sudo.c: Fix some printf format mismatches on error.
4225 2005-02-12 18:33 millert
4227 * configure, gram.c, toke.c: regen
4229 2005-02-12 17:56 millert
4231 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4232 alloc.c, check.c, closefrom.c, compat.h, configure.in,
4233 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4234 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4235 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4236 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4237 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4238 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4239 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4240 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4241 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4242 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4243 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4244 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4245 emul/utime.h: Update copyright years.
4247 2005-02-12 16:46 millert
4249 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4252 2005-02-12 16:16 millert
4254 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4257 2005-02-11 18:06 millert
4259 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4260 to warn about printf-like format mismatches
4262 2005-02-10 00:16 millert
4264 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4265 generated from cvs logs
4267 2005-02-10 00:03 millert
4269 * set_perms.c: Use warning/error instead of perror/fatal.
4271 2005-02-09 23:13 millert
4273 * config.guess: Update OpenBSD section
4275 2005-02-09 23:10 millert
4277 * UPGRADE: Add upgrading noted for 1.7
4279 2005-02-09 23:00 millert
4281 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4282 environment, just prune out entries based on the env_delete and
4283 env_check lists. Base building up the new environment on the
4284 current environment and the variables we removed initially.
4286 2005-02-09 22:23 millert
4288 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4289 if locales are supported, just to be safe.
4291 2005-02-09 22:19 millert
4293 * toke.c, toke.l: Cast argument to ctype functions to unsigned
4296 2005-02-07 22:56 millert
4298 * env.c: correct value for DID_USER
4300 2005-02-07 22:55 millert
4302 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4303 <compat.h> not "compat.h"
4305 2005-02-07 22:51 millert
4307 * defaults.c: Reset the environment by default.
4309 2005-02-07 22:50 millert
4311 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4312 malloc an new vector if execve() fails.
4314 2005-02-06 23:16 millert
4316 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4317 execve(2) and wrap the command in sh if we get ENOEXEC.
4319 2005-02-05 23:01 millert
4321 * sudo_noexec.c: Only include time.h on systems that lack struct
4322 timespec which gets defind in compat.h (using time_t).
4324 2005-02-05 22:59 millert
4326 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4327 w/o struct timespec.
4329 2005-02-05 22:56 millert
4331 * configure, compat.h, config.h.in, configure.in: use bcopy on
4334 2005-02-05 22:31 millert
4336 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4337 so limit its use to gcc >= 2.8.
4339 2005-02-05 21:21 millert
4341 * Makefile.in: Add explicit rule to build sudo_noexec.lo
4343 2005-02-05 17:56 millert
4345 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4346 pointed out a bunch of missed dependencies.
4348 2005-02-05 13:18 millert
4350 * TROUBLESHOOTING: Help for PAM when account section is missing
4352 2005-02-05 13:01 millert
4354 * auth/pam.c: Give user a clue when there is a missing "account"
4355 section in the PAM config.
4357 2005-02-05 10:22 millert
4359 * auth/pam.c: Better error handling.
4361 2005-02-05 09:57 millert
4363 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4364 CPPFLAGS so it takes effect as early as possible. Silences a
4365 warning about isblank() on linux.
4367 2005-02-04 21:49 millert
4369 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4370 number of args to be passed to log_error().
4372 2005-01-31 23:03 millert
4374 * pwutil.c: Don't try to destroy a tree we didn't create.
4376 2005-01-27 10:42 millert
4378 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4379 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4380 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4381 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4382 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4383 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4384 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4385 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4386 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4387 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4388 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4389 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4392 2005-01-21 10:34 millert
4394 * configure, configure.in: Fix error message when mixing invalid
4397 2005-01-21 10:32 millert
4399 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4400 default if the OS supports them.
4402 2005-01-21 10:29 millert
4404 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4406 2005-01-21 10:29 millert
4408 * configure.in: Better checking for conflicting authentication
4409 methods Display the authentication methods used at the end of
4410 configure Rename --with-authenticate -> --with-aixauth Use
4411 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4412 default on systems that support them unless disabled. Add
4413 OSMAJOR variable that replaces old OSREV; now OSREV has full
4416 2005-01-17 19:40 millert
4418 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4420 2005-01-14 13:35 millert
4422 * configure.in: Replace: test -n "$FOO" || FOO="bar"
4424 With: : ${FOO='bar'}
4426 2005-01-09 18:58 millert
4428 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4429 only call private passwd/group routines when using a nonstandard
4432 2005-01-06 10:34 millert
4436 2005-01-05 22:16 millert
4438 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4439 fields so add getpwent()/getgrent() functions and call those.
4441 2005-01-05 17:29 millert
4443 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4445 2005-01-05 17:18 millert
4447 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4448 in the clean target Add devdir variable and use it to specify the
4449 path to parser sources
4451 2005-01-05 17:17 millert
4455 2005-01-05 17:17 millert
4457 * configure.in: Add a devdir variables that defaults to $(srcdir)
4458 and is set to . if --devel was specified. Allows for proper
4459 dependecies building the parser.
4461 2005-01-05 14:50 millert
4463 * testsudoers.c: Add support for custom passwd/group files.
4465 2005-01-05 14:47 millert
4467 * Makefile.in: Build private copy of pwutil.o for testsudoers with
4468 MYPW defined so it uses our own passwd/group routines.
4470 2005-01-05 14:46 millert
4472 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4473 sudo_setspent/sudo_endspent stubs instead. We can now just use
4474 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4475 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4477 2005-01-05 14:44 millert
4479 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4480 Use global buffers for passwd/group structs Rename functions from
4483 2005-01-05 14:43 millert
4485 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4487 2005-01-05 14:42 millert
4489 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4492 2005-01-05 14:41 millert
4494 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4495 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4496 are no longer needed. Also add preprocessor magic to use private
4497 versions of the passwd and group routines if MYPW is defined (for
4498 use by testsudoers).
4500 2005-01-04 22:40 millert
4502 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4503 if there are fields we don't handle they end up as 0.
4505 2005-01-04 20:10 millert
4507 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4510 2005-01-04 20:09 millert
4512 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4513 variables for better readability.
4515 2005-01-04 20:08 millert
4517 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4518 that support alternate passwd and group files.
4520 2005-01-04 20:07 millert
4522 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4523 its own file. This allows visudo and testsudoers to use the
4526 2005-01-01 19:31 millert
4528 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4529 based on the terminal width.
4531 2005-01-01 12:41 millert
4533 * match.c, visudo.c, testsudoers.c: Only check group vector in
4534 usergr_matches() if we are matching the invoking or list user.
4535 Always check the group members, even if there was a group vector.
4537 2004-12-17 17:24 millert
4539 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4541 2004-12-17 13:12 millert
4543 * CHANGES, TODO: checkpoint
4545 2004-12-16 14:20 millert
4547 * sudo.c: sort usage
4549 2004-12-16 14:20 millert
4551 * sudo.pod: Sort command line options
4553 2004-12-16 13:33 millert
4555 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4556 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4557 start closing at a point other than 3. Add closefrom_override
4558 sudoers option and -C sudo flag to allow the user to specify a
4559 different closefrom starting point.
4561 2004-12-16 13:25 millert
4563 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4565 2004-12-15 22:55 millert
4567 * LICENSE: no more UCB strcasecmp
4569 2004-12-15 22:54 millert
4571 * strcasecmp.c: replace BSD licensed one with version derived from
4574 2004-12-09 21:07 millert
4576 * sudo.c: Fix last commit.
4578 2004-12-09 19:26 millert
4580 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4581 to /dev/null if not.
4583 2004-12-03 13:57 millert
4585 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4587 2004-12-03 13:52 millert
4589 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4590 Use TIME_WITH_SYS_TIME
4592 2004-12-03 13:48 millert
4594 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4596 2004-12-02 11:18 millert
4598 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4599 being set unconditionally on darwin. From Toby Peterson.
4601 2004-12-02 10:40 millert
4603 * getspwuid.c: Check rbinsert() return value. In the case of faked
4604 up entries there is usually a negative response cached that we
4607 In pwfree() don't try to zero out a NULL pw_passwd pointer.
4609 2004-12-02 09:53 millert
4611 * mon_systrace.c: Use the double fork trick to avoid the monitor
4612 process being waited for by the main program run through sudo.
4614 2004-11-29 12:52 millert
4616 * sudo.c: Call initgroups() in -U mode so group matches work
4619 2004-11-29 12:34 millert
4621 * def_data.h, mkdefaults: Don't print a trailing comma for the last
4622 entry in enum def_tupple
4624 2004-11-28 16:08 millert
4626 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4627 lecture, listpw and verifypw are used in boolean context.
4629 2004-11-28 16:05 millert
4631 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4632 context should be "all", not "any".
4634 2004-11-26 14:21 millert
4636 * def_data.in, defaults.c: Allow tuples that can be used as
4637 booleans to be used as boolean TRUE. In this case the 2nd
4638 possible value of the tuple is used for TRUE.
4640 2004-11-25 12:23 millert
4642 * configure, configure.in: Correct the test for 2-parameter
4645 2004-11-25 12:20 millert
4647 * sudo.h: Add strub struct definitions for passwd, timeval and
4650 2004-11-25 12:09 millert
4652 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4653 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4654 fix a typo in the gettimeofday check.
4656 2004-11-24 16:44 millert
4658 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4659 for visudo and testsudoers.
4661 2004-11-24 16:31 millert
4663 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4664 option to use in conjunction with -l instead of -u. Add support
4665 for "sudo -l command" to test a specific command.
4667 2004-11-24 16:28 millert
4669 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4670 it has not been set. Previously it was set by sudo "ALL" in the
4671 parser but at that point the fully-qualified pathname has not yet
4674 2004-11-23 18:18 millert
4676 * parse.c, testsudoers.c: Correctly handle multiple privileges per
4677 userspec and runas inheritence.
4679 2004-11-21 14:09 millert
4681 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4684 2004-11-19 18:04 millert
4686 * toke.c, toke.l: make per-command defaults work with sudoedit
4688 2004-11-19 18:00 millert
4690 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4691 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4692 approriate defaults variable.
4694 2004-11-19 17:09 millert
4696 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4697 Document per-command Defaults.
4699 2004-11-19 16:35 millert
4701 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4702 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4703 command-specific Defaults entries. E.g.
4704 Defaults!/usr/bin/vi noexec
4706 2004-11-19 15:03 millert
4708 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4709 occurence of user_matches() -> runas_matches() missed previously
4710 runas_matches(), host_matches() and cmnd_matches() only really
4711 need to pass in a list of members. user_matches() still needs to
4712 pass in a passwd struct because of "sudo -l"
4714 2004-11-19 14:46 millert
4716 * parse.c: Check def_authenticate, def_noexec and def_monitor when
4717 setting return flags. XXX May be better to just set the defaults
4718 directly and get rid of those flags.
4720 2004-11-19 13:39 millert
4722 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4723 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4724 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4725 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4726 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4727 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4728 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4729 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4730 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4731 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4732 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4733 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4734 <config.h> Not: #include "config.h" That way we get the correct
4735 config.h when build dir != src dir
4737 2004-11-19 13:30 millert
4739 * Makefile.in: Back out part of rev 1.263; fix -I order
4741 2004-11-19 13:12 millert
4743 * toke.c, toke.l: More robust parsing if #include; could be much
4746 2004-11-19 12:55 millert
4748 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4751 2004-11-19 12:35 millert
4753 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4754 routines out into their own file.
4756 2004-11-19 12:32 millert
4758 * error.h: __attribute__ is already defined in compat.h
4760 2004-11-19 12:30 millert
4762 * visudo.c: quit() should not be __noreturn__ as it is non-void on
4765 2004-11-19 12:24 millert
4767 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4768 error/warning functions like err/warn but that call an additional
4769 cleanup routine in the error case. This means we no longer need
4770 to compile a special version of alloc.o for visudo.
4772 2004-11-19 11:54 millert
4774 * parse.h: Clarify comments about the data structures
4776 2004-11-18 15:28 millert
4778 * visudo.c: Add support for VISUAL and EDITOR containing command
4779 line args. If env_editor is not set any args in VISUAL and
4780 EDITOR are ignored. Arguments are also now supported in
4783 2004-11-17 14:25 millert
4785 * parse.h: alias_matches() is no more
4787 2004-11-17 14:09 millert
4789 * CHANGES, TODO: sync
4791 2004-11-17 13:19 millert
4793 * Makefile.in: When regenerating the parser, don't replace gram.h
4794 unless it has changed.
4796 2004-11-17 11:56 millert
4798 * Makefile.in: remove Makefile.binary for distclean
4800 2004-11-17 11:18 millert
4802 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4803 to make sure we can't overflow new_env.
4805 2004-11-17 10:33 millert
4807 * sudo_edit.c: paranoia when stripping trailing slashes from
4810 2004-11-16 19:00 millert
4812 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4814 2004-11-16 18:59 millert
4816 * configure, configure.in, config.h.in, sudo.c: Add configure check
4819 2004-11-16 18:55 millert
4821 * ldap.c: Use supplementary group vector in struct sudo_user.
4823 2004-11-16 18:40 millert
4825 * match.c: Only do string comparisons on the group members if there
4826 is no supplemental group list.
4828 2004-11-16 16:10 millert
4830 * CHANGES, TODO: sync
4832 2004-11-16 15:54 millert
4834 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4835 trailing slash so chop off any trailing slashes we see and add an
4838 2004-11-16 12:02 millert
4840 * match.c: remove bogus XXX comment
4842 2004-11-16 11:10 millert
4844 * match.c: Get rid of alias_matches and correctly fall through to
4845 the non-alias cases when there is no alias with the specified
4848 2004-11-16 10:47 millert
4850 * getspwuid.c: Cache non-existent passwd/group entries too.
4852 2004-11-16 10:45 millert
4856 2004-11-15 23:32 millert
4858 * getspwuid.c: fix typo
4860 2004-11-15 23:24 millert
4862 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4863 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4864 Implement group caching and use the passwd and group caches
4867 2004-11-15 14:43 millert
4869 * match.c: Properly negate the return value of alias_matches() when
4872 2004-11-15 14:38 millert
4874 * match.c: Make hostname_matches() return TRUE for a match, else
4875 FALSE like the caller expects.
4877 2004-11-15 13:24 millert
4879 * Makefile.in: Add missing dependencies on gram.h
4881 2004-11-15 13:06 millert
4883 * match.c: Use runas_matches in alias_matches() now that we have
4886 2004-11-15 13:00 millert
4888 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4890 2004-11-15 12:33 millert
4892 * gram.y, match.c: Use ALIAS for the member type when storing an
4893 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4894 match.c relies on the more generic type. Expand runas_matches
4895 instead of calling user_matches() inside of it since
4896 user_matches() looks up USERALIASes, not RUNASALIASes.
4898 2004-11-15 12:05 millert
4900 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4903 2004-11-15 10:53 millert
4905 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4906 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4907 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4908 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4909 local error/warning functions like err/warn but that call an
4910 additional cleanup routine in the error case. This means we no
4911 longer need to compile a special version of alloc.o for visudo.
4913 2004-11-15 09:59 millert
4915 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4916 since the latter checks for "#uid".
4918 2004-11-15 09:53 millert
4920 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4921 db entries in 2 reb-black trees; one indexed by uid, the other by
4922 user name. The data returned from the cache should be considered
4923 read-only and is destroyed by sudo_endpwent().
4925 2004-11-15 09:50 millert
4927 * match.c: add cast to uid_t
4929 2004-11-15 09:49 millert
4931 * gram.y: missing free in alias_destroy
4933 2004-11-15 09:49 millert
4935 * redblack.c: Can't use rbapply() for rbdestroy since the
4936 destructor is passed a data pointer, not a node pointer.
4938 2004-11-14 23:06 millert
4940 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4941 versions of setpwent() and endpwent() that set/end the shadow
4944 2004-11-14 22:55 millert
4946 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4947 visudo.c: Store aliases in a red-black tree.
4949 2004-11-14 22:52 millert
4951 * Makefile.in, redblack.c, redblack.h: red-black tree
4954 2004-11-14 22:37 millert
4956 * visudo.c: Edit all sudoers file if there were unused or undefined
4957 aliases and we are in strict mode.
4959 2004-11-12 11:19 millert
4961 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4962 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4963 Bring back the "secure_path" Defaults option now that Defaults
4964 take effect before the path is searched.
4966 2004-11-11 12:22 millert
4968 * logging.c, parse.c: A user can always list their own entries,
4969 even with -u. Better error message when failing to list another
4972 2004-11-11 12:12 millert
4974 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4975 entries is now "-u otheruser -l". Only root or users with sudo
4976 "ALL" may list other user's entries.
4978 2004-11-11 11:30 millert
4980 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4983 2004-11-11 11:25 millert
4985 * env.c: strip CDPATH too
4987 2004-11-11 11:20 millert
4989 * env.c: strip exported bash functions from the environment.
4991 2004-10-27 12:16 millert
4993 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4994 variables for real commands and sudoedit. This avoids a
4995 confusing message when a user tries "sudo -l" or "sudo -v" and is
4998 2004-10-27 12:06 millert
5000 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
5003 2004-10-26 18:39 millert
5005 * logging.c: Convert some bitwise AND to ISSET
5007 2004-10-26 18:29 millert
5009 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
5011 2004-10-26 18:29 millert
5013 * CHANGES, TODO: sync
5015 2004-10-26 18:28 millert
5017 * BUGS: new parser fixes most of the outstanding bugs
5019 2004-10-26 18:27 millert
5023 2004-10-26 18:26 millert
5025 * visudo.c: Rework for the new parser. Now checks for unused
5028 2004-10-26 18:25 millert
5030 * testsudoers.c: Rewrite for the new parser. Now supports a -d
5031 flag (dump) and adds a -h flag (host). It now defaults to the
5032 local hostname unless otherwise specified.
5034 2004-10-26 18:23 millert
5036 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
5039 2004-10-26 18:22 millert
5041 * sudo.c: Update for new parse. We now call find_path() *after* we
5042 have updated the global defaults based on sudoers. Also adds
5043 support for listing other user's privs if you are root.
5045 2004-10-26 18:21 millert
5047 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
5050 2004-10-26 18:20 millert
5052 * logging.c, logging.h: Add NO_STDERR flag.
5054 2004-10-26 18:19 millert
5056 * ldap.c: Split sudo_ldap_check() into three pieces:
5057 sudo_ldap_open(), udo_ldap_update_defaults() and
5058 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
5059 default options, find the command in the user's path, and then
5060 check whether the user is allowed to run it. The important thing
5061 here is that the default runas user may be specified as a default
5062 option and that needs to be set before we search for the command.
5064 2004-10-26 18:17 millert
5066 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
5069 2004-10-26 18:16 millert
5071 * defaults.h: Add prototype for update_defaults()
5073 2004-10-26 18:16 millert
5075 * defaults.c: Don't warn about line numbers now that we operate on
5076 a set of data structures (or LDAP) and not a file.
5078 2004-10-26 18:15 millert
5080 * config.h.in: No long use lsearch()
5082 2004-10-26 18:14 millert
5084 * Makefile.in: Update for new and changed file names.
5086 2004-10-26 18:14 millert
5088 * LICENSE: no more BSD lsearch.c
5090 2004-10-26 18:14 millert
5092 * match.c: foo_matches() routines now live in match.c Added
5093 user_matches(), runas_matches(), host_matches(), cmnd_matches()
5094 and alias_matches() that operate on the parsed sudoers file.
5096 2004-10-26 18:12 millert
5098 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
5099 -> switch_buffer() WORD no longer needs to exclude '@' kill
5102 2004-10-26 18:10 millert
5104 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
5105 Rewritten parser that converts sudoers into a set of data
5106 structures. This eliminates ordering issues and makes it
5107 possible to apply sudoers Defaults entries before searching for
5110 2004-10-26 18:09 millert
5112 * configure.in, lsearch.c, emul/search.h: We won't be using
5113 lsearch() any longer.
5115 2004-10-26 18:07 millert
5117 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
5120 2004-10-26 16:09 millert
5122 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5123 visudo.man.in: regen
5125 2004-10-26 16:09 millert
5127 * visudo.pod: Update warnings to match new visudo
5129 2004-10-26 16:08 millert
5131 * sudoers.pod: The new parser doesn't have the old ordering
5134 2004-10-26 16:08 millert
5136 * sudo.pod: Document that -l now takes an optional username
5139 2004-10-25 13:44 millert
5141 * RUNSON: AIX 5.2.0.0 works
5143 2004-10-25 13:38 millert
5145 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
5146 instead. Fixes a compilation problem with Solaris 9's native
5149 Set FLAG_MONITOR when needed.
5151 2004-10-23 13:32 millert
5153 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
5154 match the traced process. Fixes relative paths.
5156 2004-10-21 12:31 millert
5158 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
5160 2004-10-13 12:52 millert
5162 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
5163 requires set_reuid() or setresuid()
5165 2004-10-13 12:46 millert
5167 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
5168 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
5169 saved uids; they aren't worth bothering with.
5171 2004-10-07 16:23 millert
5173 * glob.c: remove call to issetugid()
5175 2004-10-07 14:57 millert
5177 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5178 wildcards. Now that we use glob() the bug is fixed.
5180 2004-10-07 14:52 millert
5182 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5183 and stat each result that matches the basename of the user's
5184 command. This makes "cd /usr/bin ; sudo ./blah" work when
5185 sudoers allows /usr/bin/blah. Fixes bug #143.
5187 2004-10-07 14:27 millert
5189 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5190 for extended glob (GLOB_TILDE and GLOB_BRACE)
5192 2004-10-07 12:59 millert
5194 * config.h.in, configure, configure.in: Check for a glob() that
5195 supports GLOB_BRACE and GLOB_TILDE
5197 2004-10-07 12:51 millert
5199 * LICENSE: reference glob
5201 2004-10-07 12:50 millert
5203 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5204 some unneeded extensions removed.
5206 2004-10-05 17:26 millert
5208 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5209 fail. It probably means we are out of space in the stack gap...
5211 2004-10-05 17:20 millert
5215 2004-10-05 16:53 millert
5217 * mon_systrace.c: Take a stab at ldap sudoers support here.
5219 2004-10-05 15:13 millert
5221 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5222 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5223 inadvertanly kill itself.
5225 2004-10-05 14:21 millert
5227 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5229 2004-10-05 14:15 millert
5231 * mon_systrace.c: When modifying the environment, don't replace
5232 envp when we can get away with just rewriting pointers in the
5235 2004-10-05 13:46 millert
5237 * mon_systrace.c, mon_systrace.h: Add environment updating via
5238 STRIOCINJECT (if available).
5240 2004-10-05 10:22 millert
5242 * sudoers.cat, sudoers.man.in: regen
5244 2004-10-04 16:15 millert
5248 2004-10-04 16:15 millert
5250 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5253 2004-10-04 12:09 millert
5255 * mon_systrace.c: Include file is now mon_systrace.h
5257 2004-10-04 12:07 millert
5259 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5260 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5261 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5262 tracing, it is now "monitoring" which should be more a obvious
5263 name to non-hackers.
5265 2004-10-01 15:06 millert
5267 * mon_systrace.c, mon_systrace.h: Fix some XXX
5269 2004-10-01 14:30 millert
5271 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5272 1024 as the max # of entries (the max that systrace(4) allows).
5274 Only need to use SYSTR_POLICY_ASSIGN once
5276 Change check_syscall() -> find_handler() and have it return the
5277 handler instead of just running it. We need this since handler
5278 now have two parts: one part that generates and answer and
5279 another that gets called after the answer is accepted (to do
5282 Add some missing check_exec for emul execv
5284 2004-10-01 10:58 millert
5286 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
5289 2004-10-01 10:47 millert
5291 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5293 2004-09-30 20:46 millert
5295 * Makefile.in: add trace_systrace.o dependency
5297 2004-09-30 19:00 millert
5299 * configure, configure.in: Also look for systrace.h in
5302 2004-09-30 18:27 millert
5304 * mon_systrace.c, mon_systrace.h: Move all struct defs and
5305 prototypes into trace_systrace.h and mark all but
5306 systace_attach() static.
5308 2004-09-30 18:14 millert
5310 * mon_systrace.c, mon_systrace.h: Add support for tracing
5311 emulations. At the moment, all emulations are compiled in. It
5312 might make sense to #ifdef them in the future, though this
5313 impeeds readability.
5315 2004-09-30 17:07 millert
5317 * Makefile.in, configure.in, configure: rename systrace.c ->
5320 2004-09-30 15:58 millert
5322 * parse.yacc: Allow this to build with a K&R compiler again
5324 2004-09-30 13:58 millert
5328 2004-09-30 13:55 millert
5330 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5332 2004-09-30 13:44 millert
5334 * visudo.c: Exit() takes a negative value to indicate it was not
5337 2004-09-30 13:25 millert
5339 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5340 visudo.man.in: regen
5342 2004-09-30 13:22 millert
5344 * Makefile.in, visudo.c: Define Err() and Errx() that are like
5345 err() and errx() but call Exit() instead of exit(). Build
5346 private copy of alloc.o for visudo that calls Err() and Errx().
5348 2004-09-29 15:22 millert
5352 2004-09-29 15:22 millert
5356 2004-09-29 14:41 millert
5358 * visudo.c: Overhaul visudo for editing multiple files: o visudo
5359 has been broken out into functions (more work needed here) o
5360 each file is now edited before sudoers is re-parsed o if a
5361 #include line is added that file will be edited too
5363 TODO: o cleanup temp files when exiting via err() or errx() o
5364 continue breaking things out into separate functions
5366 2004-09-29 14:36 millert
5368 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5369 arg to open_sudoers that open_sudoers can use to indicate to the
5370 caller that the fd should not be closed when it is done with it.
5371 To be used by visudo to keep locked fds from being closed
5372 prematurely (and thus losing the lock).
5374 2004-09-29 14:33 millert
5376 * parse.yacc, sudo.c: Add errorfile global that contains the name
5377 of the file that caused the error.
5379 2004-09-29 14:30 millert
5381 * parse.lex: return COMMENT to yacc grammar for a #include line
5383 2004-09-29 14:29 millert
5385 * parse.lex: Remove us of unput() in favor of yyless() which is
5388 2004-09-29 14:28 millert
5390 * parse.yacc: Allow an empty sudoers file.
5392 2004-09-28 16:50 millert
5394 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5395 doesn't do it for us.
5397 2004-09-28 14:37 millert
5401 2004-09-28 14:36 millert
5403 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5404 shadow the "quiet" global.
5406 2004-09-28 14:33 millert
5408 * visudo.c: If a sudoers file includes other files, edit those too.
5409 Does not yes deal with creating the new includes files itself.
5411 2004-09-28 14:31 millert
5413 * testsudoers.c: init_parser now takes a path
5415 2004-09-28 14:31 millert
5417 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5418 dealing with multiple sudoers files: o init_parser() now takes a
5419 path used to populate the sudoers global o the sudoers global is
5420 used to print the correct file in yyerror() o when switching to
5421 a new sudoers file, perserve old file name and line number
5423 2004-09-28 14:29 millert
5425 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5426 meaningful now that we can have multiple sudoers files.
5428 2004-09-28 13:52 millert
5430 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5431 sudoers_lookup() so we start at the right file position when
5432 reading include files.
5434 2004-09-27 21:04 millert
5436 * sudoers.pod: document #include
5438 2004-09-27 20:47 millert
5442 2004-09-27 20:47 millert
5444 * parse.lex: Add max depth of 128 for the include stack to avoid
5447 Since yyerror() doesn't stop parsing, pass return values back to
5448 yylex and call yyterminate() on error.
5450 2004-09-27 14:06 millert
5452 * sudoers.pod: document tracing
5454 2004-09-27 14:05 millert
5456 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5459 2004-09-27 12:08 millert
5463 2004-09-27 12:03 millert
5465 * parse.lex: Add support for #include in sudoers (visudo support
5468 2004-09-27 12:02 millert
5470 * parse.yacc: make yyerror()'s argument const
5472 2004-09-27 12:02 millert
5474 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5476 2004-09-27 12:01 millert
5478 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5481 2004-09-26 12:35 millert
5483 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5484 version.h: Crank version
5486 2004-09-26 12:33 millert
5488 * Makefile.in, sudo.psf: Better HP-UX depot construction
5490 2004-09-25 17:08 millert
5492 * mon_systrace.c: o Made children global so check_exec() can lookup
5493 a child. o Replaced uid in struct childinfo with struct passwd *
5494 (for runas) o new_child() now takes a parent pid so the runas
5495 info can be inherited o Added find_child() to lookup a child by
5496 its pid o update_child() now fills in a struct passwd o Converted
5497 the big if/else mess in set_policy to a switch o Syscalls that
5498 change uid are now "ask" so we get SYSTR_MSG_UGID events
5500 2004-09-25 17:01 millert
5502 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5503 to lookup the shadow password. Will be used to a struct passwd
5504 that has the shadow password already filled in.
5506 2004-09-25 16:58 millert
5508 * mon_systrace.c: add missing increment of addr in read_string()
5510 2004-09-25 16:15 millert
5512 * mon_systrace.c: Remove bogus call to update_child() and some
5515 2004-09-25 16:11 millert
5517 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5518 initialized global for simplicity If STRIOCATTACH returns EBUSY
5519 we are already being traced Check for user_args == NULL in
5520 setproctitle() call Add missing calls to STRIOCANSWER
5522 2004-09-25 13:15 millert
5524 * sudo.c: g/c sudo_pwdup proto
5526 2004-09-24 20:21 millert
5528 * Makefile.in, sudo.psf: Add target for building a depot file
5530 2004-09-24 20:07 millert
5532 * mon_systrace.c: trim includes
5534 2004-09-24 14:11 millert
5536 * lex.yy.c, sudo.tab.h: regen
5538 2004-09-24 14:10 millert
5540 * INSTALL: document --with-systrace
5542 2004-09-24 14:10 millert
5544 * config.h.in, configure, configure.in: Add check for setproctitle
5546 2004-09-24 14:09 millert
5548 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5549 it can set the error code
5551 2004-09-24 13:30 millert
5553 * mon_systrace.c: systrace(4) support for sudo. On systems with
5554 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5555 patches) sudo can intercept exec calls and check the exec args
5556 against the sudoers file. In other words, sudo can now control
5557 subcommands and shell escapes.
5559 2004-09-24 13:17 millert
5561 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5563 2004-09-24 13:15 millert
5565 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5566 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5568 2004-09-24 13:13 millert
5570 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5571 close on exec flag instead.
5573 2004-09-24 13:11 millert
5575 * def_data.c, def_data.h, def_data.in: Add trace option
5577 2004-09-23 20:24 millert
5579 * Makefile.in: Add systrace
5581 2004-09-23 20:23 millert
5583 * INSTALL: SunOS /bin/sh blows up with configure
5585 2004-09-23 20:23 millert
5587 * configure, configure.in: Include sys/param.h before systrace.h
5589 2004-09-23 20:15 millert
5593 2004-09-23 20:15 millert
5595 * pathnames.h.in: _PATH_DEV_SYSTRACE
5597 2004-09-23 20:14 millert
5599 * configure.in: line up options in --help
5601 2004-09-23 20:11 millert
5603 * config.h.in, configure.in: Add --with-systrace
5605 2004-09-23 13:35 millert
5609 2004-09-23 13:35 millert
5611 * aclocal.m4, configure.in: make this work with autoconf-2.59
5613 2004-09-16 12:58 millert
5615 * sudo_edit.c: Simplify logic around open & stat of files and do
5616 sanity on edited file even if we lack fstat (still racable but
5619 2004-09-15 18:47 millert
5621 * HISTORY: Add support url
5623 2004-09-15 16:11 millert
5625 * Makefile.in: versino 1.6.8p1
5627 2004-09-15 15:20 millert
5629 * CHANGES: more changes for 1.6.8p1
5631 2004-09-15 15:18 millert
5633 * version.h: 1.6.8p1
5635 2004-09-15 12:16 millert
5637 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5638 something other than a regular file.
5640 2004-09-14 20:55 aaron
5644 2004-09-14 20:21 aaron
5646 * INSTALL: document --with-ldap-conf-file
5648 2004-09-14 17:43 millert
5650 * CHANGES, ins_csops.h: political correctness strikes again
5652 2004-09-14 15:09 millert
5656 2004-09-12 19:50 millert
5658 * Makefile.binary.in, Makefile.in: Install sudoedit man link
5660 2004-09-12 14:25 millert
5662 * INSTALL: Update PAM note and mention where HP-UX users can
5663 download gcc binaries.
5665 2004-09-12 12:08 millert
5667 * Makefile.in: libtool wants to install stuff from .libs so fake
5668 one up for binary installations.
5670 2004-09-12 11:53 millert
5672 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5673 -f set LIBTOOL correctly
5675 2004-09-12 11:53 millert
5677 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5678 sudoedit link instead of using ln -f
5680 2004-09-12 10:22 millert
5682 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5683 Makefile.binary.in for config.status substitution Add support for
5684 installing noexec bits
5686 2004-09-12 10:21 millert
5688 * Makefile.in: Copy noexec bits into binary dists too No longer use
5689 my old arch script for making binary dists
5691 2004-09-12 09:36 millert
5693 * Makefile.binary: Install sudoedit link.
5695 2004-09-11 12:25 millert
5697 * emul/utime.h: avoid __P so there is no need for compat.h to be
5700 2004-09-11 12:24 millert
5702 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5704 2004-09-10 12:31 millert
5706 * compat.h: Fix Solatis futimes macro
5708 2004-09-09 11:02 millert
5710 * sudo_edit.c: Rename ots -> omtim for improved readability.
5712 2004-09-08 14:38 millert
5714 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5715 keep the temp file open; re-opening it with the invoking user's
5718 2004-09-08 14:36 millert
5722 2004-09-08 14:35 millert
5724 * sudo.cat, sudo.man.in: regen
5726 2004-09-08 14:34 millert
5728 * sudo.pod: back out revision 1.70; it is no long applicable
5730 2004-09-08 11:57 millert
5732 * env.c: Let the loader initialize nep
5734 2004-09-08 11:49 millert
5736 * configure, configure.in, config.h.in: Removed unneed check for
5737 fchown Add check for gettimeofday Move autoheader template stuff
5738 into separate AH_TEMPLATE lines
5740 2004-09-08 11:48 millert
5742 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5743 timespec throughout.
5745 2004-09-08 11:47 millert
5747 * Makefile.in: gettime.[co]
5749 2004-09-08 11:47 millert
5751 * gettime.c: function to return the current time in a struct
5754 2004-09-08 10:51 millert
5756 * utimes.c: Not a darpa-sponsored file.
5758 2004-09-07 16:36 millert
5760 * compat.h, config.h.in, configure, configure.in: Add a check for
5761 struct timespec and provide it for those without.
5763 2004-09-07 15:56 millert
5765 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5766 st_mtim and st_mtimespec and add macros for pulling the mtime sec
5767 and nsec out of struct stat. These are used in sudo_edit() to
5768 better tell whether or not the file has changed.
5770 2004-09-07 15:55 millert
5772 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5773 param to touch() for nsec
5775 2004-09-07 14:06 millert
5777 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5778 have to chown the file later. Only touch() the temp file if we
5779 can do it via the file descriptor. Don't check for modification
5780 of the temp file if we lack fstat(). Catch errors read()ing the
5783 2004-09-07 14:04 millert
5785 * fileops.c: If path is NULL and fd == -1 return -1.
5787 2004-09-07 13:31 millert
5789 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5790 ones we opened so just close those in the child.
5792 2004-09-07 13:14 millert
5794 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5795 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5796 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5797 in touch(), emulating as needed. Not all systems are able to
5798 support setting the times of an fd so touch() takes both an fd
5799 and a file name as arguments.
5801 2004-09-06 21:12 aaron
5805 2004-09-06 16:46 millert
5807 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5808 visudo.man.in: regen
5810 2004-09-06 16:45 millert
5812 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5813 re-order some of the sections to match the order we use in
5816 2004-09-06 15:05 aaron
5818 * env.c: Openldap ~/.ldaprc fix
5820 2004-09-06 12:18 millert
5822 * sudo.pod: Talk about how the editor must write its changes to the
5823 original file and not just use rename(2).
5825 2004-09-06 12:12 millert
5829 2004-09-06 12:11 millert
5831 * sudo_edit.c: Keep the temp file open instead of re-opening after
5832 the editor has exited.
5834 2004-09-06 12:10 millert
5836 * sample.pam: Update for current redhat/fedora core.
5838 2004-09-02 21:56 aaron
5840 * README.LDAP: tls_ examples
5842 2004-09-02 00:03 aaron
5844 * ldap.c: config tls_* options
5846 2004-08-29 11:39 millert
5848 * configure, configure.in: No need for -lcrypt when using pam.
5850 2004-08-26 23:57 millert
5854 2004-08-26 23:44 aaron
5856 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5857 option to override LDAP_CONF
5859 2004-08-26 22:08 aaron
5861 * ldap.c: cleanup debug message
5863 2004-08-26 19:29 aaron
5865 * README.LDAP: more config info
5867 2004-08-24 14:01 millert
5869 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5870 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5871 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5872 longer use gross statics in command_matches(). Also rename some
5873 variables for improved clarity.
5875 2004-08-21 14:33 millert
5877 * INSTALL: document HP's crippled compiler deficiency.
5879 2004-08-21 14:25 millert
5881 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5882 descriptions. Noticed by Norihiko Murase.
5884 2004-08-21 14:20 millert
5886 * configure, configure.in: --with-noexec takes an optional PATH
5889 2004-08-21 14:20 millert
5891 * INSTALL: document --with-noexec
5893 2004-08-17 16:21 millert
5895 * RUNSON, TODO: sync
5897 2004-08-17 15:11 millert
5899 * sudo_edit.c: Better warning message when sudoedit is unable to
5900 write to the destination file.
5902 2004-08-17 14:53 millert
5904 * sudo.cat, sudo.man.in: regen
5906 2004-08-17 14:53 millert
5908 * sudo.pod: Don't italicize the string "sudoedit"
5910 2004-08-16 18:45 millert
5912 * HISTORY: Mention GratiSoft.
5914 2004-08-11 14:29 millert
5916 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5919 2004-08-09 19:04 millert
5921 * config.guess: Correct OpenBSD mips support
5923 2004-08-09 17:28 millert
5925 * config.guess: Add OpenBSD/mips
5927 2004-08-06 23:43 aaron
5929 * README.LDAP: More behavior notes
5931 2004-08-06 23:36 aaron
5933 * README.LDAP: Updates on current behavior
5935 2004-08-06 19:56 millert
5937 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5938 no difference to formatted files).
5940 2004-08-06 19:48 millert
5944 2004-08-06 19:42 millert
5946 * sudo.c: Consistency. Use same error for bad -u #uid when
5947 targetpw is set as we do when a bad -u username is specified.
5949 2004-08-06 19:33 millert
5951 * TODO: Add checksum idea from Steve Mancini
5953 2004-08-06 19:32 millert
5955 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5957 2004-08-06 19:31 millert
5959 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5960 via -u when targetpw is set.
5962 2004-08-06 19:24 millert
5964 * sudo.c: Error out when targetpw is enabled and sudo is run with
5965 -u #uid but #uid does not exist in the passwd database. We can't
5966 do target authentication when the target is not in passwd!
5968 2004-08-05 21:16 millert
5970 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5972 2004-08-05 21:14 millert
5974 * TODO: Some more todo for the next release.
5976 2004-08-05 21:13 millert
5978 * INSTALL: Make it clear that PAM should be used for DCE support
5981 2004-08-05 21:13 millert
5983 * sudoers.pod: o Document problems with wildcards and relative
5984 paths. o Make the order requirements more prominent. o Change a
5985 "set" to "reset" for clarity.
5987 2004-08-05 14:29 millert
5989 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5991 2004-08-02 22:34 aaron
5993 * ldap.c: reflect changes to parse.c
5995 2004-08-02 14:44 millert
5997 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5998 user_cmnd and user_args to command_matches(), just use the
5999 globals there. Since we keep state with statics anyway it is
6000 misleading to pretend that passing in different cmnd and
6001 cmnd_args will work.
6003 2004-08-02 14:40 millert
6005 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
6006 pseudo-commands check for a '/' anywhere in cmnd, not just the
6009 2004-07-30 23:07 aaron
6011 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
6012 <oblin@mandrakesoft.com>
6014 2004-07-30 22:41 aaron
6016 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
6018 2004-07-30 22:06 aaron
6020 * README.LDAP: Sun One schema definition by
6021 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
6023 2004-07-29 11:57 millert
6027 2004-07-23 16:44 millert
6031 2004-07-23 16:43 millert
6033 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
6034 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
6037 2004-07-08 10:20 millert
6039 * CHANGES: PAM change
6041 2004-07-07 21:04 aaron
6043 * ldap.c: Better debugging of ALL command
6045 2004-07-07 20:15 millert
6047 * parse.c: When matching for "sudoedit" in sudoers check both the
6048 command the user typed *and* the command that is listed in the
6051 2004-07-04 19:59 aaron
6053 * ldap.c: Added !command feature
6055 2004-06-28 10:51 millert
6057 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
6060 2004-06-10 23:11 millert
6062 * LICENSE: License is ISC-style, not BSD-style
6064 2004-06-10 20:58 millert
6068 2004-06-10 16:54 millert
6070 * sudo.man.in, sudo.cat: regen
6072 2004-06-10 16:53 millert
6074 * sudo.pod: o Update some out of date bits to reality o Change the
6075 shell promt in examples to bourne-shell style o Clarify some
6076 details o Add a CAVEAT about "sudo cd /foo"
6078 2004-06-10 16:19 millert
6080 * check.c: Don't ask for a password if invoking user == target
6083 2004-06-10 12:32 millert
6085 * sudo.c: typo in comment
6087 2004-06-08 19:20 millert
6089 * sudoers.man.in, sudoers.cat: regen
6091 2004-06-08 19:19 millert
6093 * sudoers.pod: Expand on NOEXEC a little.
6095 2004-06-08 16:20 millert
6099 2004-06-08 15:58 millert
6101 * visudo.man.in, visudo.cat: regen
6103 2004-06-08 15:55 millert
6105 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
6106 for runas_default being set after it has already been used.
6108 2004-06-08 13:53 millert
6110 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
6111 has been set to TRUE or FALSE. This is more readable than
6112 checking for >=0 or < 0. Doesn't change the actual code
6115 2004-06-06 20:11 millert
6117 * sudoers.man.in, sudoers.cat: regen
6119 2004-06-06 20:07 millert
6121 * sudoers, sudoers.pod: Correct description of where Defaults specs
6124 2004-06-06 20:02 millert
6126 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
6127 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
6129 2004-06-06 19:58 millert
6131 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
6132 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
6133 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
6134 Remove trailing spaces, no actual code changes.
6136 2004-06-06 16:22 millert
6138 * parse.yacc: Fix a >=0 that should be <0 that was improperly
6139 converted when UNSPEC was added.
6141 2004-06-06 15:54 millert
6143 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
6144 to UNSPEC, not NOMATCH when resetting it.
6146 2004-06-06 15:39 millert
6148 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
6150 2004-06-05 13:55 millert
6152 * README.LDAP: Update for configure changes
6154 2004-06-05 13:42 millert
6156 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
6157 respectively) and use these in parse.yacc. Also in parse.yacc
6158 initialize the *_matches vars to UNSPEC and add two macros,
6159 SETMATCH and SETNMATCH for use when setting *_matches to a value
6160 that may be NOMATCH/UNSPEC/TRUE/FALSE.
6162 2004-06-05 11:17 millert
6164 * parse.yacc: Initialize runas to -2, not -1 since we need to be
6165 able to distinguish between the initialized value and the value
6166 of a non-match when passing along the runas value to multiple
6169 The result of this is that an unmatched runas is now set to -1,
6170 not 0. This is required now that parse.c treats a FALSE value
6171 for runas as being explicitly denied.
6173 2004-06-03 16:21 millert
6175 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
6177 2004-06-03 12:37 millert
6179 * configure, configure.in: Add tests for what libs we need to link
6180 with for ldap and for whether or not lber.h needs to be
6181 explicitly included.
6183 2004-06-02 20:30 aaron
6185 * ldap.c: Solaris native LDAP build fix
6187 2004-06-01 16:56 millert
6189 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6190 use of an unset variable.
6192 2004-06-01 16:56 millert
6194 * sudo.h: Add prototype for sudo_ldap_list_matches
6196 2004-06-01 16:53 millert
6198 * compat.h, config.h.in, configure, configure.in: Better check for
6199 dirfd macro--we now set HAVE_DIRFD for the macro version too.
6200 Added check for dd_fd in `DIR' if no dirfd is found; this is now
6201 used to confitionally define the dirfd macro in compat.h.
6203 2004-06-01 16:51 millert
6205 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6208 2004-06-01 15:13 millert
6210 * compat.h, config.h.in, configure, configure.in: Add a check for a
6211 dirfd() function (like Linux) and add a dirfd macro in compat.h
6212 if there is no dirfd() function or macro.
6214 2004-06-01 14:59 millert
6216 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6219 2004-06-01 14:30 millert
6221 * CHANGES: Clarify closefrom() note.
6223 2004-06-01 12:51 millert
6225 * parse.c: When checking for a command in the directory, only copy
6228 2004-06-01 12:44 millert
6230 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6231 Solaris closefrom() and only close the descriptors listed
6234 2004-06-01 12:23 millert
6236 * alloc.c: compat.h guarantees INT_MAX is defined.
6238 2004-06-01 12:23 millert
6240 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6241 without it and remove definition of RLIM_INFINITY (now unused).
6243 2004-05-31 21:22 millert
6245 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6246 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6247 since the former is standardized.
6249 2004-05-31 19:18 millert
6253 2004-05-31 19:10 millert
6255 * RUNSON: Add some entries that were mailed in a while ago
6257 2004-05-31 14:16 millert
6259 * closefrom.c: o sysconf returns a long, not an int. o check for
6260 negative return value from sysconf/getdtablesize and use
6261 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6262 without it (a fair guess...)
6264 2004-05-30 12:25 millert
6266 * UPGRADE: Mention change in parse order for RunAs entries.
6268 2004-05-30 12:15 millert
6272 2004-05-29 18:29 millert
6274 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6275 now takes an optional dir as a parameter
6276 o added check for ldap_initialize() and start_tls_s()
6278 2004-05-29 14:54 millert
6280 * README.LDAP: Fix some typos, word choice and formatting issues.
6282 2004-05-28 18:06 millert
6284 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6285 stdio and just use read/write as it is simpler.
6287 2004-05-28 16:27 millert
6289 * configure, configure.in: Remove hack overriding cross-compiler
6290 check. It should no longer be needed.
6292 2004-05-28 16:26 millert
6294 * compat.h: Remove select() compat bits since we no longer use
6297 2004-05-28 16:24 millert
6299 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6300 timeout for systems that don't fully/properly implement select().
6302 2004-05-27 19:14 millert
6306 2004-05-27 19:12 millert
6310 2004-05-27 19:12 millert
6312 * set_perms.c: Deal with systems that have no way of setting the
6313 effective uid such as nsr-tandem-nsk.
6315 2004-05-27 19:01 millert
6317 * configure, configure.in: Define NO_SAVED_IDS if we don't find
6320 2004-05-27 18:21 millert
6322 * config.h.in, configure, configure.in: Add back check for
6323 setreuid() since NSK doesn't have it.
6325 2004-05-27 15:57 millert
6327 * sudoers.cat, sudoers.man.in: regen
6329 2004-05-27 15:56 millert
6331 * BUGS, CHANGES: sync
6333 2004-05-27 15:55 millert
6335 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6336 user was explicitly denied and the command matched. This fixes a
6337 long-standing bug and makes: foo machine = (ALL)
6338 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6340 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6342 2004-05-27 15:52 millert
6344 * sudoers.pod: Clarify mail_noperm
6346 2004-05-19 21:25 aaron
6348 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6350 2004-05-17 18:32 millert
6352 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6353 sudoers.cat, visudo.cat: regen
6355 2004-05-17 18:31 millert
6359 2004-05-17 18:31 millert
6361 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6362 remembers these?) and add a minimal sudoedit example.
6364 2004-05-17 18:21 millert
6366 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6367 filesystem -> file system
6369 2004-05-17 18:19 millert
6371 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6373 2004-05-17 18:10 millert
6377 2004-05-17 17:57 millert
6379 * visudo.pod: remove my email addr
6381 2004-05-17 17:55 millert
6383 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6384 @mansectsu@ everywhere Make man page references links with L<>
6386 2004-05-17 16:51 millert
6388 * parse.lex: Accept quoted globbing characters and pass them
6389 verbatim for fnmatch()
6391 2004-05-17 16:50 millert
6393 * UPGRADE: Document that /tmp/.odus is gone.
6395 2004-05-17 16:28 millert
6397 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6398 /tmp/.odus as a possible timestamp dir unless specifically
6399 configured to do so. Instead, if no /var/run exists, use
6400 /var/adm/sudo or /usr/adm/sudo.
6402 2004-05-17 16:08 millert
6404 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6405 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6406 on patches from Tom Bates.
6408 2004-05-16 18:47 millert
6410 * CHANGES: There was no 1.6.7p6.
6412 2004-05-16 16:38 millert
6414 * BUGS, CHANGES: sync
6416 2004-05-16 16:36 millert
6418 * Makefile.in: add missing files to DISTFILES
6420 2004-05-16 16:23 millert
6422 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6424 2004-05-16 16:20 millert
6426 * Makefile.in: Fix some line wrap and update (c) year
6428 2004-04-28 15:05 aaron
6430 * README.LDAP: Build Note
6432 2004-04-06 22:03 aaron
6434 * Makefile.in: Fix install-dirs
6436 2004-04-04 20:27 millert
6438 * visudo.c: In Exit() when used as a signal handler, emsg is a
6439 pointer so sizeof() is wrong so make it a #define instead. Also
6440 avoid using a negative exit value. Found by Aaron Campbell
6442 2004-03-24 18:23 millert
6444 * sudoers.pod: Remove bogus sentence about uids in a User_List.
6445 Document usernames vs. uid parsing in a Runas_List.
6447 2004-03-24 18:06 millert
6449 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6450 the user specified a uid with the -u flag and the uid exists in
6451 the passwd file, set runas_user to the name, not the uid.
6453 When comparing usernames in sudoers, if a name is really a uid
6454 (starts with '#') compare it numerically to pw_uid.
6456 2004-03-22 13:35 millert
6458 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6460 2004-02-28 18:54 aaron
6462 * CHANGES, config.h.in, ldap.c: Added start_tls support
6464 2004-02-14 18:04 millert
6466 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6467 def_data.c, def_data.h to PARSESRCS.
6469 2004-02-14 10:13 aaron
6471 * strlcat.c, strlcpy.c: Un-Fix last license munge
6473 2004-02-13 16:37 millert
6475 * CHANGES, RUNSON, TODO: checkpoint
6477 2004-02-13 16:37 millert
6479 * lex.yy.c, configure: regen
6481 2004-02-13 16:36 millert
6483 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6484 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6485 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6486 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6487 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6488 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6489 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6490 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6491 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6492 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6493 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6494 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6495 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6496 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6497 emul/search.h, emul/utime.h: More to a less restrictive,
6500 2004-02-12 21:08 aaron
6502 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6503 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6504 sudoers2ldif: Merged in LDAP Support
6506 2004-02-08 15:53 millert
6508 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6511 2004-02-06 18:08 millert
6513 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6514 already 0 so set the euid first, then just call setuid(0) to set
6517 2004-02-06 14:52 millert
6519 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6520 appropriate instead of seteuid() which may not exist.
6522 2004-02-04 14:58 millert
6526 2004-02-03 23:38 millert
6528 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6529 --with-pc-insults configure option
6531 2004-02-03 23:32 millert
6533 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6535 2004-02-01 15:45 millert
6537 * sudo.man.in, sudoers.man.in: regen
6539 2004-02-01 15:44 millert
6541 * sudoers.pod: Add a note that noexec is not a cure-all.
6543 2004-02-01 15:20 millert
6545 * sudoers.pod: Mention that disabling "root_sudo" is pretty
6548 2004-02-01 15:20 millert
6550 * configure, configure.in: Substitute for root_sudo in sudoers.pod
6552 2004-02-01 15:03 millert
6554 * sudo.pod: Add sudoedit to the NAME section
6556 2004-02-01 15:00 millert
6558 * sudoers.pod: Document that fact that setting ignore_dot in
6559 sudoers has no effect due to the fact that find_path() is called
6560 *before* sudoers is read.
6562 2004-01-29 19:50 millert
6564 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6566 2004-01-29 19:42 millert
6568 * BUGS, CHANGES, TODO: sync
6570 2004-01-29 19:42 millert
6572 * sudo.man.in: regen
6574 2004-01-29 19:41 millert
6576 * sudo.pod: Clarify that when sudo is run by root with the
6577 SUDO_USER variable set, the sudoers lookup happens for root and
6578 not the SUDO_USER user.
6580 2004-01-29 17:33 millert
6582 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6583 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6584 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6586 2004-01-29 16:22 millert
6588 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6590 2004-01-29 16:15 millert
6592 * sudo.c: Don't look at prev_user until after we've parsed sudoers
6593 and done the password check. That way, if sudo/sudoedit is run
6594 from a root process that was invoked by sudo, we check sudoers
6595 for root, not the previous user. This makes sudoedit much more
6596 useful and means that for the sudo case, we get correct logging
6597 on who actually ran the command.
6599 2004-01-22 19:22 millert
6601 * sudo_edit.c: Add a comment describing why we need to be notified
6602 about our child stopping.
6604 2004-01-22 16:06 millert
6606 * def_data.c, def_data.in: Update the noexec variable descriptions
6608 2004-01-22 14:18 millert
6610 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6613 2004-01-22 12:14 millert
6615 * sudo_noexec.c: Alas, all the world does not go through execve(2).
6616 Many systems still have an execv(2) system call, Linux 2.6
6617 provides fexecve(2) and it is not uncommon for libc to have
6618 underscore ('_') versions of the functions to be used internally
6619 by the library. Instead of stubbing all these out by hand,
6620 define a macro and let it do the work. Extra exec functions
6621 pointed out by Reznic Valery.
6623 2004-01-21 21:57 millert
6625 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6626 Because we do a fork() first we need to be notified when the
6627 child has been stopped and then send that same signal to ourself
6628 so the shell can do its job control thing.
6630 2004-01-21 21:44 millert
6632 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6633 systems out there that want to run sudo that still don't support
6634 these we can try to deal with that later.
6636 2004-01-21 20:03 millert
6640 2004-01-21 20:00 millert
6642 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6645 2004-01-21 19:08 millert
6647 * configure, configure.in: fix typo
6649 2004-01-21 19:02 millert
6651 * config.h.in, configure.in: Add SET/CLR/ISSET
6653 2004-01-21 18:55 millert
6655 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6656 Pretty print the long usage() line to not wrap (assumes 80 char
6659 2004-01-21 18:01 millert
6661 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6662 is implied and no other flags are permitted.
6664 2004-01-21 18:00 millert
6666 * sudo.h: Add a new flag, -e, that makes it possible to give users
6667 the ability to edit files with the editor of their choice as the
6668 invoking user, not the runas user. Temporary files are used for
6669 the actual edit and the temp file is copied over the original
6670 after the editor is done.
6672 2004-01-21 17:25 millert
6674 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6675 flag, -e, that makes it possible to give users the ability to
6676 edit files with the editor of their choice as the invoking user,
6677 not the runas user. Temporary files are used for the actual edit
6678 and the temp file is copied over the original after the editor is
6681 2004-01-21 17:06 millert
6683 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6684 variables is set, use that to determine the invoking user's true
6685 identity. That way the proper info gets logged by someone who
6686 has done "sudo su" but still uses sudo to as root. We can't do
6687 this for non-root users since that would open up a security hole,
6688 though perhaps it would be acceptable to use getlogin(2) on OSes
6689 where this a system call (and doesn't just look in the utmp
6692 2004-01-21 16:58 millert
6694 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6696 2004-01-21 16:57 millert
6698 * configure, config.h.in, configure.in: Add check for fchown(2)
6700 2004-01-20 14:22 millert
6702 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6703 set_runaspw. It is far to late to set NewArgv[0] there and will
6704 have no effect anyway as cmnd and safe_cmnd have already been
6707 2004-01-20 14:18 millert
6709 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6712 2004-01-18 20:17 millert
6714 * env.c, sudo.c: In -i mode always set new environment based on the
6715 runas user's passwd entry.
6717 2004-01-18 17:56 millert
6719 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6720 section with usage() in sudo.c. Also sort the flags in the
6723 2004-01-18 17:55 millert
6725 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6726 patches from David J. MacKenzie o Sort the flags in the usage
6729 2004-01-18 17:22 millert
6731 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6734 2004-01-17 16:34 millert
6736 * sudo.c: Change euid to runas user before calling find_path().
6737 Unfortunately, though runas_user can be modified in sudoers we
6738 haven't parsed sudoers yet.
6740 2004-01-17 16:25 millert
6742 * sudoers.man.in, sudoers.pod: Add missing defintion of
6743 Parameter_List and use single pipes in the Defaults EBNF
6746 2004-01-17 13:49 millert
6748 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6749 don't want to reset the contents of runas_pw if the user
6750 specified a user via the -u flag.
6752 Avoid unnecessary passwd lookups in set_authpw(). In most cases
6753 we already have the info in runas_pw.
6755 2004-01-16 18:16 millert
6757 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6760 2004-01-16 18:12 millert
6762 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6764 2004-01-16 18:10 millert
6766 * parse.c: If we can't stat the command as root, try as the runas
6769 2004-01-16 18:09 millert
6771 * testsudoers.c, visudo.c: Add stub set_runaspw() function
6773 2004-01-16 18:09 millert
6775 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6776 will be used as a callback to update runas_pw when the runas user
6779 2004-01-16 18:07 millert
6781 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6783 2004-01-16 18:05 millert
6785 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6786 a PERM_RUNAS that just changes the euid.
6788 2004-01-16 18:04 millert
6790 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6791 allocate memory in one chunk for easy free()ing. Also change it
6792 from static to extern.
6794 2004-01-16 18:03 millert
6796 * defaults.c, defaults.h: Add callback support
6798 2004-01-16 18:02 millert
6800 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6801 it for runas_default
6803 2004-01-15 15:13 millert
6805 * auth/fwtk.c: Add support for chalnecho and display server
6806 responses used by fwtk >= 2.0
6808 2004-01-12 18:39 millert
6810 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6812 2004-01-12 14:03 millert
6814 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6815 sudo.h: Use closefrom() instead of doing the equivalent inline.
6817 2004-01-12 13:55 millert
6819 * closefrom.c: closefrom(3) for systems w/o it
6821 2004-01-09 16:29 millert
6823 * sudoers.man.in: Update from .pod file.
6825 2004-01-09 16:26 millert
6827 * configure, configure.in: Substitute noexec_file for the sudoers
6830 2004-01-09 16:24 millert
6832 * sudo.man.in, sudo.pod: Mention noexec
6834 2004-01-09 16:16 millert
6836 * sudoers.man.in, sudoers.pod: Document noexec
6838 2004-01-09 14:38 millert
6840 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6841 definition from config.h to pam.c where it belongs. We can't
6842 have this in config.h since that gets included too early.
6844 2004-01-09 14:35 millert
6846 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6847 implementations put their headers in /usr/include/pam instead of
6848 /usr/include/security.
6850 2004-01-09 14:32 millert
6852 * configure.in: I missed changing the EXEC macro -> EXECV here when
6853 I changed this in config.h.in and sudo.c a while ago.
6855 2004-01-09 13:15 millert
6857 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6859 2004-01-09 03:29 millert
6861 * configure, configure.in: o merge the hpux case entries into a
6862 single entry w/ its own sub-case statement. o HP-UX >= 11
6863 support getspnam(), use it in preference to getprpwuid()
6865 2004-01-09 02:58 millert
6867 * configure, configure.in: eval $shrext so that it expands nicely
6870 2004-01-09 02:50 millert
6872 * Makefile.in: Don't lie about making a module, it does the wrong
6875 2004-01-09 02:49 millert
6877 * ltmain.sh: Remove requirement that libs must begin with "lib".
6878 They don't when we point directly at the lib using LD_PRELOAD or
6881 2004-01-09 02:01 millert
6883 * acsite.m4: Disable support for c++, f77 and java. We don't need
6884 it, it takes a lot of time, and it hosed our check for shared lib
6887 2004-01-09 02:00 millert
6891 2004-01-09 02:00 millert
6893 * configure.in: Call AC_ENABLE_SHARED and check the status of
6894 enable_shared to know when shared libs are available.
6896 2004-01-09 01:37 millert
6898 * acsite.m4: Duh, OpenBSD suports shared libs too
6900 2004-01-09 01:18 millert
6902 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6905 2004-01-09 01:15 millert
6907 * configure, configure.in: o No need to check for sed, libtool
6908 config does that for us o move check for --with-noexec until
6909 after libtool magic is run so we can use $can_build_shared and
6912 2004-01-09 01:14 millert
6914 * ltmain.sh: Don't print a bunch of crap about library installs
6915 since we are not really installing a library.
6917 2004-01-09 00:38 millert
6919 * env.c: Make format_env() varargs Add noexec support for Darwin,
6920 MacOS X, Irix, and Tru64
6922 2004-01-09 00:32 millert
6924 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6925 changes: o no ldconfig in the finish step o assume no libprefix
6926 or version is needed
6928 2004-01-09 00:15 millert
6930 * sudo_noexec.c: Fix compilation under K&R
6932 2004-01-06 09:31 millert
6934 * CHANGES: checkpoint
6936 2004-01-06 09:28 millert
6938 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6939 noexec functionality
6941 2004-01-06 01:42 millert
6943 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6944 issue with generated code.
6946 2004-01-05 16:10 millert
6948 * def_data.c, def_data.h, def_data.in: Move the environment
6949 defaults to the end and shorten a few of the descriptions.
6951 2004-01-05 15:05 millert
6953 * configure.in, configure: no shared libs on ultris or convexos
6955 2004-01-05 15:03 millert
6957 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6958 object using libtool; could use some cleanup.
6960 2004-01-05 14:59 millert
6962 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6964 2004-01-05 14:56 millert
6966 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6967 that order is not important.
6969 2004-01-05 12:15 millert
6971 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6972 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6974 2004-01-04 22:58 millert
6976 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6977 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6978 option. The default value of noexec_file is set to this.
6980 2004-01-04 21:48 millert
6982 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6983 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6984 support for preloading a shared object containing a dummy
6985 execve() function that just sets error and returns -1. This adds
6986 a "noexec_file" option to load the filename as well as a "noexec"
6987 flag to enable it unconditionally. There is also a NOEXEC tag
6988 that can be attached to specific commands and an EXEC tag to
6991 2004-01-04 21:40 millert
6993 * mkdefaults: add missing newline to usage statement
6995 2004-01-04 20:39 millert
6997 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6999 2004-01-04 20:16 millert
7001 * logging.c: Don't truncate usernames to 8 characters in the log
7004 2004-01-04 20:13 millert
7006 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
7008 2004-01-04 20:12 millert
7010 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
7011 sudoers.pod: Add a new option, lecture_file, that can be used to
7012 point to a custom sudo lecture.
7014 2003-12-31 17:46 millert
7016 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
7017 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
7018 zero_bytes() function to do the equivalent of bzero in such a way
7019 that will heopfully not be optimized away by sneaky compilers.
7021 2003-12-31 13:35 millert
7023 * err.c: Use #ifdef __STDC__, not #if __STDC__.
7025 2003-12-30 17:41 millert
7027 * mkdefaults: Always put at least one space between the def_* macro
7028 name and its definition.
7030 2003-12-30 17:34 millert
7032 * configure, configure.in: Adjust code for --without-lecture to
7035 2003-12-30 17:33 millert
7037 * visudo.man.in: regen after pasto fix
7039 2003-12-30 17:31 millert
7041 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
7042 from a flag to a tuple.
7044 2003-12-30 17:31 millert
7046 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
7047 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
7048 support for tuples in def_data.in; these are implemented as an
7049 enum type. Currently there is only a single tuple enum but in
7050 the future we may have one tuple enum per T_TUPLE entry in
7051 def_data.in. Currently listpw, verifypw and lecture are tuples.
7052 This avoids the need to have two entries (one ival, one str) for
7053 pwflags and syslog values.
7055 lecture is now a tuple with the following values: never, once,
7058 We no longer use both an int and string entry for syslog
7059 facilities and priorities. Instead, there are logfac2str() and
7060 logpri2str() functions that get used when we need to print the
7063 2003-12-30 17:20 millert
7065 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
7066 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
7067 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
7068 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
7069 auth/sudo_auth.c: Create def_* macros for each defaults value so
7070 we no longer need the def_{flag,ival,str,list,mode} macros (which
7071 have been removed). This is a step toward more flexible data
7072 types in def_data.in.
7074 2003-12-30 15:55 millert
7078 2003-12-22 21:18 millert
7080 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
7081 unusual for users to place "sudo -k" in a .logout file which can
7082 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
7083 daemon has died. Previously, this would result in useless mail
7086 2003-12-16 13:51 millert
7088 * visudo.pod: fix pasto in VISUAL description
7090 2003-12-09 22:09 millert
7094 2003-12-09 22:08 millert
7096 * CHANGES: checkpoint
7098 2003-12-09 22:02 millert
7100 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
7103 2003-08-12 16:45 millert
7105 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
7108 2003-06-28 21:31 millert
7110 * auth/pam.c: Fix a core dump on Solaris by preserving the
7111 pam_handle_t we used during authentication for pam_prep_user().
7112 If we didn't authenticate (ie: ticket still valid), we call
7113 pam_init() from pam_prep_user(). This is something of a hack; it
7114 may be better to change the auth API and add an auth_final()
7115 function that acts like pam_prep_user().
7117 2003-06-21 12:50 millert
7119 * set_perms.c: Add explicit declaration of printerr variable in
7120 function header (was defaulting to int which is OK but oh so K&R
7123 2003-06-09 19:00 millert
7125 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
7127 2003-06-09 16:07 millert
7129 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
7130 problem where the sudo process would spin eating up CPU until
7131 sendmail finished when it has to send mail.
7133 2003-05-30 16:22 millert
7135 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
7138 2003-05-21 21:53 millert
7140 * parse.c: Don't assume that getgrnam() calls don't modify contents
7141 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
7142 can happen. Based on a patch from Kirk Webb.
7144 2003-05-06 11:25 millert
7146 * configure.in: missing ;;
7148 2003-05-06 00:53 millert
7150 * configure.in: darwin has a broken setreuid() in at least some
7153 2003-05-06 00:31 millert
7155 * env.c: Fix an off by one error when reallocating the environment;
7158 2003-04-30 14:04 millert
7160 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
7162 2003-04-28 19:30 millert
7164 * HISTORY: More info on the early days from Coggs.
7166 2003-04-21 14:47 millert
7168 * auth/kerb5.c: remove errant semicolon that prevented compilation
7171 2003-04-15 20:42 millert
7173 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
7174 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
7175 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
7176 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
7177 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7178 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7179 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7180 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7181 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7182 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7183 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7186 2003-04-15 20:25 millert
7188 * LICENSE: slightly different wording for the darpa credit
7190 2003-04-15 14:37 millert
7192 * LICENSE: Add DARPA credit
7194 2003-04-14 16:49 millert
7196 * auth/kerb5.c: Use krb5_princ_component() instead of
7197 krb5_princ_realm() for MIT Kerberos like we did before I messed
7200 Use krb5_principal_get_comp_string() to do the same thing w/
7201 Heimdal. I'm not sure if the component should be 0 or 1 in this
7204 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7205 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7206 should be a configure check for this I guess.
7208 2003-04-13 15:48 millert
7210 * TROUBLESHOOTING, config.h.in, configure, configure.in,
7211 sample.sudoers: builtin -> built-in; Jason McIntyre
7213 2003-04-13 15:45 millert
7215 * sudoers.pod: built in -> built-in; Jason McIntyre
7217 2003-04-09 16:14 millert
7219 * CHANGES: checkpoint for 1.6.7p3
7221 2003-04-09 16:14 millert
7223 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7224 Spencer. Amazingly, sudo source from 1985 is available via
7227 2003-04-09 16:13 millert
7229 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7230 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7231 for the RLIMIT_CORE restoration on some OSes.
7233 2003-04-04 12:46 millert
7235 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7237 2003-04-04 12:45 millert
7239 * config.h.in, configure, configure.in: Check for heimdal even if
7240 we found krb5-config and define HAVE_HEIMDAL.
7242 2003-04-03 22:04 millert
7244 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7245 The former is no longer defined by MIT kerb5 (though it used to
7246 be and indeed remains so in Heimdal).
7248 2003-04-03 10:16 millert
7250 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7251 duplicate) directories to "mkdir -p" since that seems to break on
7252 Tru64 Unix at least. This basically brings back what shipped
7255 2003-04-02 13:57 millert
7257 * auth/kerb5.c: Correct number of args to
7258 krb5_principal_get_realm() and fix an unclosed comment that hid
7261 2003-04-02 13:45 millert
7265 2003-04-02 13:45 millert
7267 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7268 configure.in, version.h: ++version
7270 2003-04-02 13:44 millert
7272 * configure.in: use krb5-config to determine Kerberos V details if
7275 2003-04-02 13:25 millert
7277 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7278 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7279 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7280 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7281 throughout. The main exception is openlog(). Since the admin
7282 may be filtering logs based on the program name in the log files,
7283 hard code this to "sudo".
7285 2003-04-02 13:16 millert
7287 * Makefile.in: Add getprogname.c and err.c
7289 2003-04-02 13:15 millert
7293 2003-04-02 13:15 millert
7295 * configure.in, config.h.in: Add checks for getprognam(),
7296 __progname and err.h
7298 2003-04-02 13:14 millert
7300 * err.c, emul/err.h: For systems withour err/warn functions.
7302 2003-04-02 13:14 millert
7304 * getprogname.c: For systems neither getprogname() nor __progname;
7307 2003-04-01 10:09 millert
7309 * CHANGES: checkpoint for 1.6.7p1
7311 2003-04-01 10:02 millert
7313 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7315 2003-04-01 09:58 millert
7317 * check.c: oflow detection in expand_prompt() was faulty (false
7318 positives). The count was based on strlcat() return value which
7319 includes the length of the entire string.
7321 2003-03-30 19:02 millert
7323 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7325 2003-03-24 16:09 millert
7327 * logging.c: g/c unused variable
7329 2003-03-24 11:06 millert
7333 2003-03-24 11:05 millert
7335 * configure.in: use man sections 8 and 5 for csops
7337 2003-03-21 18:11 millert
7341 2003-03-21 15:10 millert
7343 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7344 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7346 2003-03-21 14:02 millert
7350 2003-03-21 14:01 millert
7352 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7353 An alternate libpath may be specified or -blibpath support can be
7354 disabled. Also change conifgure such that -blibpath is not
7355 specified if no -L libpaths were added to SUDO_LDFLAGS.
7357 2003-03-20 22:05 millert
7359 * configure.in: add AIX blibpath support
7361 2003-03-20 20:28 millert
7363 * INSTALL, configure.in: --with-skey and --with-opie now take an
7364 option directory argument This obsoletes a --with-csops hack
7367 Also remove the remaining direct uses of "echo"
7369 2003-03-20 17:44 millert
7371 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7372 -lroken optional for KTH Kerberos IV and V.
7374 2003-03-20 14:42 millert
7376 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7377 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7380 2003-03-20 14:40 millert
7382 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7383 There is a new configure option, --with-rpath to control this
7386 2003-03-19 23:50 millert
7388 * configure.in: for kerb4 put libdes after libkrb on the link line
7390 2003-03-19 23:49 millert
7392 * auth/kerb4.c: typo
7394 2003-03-19 23:33 millert
7396 * configure.in: fix kerberos lib check when a path is specified
7398 2003-03-19 21:04 millert
7400 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7401 reapchild after sending mail instead of doing a conditional
7404 2003-03-19 16:20 millert
7408 2003-03-19 16:19 millert
7410 * configure.in: replace =DIR with [=DIR] where sensible
7412 2003-03-19 16:16 millert
7414 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7415 include/lib detection based on openssh's configure.in
7417 2003-03-19 15:58 millert
7419 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7422 2003-03-15 22:03 millert
7424 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7425 says username is 32 bytes.
7427 2003-03-15 21:18 millert
7429 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7430 snprintf, not sprintf
7432 2003-03-15 21:18 millert
7434 * auth/rfc1938.c: use snprintf
7436 2003-03-15 15:37 millert
7438 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7439 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7442 2003-03-15 15:31 millert
7444 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7445 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7446 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7447 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7448 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7451 2003-03-15 15:19 millert
7453 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7456 2003-03-15 15:17 millert
7460 2003-03-15 15:16 millert
7462 * configure.in: correct error messages for
7463 --with-sudoers-{mode,uid,gid}
7465 2003-03-15 15:10 millert
7467 * alloc.c: make the malloc(0) error specific to each function to
7468 aid tracking down bugs.
7470 2003-03-15 14:49 millert
7472 * alloc.c: deal with platforms where size_t is signed and there is
7473 no SIZE_MAX or SIZE_T_MAX
7475 2003-03-15 14:10 millert
7477 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7480 2003-03-15 13:02 millert
7482 * sudo.c: Use stat_sudoers macro so --with-stow can work
7484 2003-03-15 13:01 millert
7486 * INSTALL, config.h.in, configure, configure.in: Add support for
7487 --with-stow based on patches from Robert Uhl
7489 2003-03-15 12:51 millert
7491 * env.c: fix indentation
7493 2003-03-15 00:21 millert
7495 * configure.in: back out rev 1.352
7497 2003-03-14 20:11 millert
7501 2003-03-14 20:11 millert
7503 * parse.lex: use strlcpy, not strncpy
7505 2003-03-14 19:48 millert
7507 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7508 setusercontext() failure.
7510 2003-03-14 19:43 millert
7512 * logging.c: use pid_t
7514 2003-03-14 10:43 millert
7516 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7518 2003-03-14 10:35 millert
7520 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7522 2003-03-13 21:47 millert
7524 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7526 2003-03-13 21:38 millert
7530 2003-03-13 21:38 millert
7532 * configure.in: put -ldl after -lpam, not before; fixes static
7535 2003-03-13 21:17 millert
7537 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7540 2003-03-13 20:24 millert
7542 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7543 sudoers.cat, visudo.cat: regen
7545 2003-03-13 20:23 millert
7547 * Makefile.in: Preserve copyright notice from .pod file in .man.in
7550 2003-03-13 20:01 millert
7552 * visudo.pod: Add sudoers(5) to SEE ALSO
7554 2003-03-13 15:27 millert
7558 2003-03-13 15:27 millert
7560 * parse.lex: Don't assume libc can realloc() a NULL string. If
7561 malloc/realloc fails, make sure we just return; yyerror() is not
7564 2003-03-13 15:17 millert
7568 2003-03-13 15:17 millert
7570 * parse.lex: simplify fill_args a little and use strlcpy for
7573 2003-03-13 15:00 millert
7575 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7576 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7577 overflow. In all cases the strings were either pre-allocated to
7578 the correct size of length checks were done before the copy but a
7579 little paranoia can go a long way.
7581 2003-03-13 12:54 millert
7583 * sudo.h: Add strlc{at,py} protos
7585 2003-03-13 12:03 millert
7587 * env.c, interfaces.c: Use erealloc3()
7589 2003-03-13 12:00 millert
7593 2003-03-13 12:00 millert
7595 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7596 need >=). Use memcpy() instead of strcpy() in estrdup() so this
7599 2003-03-13 11:58 millert
7601 * sudo.c: snprintf() a uid as %lu, not %ld to match the
7602 MAX_UID_T_LEN test in configure.
7604 2003-03-13 11:56 millert
7606 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7609 2003-03-12 18:46 millert
7611 * sudo.c: Use snprintf() for paranoia
7613 2003-03-12 17:16 millert
7615 * parse.yacc: Use emalloc2 and erealloc3
7617 2003-03-12 17:08 millert
7619 * Makefile.in: strlc{at,py} for those w/o it
7621 2003-03-12 17:07 millert
7623 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7625 2003-03-12 17:07 millert
7627 * config.h.in, configure, configure.in: Add stlc{at,py} for those
7630 2003-03-12 16:51 millert
7632 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7635 2003-03-12 16:45 millert
7637 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7640 2003-03-12 16:41 millert
7642 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7643 bzero and with error/oflow checking.
7645 2003-03-12 16:23 millert
7647 * alloc.c: Error out on malloc(0); suggested by theo
7649 2003-03-09 19:34 millert
7651 * configure, configure.in: fix a typo; David Krause
7653 2003-03-07 10:46 millert
7655 * sudo.pod: fix typo
7657 2003-03-03 21:47 millert
7659 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7661 2003-03-01 13:20 millert
7663 * configure.in, config.h.in: not not; Anil Madhavapeddy
7665 2003-01-23 03:03 millert
7667 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7669 2003-01-20 16:13 millert
7671 * parse.yacc: Add some missing ';' rule terminators that bison
7674 2003-01-20 16:07 millert
7676 * config.sub: fix typo I introduced in last merge
7678 2003-01-20 15:59 millert
7680 * configure: regenerate with autoconf 2.57
7682 2003-01-20 15:58 millert
7684 * config.h.in: Add missing "$HOME"
7686 2003-01-20 15:57 millert
7688 * configure.in: Add some more square backets to make autoconf 2.57
7691 2003-01-20 14:39 millert
7693 * config.guess, config.sub, mkinstalldirs: Updates from
7696 2003-01-17 18:10 millert
7698 * lex.yy.c, sudo.tab.h: regen
7700 2003-01-17 18:09 millert
7702 * parse.lex, parse.yacc, sudoers.pod: Add support for
7705 2003-01-06 19:10 millert
7707 * visudo.c: fclose() yyin after each yyparse() is done and use
7708 fopen() instead of using freopen().
7710 2003-01-06 19:02 millert
7712 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7713 It looks like the issue is that yyrestart() does not reset the
7714 start condition to INITIAL which is an issue since we parse
7715 sudoers multiple times.
7717 2003-01-06 18:47 millert
7719 * parse.lex: Work around what appears to be a flex bug when dealing
7720 with files that lack a final newline before EOF. This adds a
7721 rule to match EOF in the non-initial states which resets the
7722 state to INITIAL and throws an error.
7724 2003-01-06 15:06 millert
7726 * visudo.c: o The parser needs sudoers to end with a newline but
7727 some editors (emacs) may not add one. Check for a missing
7728 newline at EOF and add one if needed. o Set quiet flag during
7729 initial sudoers parse (to get options) o Move yyrestart() call
7730 and always use freopen() to open yyin after initial sudoers
7733 2002-12-15 11:24 millert
7735 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7736 Want to set effective gid, not real gid, when reading sudoers.
7738 2002-12-15 11:08 millert
7740 * set_perms.c: don't compile set_perms_posix if we have setreuid or
7743 2002-12-14 14:21 millert
7745 * sudo.pod, sudoers.pod: document new prompt escapes
7747 2002-12-14 14:15 millert
7749 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7750 now gets collapsed to "%" as was originally intended. This also
7751 gets rid of lastchar (does lookahead instead of lookback) which
7752 should simplify the logic slightly.
7754 2002-12-13 13:20 millert
7756 * tgetpass.c: Write the prompt *after* turning off echo to avoid
7757 some password characters being echoed on heavily-loaded machines
7760 2002-12-13 13:09 millert
7762 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7764 2002-12-13 12:48 millert
7766 * configure.in: Fix IRIX fallout from name changes in man dir/sect
7767 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7770 2002-12-13 11:33 millert
7772 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7773 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7775 2002-11-28 18:43 millert
7777 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7780 2002-11-26 12:09 millert
7782 * sudo.c: fix typo in comment; Pedro Bastos
7784 2002-11-22 14:41 millert
7786 * INSTALL: document --disable-setresuid
7788 2002-11-22 14:41 millert
7790 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7791 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7792 optimizers from removing memset() calls.
7794 2002-11-22 14:11 millert
7796 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7799 2002-11-22 14:09 millert
7801 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7802 version based on setresuid() or setreuid() when possible since
7803 that allows us to support the stay_setuid option and we always
7804 know exactly what the semantics will be (various Linux kernels
7805 have broken POSIX saved uid support).
7807 2002-11-22 14:08 millert
7809 * config.h.in, configure: regen from configure.in
7811 2002-11-22 14:07 millert
7813 * configure.in: Add checks for setresuid() and a way to disable
7816 2002-11-22 14:05 millert
7818 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7819 or setre[ug]id(). The new set_perms stuff only uses things it
7822 2002-11-22 13:33 millert
7824 * sudo.c: Before exec, restore state of signal handlers to be the
7825 same as when we were initialy invoked instead of just reseting to
7826 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7827 patch from Paul Markham.
7829 2002-11-22 13:23 millert
7831 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7832 message when sudo is run by root and no_root_sudo is set
7834 2002-09-19 17:27 millert
7836 * README: update ftp link for bison
7838 2002-07-20 08:30 millert
7840 * set_perms.c: Error out if setusercontext() fails and the runas
7843 2002-05-20 16:51 millert
7845 * auth/securid5.c: Fix rcsid
7847 2002-05-20 16:50 millert
7849 * configure.in: Fix SecurID API test
7851 2002-05-17 13:20 millert
7853 * env.c: typo in comment
7855 2002-05-17 13:20 millert
7857 * configure.in: securid5 stuff needs pthreads. Just adding
7858 -lpthread is suboptimal but I don't see a better way at the
7861 2002-05-17 13:04 millert
7863 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7866 2002-05-17 13:02 millert
7868 * configure.in: Add check for SecurID 5.0 API
7870 2002-05-08 16:46 millert
7872 * strerror.c: We actually do still need config.h to get the 'const'
7873 definition for K&R C.
7875 2002-05-05 16:43 millert
7877 * configure: regen with autoconf 2.5.3
7879 2002-05-05 16:25 millert
7881 * configure.in: Don't set sysconfdir to '/etc' if the user has
7882 specified a --prefix.
7884 2002-05-05 16:14 millert
7886 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7887 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7890 2002-05-05 15:58 millert
7892 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7893 dump_defaults() knows how to dump lists.
7895 2002-05-04 21:31 millert
7897 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7898 INSTALL.binary, README: ++version
7900 2002-05-04 20:57 millert
7902 * sudoers.pod: document timestampowner
7904 2002-05-04 20:45 millert
7906 * check.c: Don't call set_perms() when doing timestamp stuff unless
7909 2002-05-04 20:43 millert
7911 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7912 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7915 2002-05-03 18:48 millert
7917 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7918 timestamp dirs. This allows the timestamp dir to be shared via
7919 NFS (though this is not recommended).
7921 2002-05-03 18:47 millert
7923 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7924 of the authentication timestamp dir"
7926 2002-05-02 15:40 millert
7928 * env.c: Don't try to pre-compute the size of the new envp, just
7929 allocate space up front and realloc as needed. Changes to the
7930 new env pointer must all be made through insert_env() which now
7931 keeps track of spaced used and allocates as needed.
7933 2002-04-26 15:12 millert
7937 2002-04-26 15:12 millert
7939 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7941 2002-04-25 11:36 millert
7943 * INSTALL.binary, README: ++version
7945 2002-04-25 11:35 millert
7947 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7948 visudo.man.in, configure: regen
7950 2002-04-25 11:31 millert
7952 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7954 2002-04-25 11:30 millert
7956 * check.c: The the loop used to expand %h and %u, the lastchar
7957 variable was not being initialized. This means that if the last
7958 char in the prompt is '%' and the first char is 'h' or 'u' a
7959 extra copy of the host or user name would be copied, for which
7960 space had not been allocated.
7962 2002-04-18 11:41 millert
7964 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7967 2002-04-18 11:39 millert
7969 * auth/afs.c: #undef VOID to get rid of an AFS warning
7971 2002-04-18 11:38 millert
7973 * env.c: Use easprintf instead of emalloc + sprintf for some
7976 2002-03-15 19:45 millert
7980 2002-03-15 19:44 millert
7982 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7983 Jepeway's email address so people don't bug him ;-)
7985 2002-03-11 22:19 millert
7987 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7988 and also call endgrent() at the same time.
7990 2002-02-21 22:23 millert
7992 * INSTALL: Make it clear which configure options take arguments.
7994 2002-01-25 13:38 millert
7996 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7997 is no RLIM_INFINITY, just pretend it is -1. This works because
7998 we only check for RLIM_INFINITY and do not set anything to that
8001 2002-01-22 11:43 millert
8003 * auth/pam.c: Zero and free allocated memory when there is a
8006 2002-01-21 22:37 millert
8008 * auth/bsdauth.c: Use sigaction() not signal()
8010 2002-01-21 22:26 millert
8012 * INSTALL: Mention that some linux kernels have broken POSIX saved
8015 2002-01-21 21:03 millert
8017 * CHANGES: checkpoint for 1.6.5p2
8019 2002-01-21 21:01 millert
8023 2002-01-21 21:01 millert
8025 * configure.in: Add --disable-setreuid flag
8027 2002-01-21 21:00 millert
8029 * INSTALL: Document new --disable-setreuid option and change
8030 description for --disable-saved-ids to match new error message.
8032 2002-01-21 21:00 millert
8034 * set_perms.c: fatal() now takes an argument that determines
8035 whether or not to call perror().
8037 2002-01-21 20:58 millert
8039 * PORTING, TROUBLESHOOTING: Update for new error messages from
8042 2002-01-21 17:46 millert
8044 * auth/pam.c: Make this compile w/o warnings
8046 2002-01-21 17:36 millert
8048 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
8050 2002-01-21 17:25 millert
8052 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
8053 was not zeroed after use when AIX authentication, BSD
8054 authentication, FWTK or PAM was in use.
8056 2002-01-20 14:21 millert
8058 * auth/pam.c: Avoid giving PAM a NULL password response, use the
8059 empty string instead. This avoids a log warning when the user
8060 hits ^C at the password prompt when PAM is in use.
8062 2002-01-19 19:46 millert
8064 * auth/pam.c: Don't check the return value of pam_setcred(). In
8065 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
8066 not the return code for the setcred module. Because we haven't
8067 called pam_authenticate(), this is not set and so pam_setcred()
8068 returns PAM_PERM_DENIED.
8070 2002-01-19 19:43 millert
8072 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
8075 2002-01-18 14:18 millert
8079 2002-01-18 14:18 millert
8081 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
8082 has a bogus setreuid() o new NetBSD has a real setreuid() o add
8083 check for freeifaddrs() if getifaddrs() exists.
8085 2002-01-18 14:17 millert
8087 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
8088 so add a test for that and if it is not present just use free().
8090 2002-01-17 11:30 millert
8092 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
8094 2002-01-17 10:56 millert
8096 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
8097 skeyaccess() denies access to normal passwords, not AUTH_FATAL
8098 (which just causes an exit).
8100 2002-01-17 10:35 millert
8102 * visudo.c: Don't use memory after it has been freed.
8104 2002-01-17 00:24 millert
8106 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
8107 Patch from Phillip E. Lobbes
8109 2002-01-16 20:00 millert
8113 2002-01-16 19:53 millert
8115 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
8117 2002-01-16 18:37 millert
8121 2002-01-16 18:37 millert
8123 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
8126 2002-01-16 18:37 millert
8128 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8129 visudo.man.in: sudo version 1.6.5
8131 2002-01-16 16:28 millert
8133 * logging.c: o when invoking the mailer as root use a hard-coded
8134 environment that doesn't include any info from the user's
8135 environment. Basically paranoia.
8137 o Add support for the NO_ROOT_MAILER compile-time option and run
8138 the mailer as the user and not root if NO_ROOT_MAILER is
8141 2002-01-16 16:27 millert
8143 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
8145 2002-01-16 16:26 millert
8149 2002-01-16 16:26 millert
8151 * version.h: version 1.6.5
8153 2002-01-16 16:26 millert
8155 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
8156 option to run the mailer as the user and not root.
8158 2002-01-16 12:44 millert
8160 * CHANGES: checkpoint for 1.6.4p2
8162 2002-01-15 19:22 millert
8164 * PORTING: Mention the "seteuid(0): Operation not permitted"
8165 problem here too just for good measure.
8167 2002-01-15 18:43 millert
8169 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
8170 preserved from the user's environment instead of being reset
8171 based on the passwd database when the "env_reset" option was
8172 used. Now it is reset as it should be.
8174 2002-01-15 17:47 millert
8178 2002-01-15 17:47 millert
8180 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8181 sudo.c: Add a configure option to turn off use of POSIX saved IDs
8183 2002-01-15 15:48 millert
8187 2002-01-15 15:48 millert
8189 * configure.in: add --with-efence option
8191 2002-01-15 15:39 millert
8193 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8194 problem where "sudo -l" would not work if always_set_home was
8197 2002-01-15 13:16 millert
8201 2002-01-15 13:16 millert
8203 * parse.lex: Quoted commas were not being treated correctly in
8204 command line arguments.
8206 2002-01-14 20:53 millert
8208 * sudo.c: o Move the call to rebuild_env() until after
8209 MODE_RESET_HOME is set. Otherwise, the set_home option has no
8212 o Fix use of freed memory when the "fqdn" flag is set. This was
8213 introduced by the fix for the "segv when gethostbynam() fails"
8214 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8215 not set so there is no need to check the "fqdn" flag in
8218 2002-01-14 20:45 millert
8220 * env.c: Add 'continue' statements to optimize the switch
8221 statement. From Solar.
8223 2002-01-13 13:42 millert
8225 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8227 2002-01-13 13:36 millert
8229 * sudoers.pod: Add caveat about stay_setuid flag
8231 2002-01-13 13:29 millert
8233 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8234 is not set, set all uids to 0 and use set_perms_fallback().
8236 2002-01-13 13:28 millert
8238 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8239 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8241 2002-01-13 13:27 millert
8243 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8244 mailer since we never want to run the mailer setuid.
8246 2002-01-12 17:55 millert
8248 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8249 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8251 2002-01-12 14:00 millert
8253 * Makefile.in, Makefile.binary: Fix mansect substitution
8255 2002-01-12 13:15 millert
8257 * Makefile.in: Substitute man sections in Makefile.binary
8259 2002-01-12 13:15 millert
8261 * Makefile.binary: Sync install targets with Makefile.in and
8262 substitute in man sections.
8264 2002-01-12 13:09 millert
8266 * INSTALL, INSTALL.binary: version is 1.6.4
8268 2002-01-12 12:59 millert
8270 * Makefile.in: Repair bindist target
8272 2002-01-12 11:43 millert
8274 * CHANGES: sync for 1.6.4
8276 2002-01-10 13:00 millert
8278 * install-sh: Fix case where neither whoami nor id are found
8280 2002-01-09 12:35 millert
8282 * install-sh: If neither whoami nor id exists, just assume we are
8285 2002-01-09 11:56 millert
8287 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8288 to be needed on AIX which for some reason isn't pulling in the
8291 2002-01-08 10:00 millert
8293 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8295 2002-01-08 09:21 millert
8297 * CHANGES: checkpoint
8299 2002-01-08 09:20 millert
8301 * sudo.c: Defer assigning new environment until right before the
8304 2002-01-08 09:08 millert
8306 * parse.c: kill extra blank line
8308 2002-01-07 13:59 millert
8312 2002-01-07 13:59 millert
8314 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8315 motorola gcc-derived compiler doesn't recognise -O2.
8317 2002-01-06 23:02 millert
8319 * HISTORY: Clarify origins of Root Group sudo a bit based on info
8320 from billp@rootgroup.com
8322 2002-01-02 22:41 millert
8326 2002-01-02 22:26 millert
8328 * CHANGES: checkpoint for 1.6.4rc1
8330 2002-01-02 17:40 millert
8332 * config.h.in: now generated via autoheader
8334 2002-01-02 17:40 millert
8338 2002-01-02 17:37 millert
8340 * compat.h: Move in some stuff that was previously in config.h.
8342 2002-01-02 17:36 millert
8344 * configure.in, aclocal.m4: Add info for autoheader.
8346 2002-01-01 16:53 millert
8348 * Makefile.in: o Add DESTDIR support
8349 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8352 2002-01-01 16:48 millert
8354 * install-sh: Add -M option (like -m but only for root) If we can't
8355 find "whoami", use "id" w/ some sed.
8357 2002-01-01 14:01 millert
8361 2002-01-01 14:00 millert
8363 * configure.in: allow user to always override mansectsu and
8366 2001-12-31 17:05 millert
8368 * mkinstalldirs: update from autoconf 2.52
8370 2001-12-31 17:03 millert
8372 * config.guess, config.sub: Update from autoconf 2.52
8374 2001-12-31 16:57 millert
8376 * configure: regen with autoconf 2.52
8378 2001-12-31 16:57 millert
8380 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8381 compiler in ANSI mode
8382 o Remove compiler-specific checks for HP-UX now that we use
8385 2001-12-31 12:19 millert
8387 * RUNSON: Checkpoint
8389 2001-12-31 12:18 millert
8391 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8392 for the target user; on Linux this often sets resource limits.
8393 o When calling pam_end(), try to convert the auth->result to a
8394 PAM_FOO value. This is a hack--we really need to stash the
8395 last PAM_FOO value received and use that instead.
8397 2001-12-31 12:18 millert
8399 * set_perms.c, sudo.h: o Add pam_prep_user function to call
8400 pam_setcred() for the target user; on Linux this often sets
8403 2001-12-31 00:53 millert
8405 * env.c: Fix off by one error in number of bytes allocated via
8406 malloc (does not affected any released version of sudo).
8408 2001-12-30 17:12 millert
8412 2001-12-30 17:12 millert
8414 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8415 variable w/o requiring that they be quoted.
8417 2001-12-30 14:26 millert
8419 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8420 quotes are needed when adding/deleting/assigning a single value
8423 2001-12-30 13:58 millert
8425 * Makefile.in: Don't rely on mkdefaults being executable, call perl
8428 2001-12-30 13:41 millert
8430 * parse.yacc: Remove some XXX that are no longer relevant.
8432 2001-12-30 13:40 millert
8434 * defaults.c: o Roll our own loop instead of using strpbrk() for
8435 better grokability o When adding to a list we must malloc() and
8436 use memcpy(), not strdup() since we must only copy len bytes
8439 2001-12-21 16:49 millert
8441 * parse.yacc: typo in comment
8443 2001-12-19 11:50 millert
8445 * CHANGES: checkpoint
8447 2001-12-19 10:56 millert
8451 2001-12-19 10:56 millert
8453 * configure.in: avoid the -g flag unless --with-devel was specified
8455 2001-12-19 10:04 millert
8457 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8460 2001-12-19 09:46 millert
8462 * Makefile.in: def_data.c was missing
8464 2001-12-18 12:42 millert
8466 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8467 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8470 2001-12-17 20:48 millert
8472 * TODO: Another TODO item
8474 2001-12-17 19:50 millert
8476 * sudoers: Add comment for Default section so folks know where it
8479 2001-12-17 18:56 millert
8481 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8484 2001-12-17 18:35 millert
8486 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8488 2001-12-17 18:33 millert
8490 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8491 o a User_List can not contain a uid
8492 o mention that the Defaults section should come after Alias
8493 definitions but before the user specifications
8495 2001-12-15 11:51 millert
8497 * sudoers.cat, sudoers.man.in: regen
8499 2001-12-15 11:51 millert
8501 * sudoers.pod: Fix listpw and verifypw sections, they were not
8502 being formatted properly.
8504 2001-12-15 11:39 millert
8506 * sudoers.cat, sudoers.man.in: regen
8508 2001-12-15 11:38 millert
8510 * sudoers.pod: fix typos
8512 2001-12-15 10:57 millert
8516 2001-12-15 10:57 millert
8518 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8521 2001-12-15 10:33 millert
8523 * README: Reference sudo.ws not courtesan.com
8525 2001-12-15 10:29 millert
8527 * PORTING: Add notes on shadow passwords
8529 2001-12-15 00:48 millert
8531 * BUGS: In list mode (sudo -l), characters escaped with a backslash
8532 are shown verbatim with the backslash.
8534 2001-12-15 00:44 millert
8536 * sudoers: Add simple examples from OpenBSD (Marc Espie)
8538 2001-12-15 00:40 millert
8540 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8543 2001-12-14 21:53 millert
8545 * CHANGES: minor prettyification
8547 2001-12-14 21:43 millert
8549 * CHANGES: Updated change log
8551 2001-12-14 21:27 millert
8553 * testsudoers.c: Fix CIDR handling here too.
8555 2001-12-14 21:21 millert
8557 * auth/pam.c: Apparently a NULL response is OK
8559 2001-12-14 21:19 millert
8561 * TODO: Checkpoint for upcoming beta release
8563 2001-12-14 21:17 millert
8565 * TROUBLESHOOTING: Many people believe that adding a runas spec
8566 should obviate the need for the -u flag. It does not.
8568 2001-12-14 21:11 millert
8570 * RUNSON: checkpoint update for upcoming 1.6.4 beta
8572 2001-12-14 20:44 millert
8574 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8575 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8578 2001-12-14 20:07 millert
8580 * PORTING: Add signals section
8582 2001-12-14 20:00 millert
8586 2001-12-14 20:00 millert
8588 * configure.in: Fix check for sigaction_t
8590 2001-12-14 19:45 millert
8592 * sudo.c: XXX - should call find_path() as runas user, not root.
8593 Can't do that until the parser changes though.
8595 2001-12-14 19:38 millert
8597 * sudo.c: If find_path() fails as root, try again as the invoking
8598 user (useful for NFS). Idea from Chip Capelik.
8600 2001-12-14 19:28 millert
8602 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8603 after pod file changes
8605 2001-12-14 19:24 millert
8607 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8608 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8609 Previously sudo would not call initgroups() if the target user
8610 was root. Now it always calls initgroups() unless the -P command
8611 line option or the "preserve_groups" sudoers option is set. Idea
8614 2001-12-14 18:38 millert
8616 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8618 2001-12-14 18:33 millert
8620 * logging.c: Fix compilation on K&C
8622 2001-12-14 18:14 millert
8626 2001-12-14 18:14 millert
8628 * configure.in: Add check for sigaction_t -- IRIX already defines
8629 this so don't redefine it.
8631 2001-12-14 17:15 millert
8633 * snprintf.c: fix typo
8635 2001-12-14 17:12 millert
8637 * interfaces.c: need stdlib.h here too
8639 2001-12-14 15:31 millert
8643 2001-12-14 15:31 millert
8645 * configure.in: Remove redundant checks for string.h, strings.h and
8648 2001-12-14 15:29 millert
8650 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8651 visudo.man.in: Regen from pod files
8653 2001-12-14 15:03 millert
8655 * BUGS: Update for 1.6.4
8657 2001-12-14 14:59 millert
8659 * configure, lex.yy.c: regen
8661 2001-12-14 14:56 millert
8663 * strerror.c: Return EINVAL if errnum > sys_nerr
8665 2001-12-14 14:54 millert
8667 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8668 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8669 sudo.pod, auth/sudo_auth.h: o Update copyright year
8671 2001-12-14 14:54 millert
8673 * configure.in: o Don't define STDC_HEADERS unconditionally for
8674 IRIX o Update copyright year
8676 2001-12-14 14:53 millert
8678 * README: update version
8680 2001-12-14 14:52 millert
8682 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8683 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8684 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8685 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8686 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8687 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8688 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8689 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8690 STDC_HEADERS define properly o Update copyright year
8692 2001-12-14 01:53 millert
8696 2001-12-14 01:53 millert
8698 * tgetpass.c: flags set in signal handlers should be volatile
8701 2001-12-14 01:52 millert
8703 * config.h.in, configure.in: Add checks for volatile and
8706 2001-12-14 01:42 millert
8708 * lex.yy.c, configure: regen
8710 2001-12-14 01:40 millert
8712 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8713 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8714 option since it cannot work with the existing parser.
8716 2001-12-14 01:26 millert
8718 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8720 2001-12-14 01:24 millert
8722 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8723 not listed in env_keep o If no PATH is in the environment use a
8724 default value o If TERM is not set in the non-reset case also
8725 give it a default value.
8727 2001-12-14 01:17 millert
8729 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8730 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8731 on systems that define in paths.h
8733 2001-12-14 01:15 millert
8735 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8736 skeyaccess(3) if it is present in libskey.
8738 2001-12-12 21:42 millert
8740 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8742 2001-12-12 21:24 millert
8744 * parse.lex: '\\' is a perfectly legal character to have in a
8745 command line argument.
8747 2001-12-12 20:24 millert
8749 * sudo.c: o Defer call to set_fqdn() until it is safe to use
8750 log_error() o Don't print errno string value if gethostbyname
8751 fails, it is not relevant
8753 2001-12-12 20:07 millert
8755 * parse.c: Fix CIDR -> in_addr_t conversion.
8757 2001-12-12 16:21 millert
8759 * sudoers.pod: Remove an extra "User_List" in the User_Spec
8760 definition From ybertrand AT snoopymail.com
8762 2001-12-12 16:00 millert
8764 * parse.c: Make 'listpw=never' work for users who are not
8765 explicitly mentioned in sudoers.
8767 2001-12-12 15:40 millert
8769 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8771 2001-12-12 15:34 millert
8773 * sudoers.pod: Document new list Defaults type and convert env_keep
8774 and env_delete to lists. Document new env_check option.
8776 2001-12-12 15:11 millert
8778 * lex.yy.c, sudo.tab.h: regen parser
8780 2001-12-12 14:56 millert
8782 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8783 a Runas spec to #[0-9-]+.
8785 2001-12-12 14:55 millert
8789 2001-12-12 14:55 millert
8791 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8793 2001-12-12 14:43 millert
8795 * config.h.in, configure.in: Add check for skeyaccess(3)
8797 2001-12-11 19:47 millert
8799 * visudo.pod: Document new -c, -f, and -q options
8801 2001-12-11 19:41 millert
8803 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8806 2001-12-11 19:31 millert
8810 2001-12-11 19:31 millert
8812 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8813 a replacement macro if it doesn't exist.
8815 2001-12-11 18:22 millert
8817 * visudo.c: In check-only mode, don't create sudoers if it does not
8820 2001-12-11 18:06 millert
8822 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8824 o Add support for "+=" and "-=" list operators
8825 o replace some 1 and 0 with TRUE and FALSE for greater
8828 2001-12-11 18:05 millert
8830 * parse.lex: o Use exclusive start conditions to remove some
8832 lexer. Also reorder some things for clarity.
8833 o Add support for "+=" and "-=" list operators.
8834 o Use the new DEFVAR token to denote a Defaults variable name.
8836 2001-12-11 18:03 millert
8838 * sudo.h: Prototype init_envtables()
8840 2001-12-11 18:02 millert
8842 * env.c: o Convert environment handling to use lists instead of
8844 This greatly simplifies routines that need to do "foreach"
8847 o Add new init_envtables() function to set env_check and
8849 defaults based on initial_badenv_table and
8850 initial_checkenv_table
8851 (formerly sudo_badenv_table).
8853 2001-12-11 18:00 millert
8855 * defaults.c, defaults.h: o Add a new LIST type and functions to
8857 o This is for use with environment handling variables.
8858 o Call new init_envtables() routine inside init_defaults() to
8859 initialize the environment lists.
8861 2001-12-11 17:57 millert
8863 * def_data.c, def_data.h, def_data.in: Convert environment options
8864 to use the new LIST type and add a new one, env_check that only
8865 deletes if the sanity check fails.
8867 2001-12-11 17:55 millert
8869 * testsudoers.c: Add dummy version of init_envtables()
8871 2001-12-11 17:53 millert
8873 * parse.yacc: honor quiet mode
8875 2001-12-11 17:51 millert
8877 * visudo.c: Add check-only mode
8879 2001-12-10 20:27 millert
8881 * mkdefaults: Fix generation of entries with NULL descriptions.
8883 2001-12-09 00:27 millert
8885 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8887 2001-12-09 00:20 millert
8889 * sudo.c: Must reset signal handlers before we exec
8891 2001-12-09 00:16 millert
8893 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8894 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8895 version needs testing. Set SIGTSTP to SIG_DFL during password
8896 entry so user can suspend us.
8898 2001-12-09 00:14 millert
8900 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8901 keyboard input. If you suspend sudo from the password prompt and
8902 resume it will re-prompt you.
8904 2001-12-09 00:09 millert
8906 * sudo.c: Don't block keyboard interrupt signals, just set them to
8909 2001-12-08 14:48 millert
8911 * config.h.in: add back HAVE_SIGACTION
8913 2001-12-08 14:44 millert
8917 2001-12-08 14:44 millert
8919 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8920 POSIX_SIGNALS define and old signal support now that we emulate
8921 POSIX ones Also be sure to correctly initialize struct sigaction.
8923 2001-12-08 14:42 millert
8925 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8928 2001-12-08 14:39 millert
8930 * compat.h: Add scaffolding for POSIX signal emulation
8932 2001-12-08 14:36 millert
8934 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8935 since we don't include stdio.h
8937 2001-12-08 14:23 millert
8939 * sigaction.c: Emulate sigaction() using sigvec()
8941 2001-11-12 19:32 millert
8943 * sudoers.pod: Document new behavior of negative values of
8944 timestamp_timeout Fix a typo
8946 2001-11-12 19:31 millert
8948 * sudo.pod: Add security note about command not being logged after
8949 'sudo su' and friends.
8951 2001-11-12 19:19 millert
8953 * sudo.pod: Mention that -V prints default values when run as root,
8954 including the list of environment variables to clear.
8956 2001-11-12 19:14 millert
8958 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8959 quoting of C<> entries.
8961 2001-11-12 13:12 millert
8963 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8964 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8965 behavior to also send mail when the password is wrong
8967 2001-11-12 13:08 millert
8969 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8972 2001-11-11 23:52 millert
8974 * sudoers.pod: document env_delete
8976 2001-11-11 23:51 millert
8978 * env.c: Add support for '*' in env_keep when not resetting the
8979 environment (ie: the normal case).
8981 2001-11-11 23:47 millert
8983 * env.c: Add env_delete variable that lets the user replace/add to
8984 the bad_env_table. Allow '*' wildcard in env_keep entries.
8986 2001-11-06 13:59 millert
8988 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8991 2001-11-02 18:09 millert
8993 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8996 2001-11-02 17:25 millert
8998 * mkdefaults: fix breakage in last commit
9000 2001-11-02 17:18 millert
9002 * Makefile.in: acsite.m4 -> aclocal.m4
9004 2001-11-02 15:59 millert
9006 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
9009 2001-11-02 15:57 millert
9011 * def_data.c: regenerated from def_data.in
9013 2001-11-02 15:56 millert
9015 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
9016 things use instead of T_INT If timestamp_timeout is < 0 then
9017 treat the ticket as never expiring (to be expired manually by the
9020 2001-11-02 15:51 millert
9022 * def_data.in: change most T_INT -> T_UINT
9024 2001-11-02 15:51 millert
9026 * mkdefaults: fix warning when no args
9028 2001-11-02 12:52 millert
9030 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
9031 call _exit() if we are a signal handler. We no longer print the
9032 signal number but the user can just check the exit value for
9035 2001-10-16 01:35 millert
9037 * logging.c: when setting up pipes in child process check for case
9038 where stdin == pipe fd 0
9040 2001-10-11 13:20 millert
9042 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
9043 value is the count of editing errors made (failed searches, etc).
9045 2001-10-05 16:39 millert
9049 2001-10-05 16:39 millert
9051 * configure.in: sco now is identified by config.guess as *-sco-*
9053 2001-10-05 16:24 millert
9055 * configure.in: Check for getspnam() in -lgen if not in -lc for
9058 2001-09-17 21:48 millert
9060 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
9062 2001-09-17 21:32 millert
9064 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
9066 2001-08-28 10:26 millert
9068 * sudoers.pod: Missing word (specify); krapht@secureops.com
9070 2001-08-23 17:43 millert
9072 * sudo.c: If we fail to lookup a login class, apply the default
9075 2001-08-23 17:42 millert
9077 * logging.c: In log_error() free message, not logline
9078 unconditionally, then free logline if it is not the same as
9079 message. No function change but this mirrors how they are
9082 2001-07-16 23:33 millert
9084 * configure: regenerate
9086 2001-07-16 23:33 millert
9088 * configure.in: remove some backslash quotes that are unneeded
9090 2001-07-16 23:30 millert
9092 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
9093 AC_LIBOBJ instead of changing LIBOBJS directly o Use
9094 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
9095 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
9097 2001-07-16 23:28 millert
9099 * config.guess, config.sub: Updated from autoconf-2.50
9101 2001-05-22 19:11 millert
9103 * README: Update mailing list section. We use mailman now, not
9106 2001-05-10 14:55 millert
9108 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
9109 the shadow variants to make sure we don't inadvertantly leak an
9110 fd to the child. Apparently Linux's shadow routines leave the fd
9111 open even if you don't call setspent(). Reported by
9112 mike@gistnet.com; different patch used.
9114 2001-04-12 21:43 millert
9116 * sudoers.pod: s/eg./e.g./
9118 2001-04-12 21:42 millert
9120 * tgetpass.c: select() may return EAGAIN. If so, continue like we
9123 2001-04-12 21:41 millert
9125 * logging.c: Fix a non-exploitable buffer overflow in the word
9126 splitting code. This should really be rewritten.
9128 2001-04-12 21:41 millert
9130 * Makefile.in: FAQ link goes away
9132 2001-04-12 21:40 millert
9134 * INSTALL: Tell people to look in sample.syslog.conf for examples,
9137 2001-04-12 21:40 millert
9139 * TROUBLESHOOTING: Update list of env vars that are cleared
9141 2001-04-12 21:36 millert
9143 * sudo.c: remove struct env_table decl since that stuff has all
9146 2001-04-04 13:17 millert
9148 * fileops.c: Fix a pasto in flock-style unlocking and include
9149 <sys/file.h> for flock on older systems; twetzel@gwdg.de
9151 2001-04-04 13:14 millert
9153 * configure: regen to get NeXT lockf/flock fix
9155 2001-04-04 13:14 millert
9157 * configure.in: force NeXT to use flock since lockf is broken
9159 2001-03-30 08:54 millert
9161 * check.c: Use stashed user_gid when checking against exempt gid
9162 since sudo sets its gid to a a value that makes sudoers readable.
9163 Previously if you used gid 0 as the exempt group everyone would
9164 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
9166 2001-03-29 13:14 millert
9170 2001-03-29 13:08 millert
9172 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
9173 aparently defines some types (such as ssize_t) therein.
9175 2001-03-02 09:09 millert
9177 * defaults.c: Fix negation of paths in a boolean context. Problem
9180 2001-02-23 13:03 millert
9184 2001-02-17 16:11 millert
9186 * visudo.c: SA_RESETHAND means the opposite of what I was
9187 thinking--oops To block all signals in old-style signals use ~0,
9190 2001-02-04 11:16 millert
9192 * defaults.c: coerce difference of pointers to int when used in a
9193 string length printf format; deraadt@openbsd.org
9195 2001-01-17 11:34 millert
9197 * visudo.c: Block all signals in Exit() to avoid a signal race.
9198 There is still a tiny window but I'm not going to worry about it.
9200 2001-01-07 13:57 millert
9202 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9205 2001-01-07 13:55 millert
9207 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9208 from clobbering by isatty().
9210 2000-12-30 20:39 millert
9212 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9213 Some defaults I_ defines got renamed.
9215 2000-12-30 20:38 millert
9217 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9218 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9219 set_perms.c, sudo.c: Move defaults info into its own files from
9220 which we generate .h and .c files. This makes adding or
9221 rearranging variables much simpler.
9223 2000-12-30 16:58 millert
9225 * configure, configure.in: fix typo in last commit
9227 2000-12-30 16:55 millert
9229 * compat.h, config.h.in, configure, configure.in: Add check +
9230 emulation for setegid (like seteuid).
9232 2000-12-30 16:22 millert
9234 * env.c: Make env_keep override badenv_table as documented Fix
9235 traversal of badenv_table (broken in last commit)
9237 2000-12-29 22:59 millert
9239 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9240 version of set_perms on systems w/o them. Rename
9241 set_perms_saved_uid() -> set_perms_posix() Make
9242 set_perms_setreuid simply be set_perms_fallback() and simply
9243 include the appropriate function at compile time (setreuid()
9246 2000-12-29 22:45 millert
9248 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9249 when env_reset is in effect
9251 2000-12-29 22:29 millert
9253 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9254 configure, configure.in, defaults.c, defaults.h, find_path.c,
9255 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9256 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9257 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9258 options: o stay_setuid - sudo will remain setuid if system has
9259 saved uids or setreuid(2) o env_reset - reset the environment to
9260 a sane default o env_keep - preserve environment variables that
9261 would otherwise be cleared
9263 No longer use getenv/putenv/setenv functions--do environment
9264 munging by hand. Potentially dangerous environment variables can
9265 be cleared only if they contain '/' pr '%' characters to protect
9266 buggy programs. Moved environment routines into env.c (new file)
9268 2000-12-29 22:17 millert
9270 * INSTALL: Clear up --without-passwd description
9272 2000-12-29 19:39 millert
9274 * sudo_setenv.c, putenv.c: We now build up a new environment from
9275 scratch and assign it to "environ".
9277 2000-12-18 22:35 millert
9279 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9281 2000-12-14 23:19 millert
9283 * visudo.c: If there was a syntax error and the user just wants to
9284 quit, unlink sudoers if it is zero length.
9286 2000-12-14 23:10 millert
9288 * visudo.c: 'Q' means ignore parse error, not 'q'
9290 2000-12-14 22:57 millert
9292 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9293 Dimitry Andric <dim@xs4all.nl>
9295 2000-12-13 12:23 millert
9297 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9300 2000-12-09 11:46 millert
9302 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9303 Sanchez <wsanchez@apple.com>
9305 2000-11-03 09:36 millert
9307 * sudo.c, visudo.c: Use exit(127), not exit(-1)
9309 2000-11-03 00:37 millert
9311 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9312 set_perms() to its own file and use POSIX saved uid or setreuid()
9315 Added stay_setuid option for systems that have libraries that
9316 perform extra paranoia checks in system libraries for setuid
9317 programs (ie: anything with issetugid(2)).
9319 2000-11-02 20:28 millert
9321 * sudo.c: strip more bits from the environment and add a facility
9322 for stripping things only if they contain '/' or '%' to address
9323 printf format string vulnerabilities in other programs.
9325 2000-11-02 12:55 millert
9329 2000-11-02 12:55 millert
9331 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9332 the existence of strcasecmp().
9334 2000-11-02 12:46 millert
9338 2000-11-02 12:46 millert
9340 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9342 2000-11-01 10:22 millert
9344 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9346 2000-11-01 10:17 millert
9350 2000-11-01 10:17 millert
9352 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9353 since NCR systems have that instead of innetgr(3).
9355 2000-10-31 14:16 millert
9357 * auth/securid.c: check return value of creadcfg() call sd_close()
9358 after sd_auth() store username in sd->username so we don't rely
9359 on the USER env variable
9361 2000-10-29 23:00 millert
9363 * INSTALL: document --with-bsdauth
9365 2000-10-29 22:57 millert
9369 2000-10-29 22:56 millert
9371 * configure.in: --with-bsdauth assumes --with-logincap
9373 2000-10-29 22:45 millert
9375 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9376 challenge, if the user just hits return then reprompt with echo
9379 2000-10-29 17:31 millert
9381 * sudo.c: Remove debugging code that should not have been
9384 2000-10-29 17:31 millert
9386 * auth/bsdauth.c: Use lower-level routines and get the password
9387 ourselves. Checks for a challenge and if there is one echo is
9390 2000-10-29 17:30 millert
9392 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9395 2000-10-27 18:41 millert
9397 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9398 fails by deferring the call to log_error() until things are
9401 Fix return value of set_loginclass() in non-BSD-auth case.
9403 Hard-code 'sudo' in the usage message so we can fit more options
9406 2000-10-27 18:35 millert
9408 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9410 2000-10-26 13:03 millert
9412 * sudo.cat, sudo.man.in: regen
9414 2000-10-26 13:01 millert
9416 * sudo.pod: Document -a flag
9418 2000-10-26 12:42 millert
9420 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9421 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9424 2000-10-19 10:09 millert
9426 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9428 2000-10-12 09:49 millert
9430 * sudoers.pod: Mention negating umask
9432 2000-10-12 01:30 millert
9434 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9436 2000-10-08 21:46 millert
9438 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9441 2000-10-08 12:25 millert
9443 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9445 2000-09-14 16:48 millert
9447 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9448 alloc failure instead of returning -1.
9450 2000-09-07 17:41 millert
9452 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9453 for FreeBSD and possibly others.
9455 2000-09-07 10:43 millert
9457 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9458 it. This means that "%m" won't be expanded but we don't use that
9459 anyway since the logging routines may splat to stderr as well.
9461 2000-09-06 21:35 millert
9463 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9464 sudoers.pod: Add always_set_home variable
9466 2000-09-06 21:24 millert
9468 * configure, configure.in: Have to hard code default values in help
9469 since the defaults are set _after_ the help stuff.
9471 2000-08-31 13:08 millert
9473 * lex.yy.c, parse.lex: Allow special characters (including '#') to
9474 be embedded in pathnames if quoted by a '\\'. The quoted chars
9475 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9478 2000-08-13 17:10 millert
9480 * install-sh: Better path searching for programs we need.
9482 2000-08-13 17:10 millert
9484 * TROUBLESHOOTING: Add section on "C compiler cannot create
9485 executables" errors.
9487 2000-08-13 17:10 millert
9489 * Makefile.binary, Makefile.in, version.h: Crank version
9491 2000-08-13 17:09 millert
9493 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9494 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9495 visudo.man.in, visudo.pod: Substitute values from configure into
9498 2000-08-12 16:48 millert
9500 * parse.c, sudo.c: The listpw and verifypw sudoers options would
9501 not take effect because the value of the default was checked
9502 *before* sudoers was parsed. Instead of passing in the value of
9503 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9504 the check can be deferred until after sudoers is parsed.
9506 2000-08-11 15:41 millert
9508 * tgetpass.c: When writing prompt, no need to write the NUL as
9509 well; hag@linnaean.org
9511 2000-06-09 12:25 millert
9513 * install-sh: When looking for chown, check in /sbin too
9515 2000-06-04 22:57 millert
9517 * visudo.c: Remove extraneous call to init_defaults() and set
9518 runas_user to NULL betweem parses so init_defaults will reset it
9519 each time, thus avoiding a reference to free()d data.
9521 2000-06-04 19:57 millert
9523 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9524 using getifaddrs() to get the list of ip addr / netmask pairs.
9525 Currently IPv4-only.
9527 2000-06-04 19:51 millert
9529 * visudo.c: Add a missing check for UserEditor == NULL Add missing
9530 '+' before line number when invoking editor to fix a syntax error
9532 2000-05-12 16:55 millert
9534 * sudo.c: Call clean_env very early in main() for paranoia's sake.
9535 Idea from Marc Esipovich.
9537 2000-05-10 01:11 millert
9539 * sudo.h: Update proto for evasprintf and easprintf
9541 2000-05-10 01:10 millert
9543 * alloc.c: Make easprintf() and evasprintf() return an int.
9545 2000-05-10 00:56 millert
9547 * check.c: If the targetpw flag is set, use target username as part
9548 of the timestamp path. If tty tickets are in effect cat the tty
9549 and the target username with a ':' as the separator.
9551 2000-05-09 12:05 millert
9553 * auth/pam.c: Backout part of last change; setting PAM_USER to the
9554 invoking user breaks things like targetpw.
9556 2000-05-09 11:52 millert
9558 * auth/pam.c: set tty and username via pam_set_item
9560 2000-05-09 11:42 millert
9562 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9563 runas, and target authentication for non-passwd file auth
9566 2000-04-22 14:15 millert
9568 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9569 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9570 C<-Z> for command line flags in all places. This is more
9571 consistent and works around a bug in Pod::Man.
9573 2000-04-22 13:59 millert
9575 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9576 'semicolon' that should be 'colon'
9578 2000-04-19 15:30 millert
9580 * configure, configure.in: Fix --with-badpri help line
9582 2000-04-17 14:01 millert
9584 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9585 openlog() and closelog() since some authentication methods (like
9586 PAM) may do their own logging via syslog. Since we don't use
9587 syslog much (usually just once per session) this doesn't really
9588 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9590 2000-04-15 16:32 millert
9592 * sudo.c: Fix -H flag. runas_homedir is only valid after
9593 set_perms(PERM_RUNAS, mode)
9595 2000-04-12 18:56 millert
9597 * INSTALL: Clarify the fact that insults are not enabled just by
9598 including them in the binary.
9600 2000-04-07 10:39 millert
9602 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9603 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9605 2000-04-07 10:38 millert
9607 * Makefile.in: Give date string to pod2man since its default is
9608 ugly and it ain't got no alibi.
9610 2000-04-07 10:27 millert
9612 * Makefile.in: Do section substitution on the output of pod2man and
9613 remove hack needed for old pod2man.
9615 2000-04-07 10:26 millert
9617 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9618 will do the substitution later.
9620 2000-04-02 11:44 millert
9622 * configure, configure.in: Don't bother checking for the path to vi
9623 if user specified --with-editor
9625 2000-04-01 17:25 millert
9627 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9630 2000-04-01 16:23 millert
9632 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9633 sudoers.pod, visudo.c: Visudo now checks for the existence of an
9634 editor and gives a sensible error if it does not exist.
9636 The path to the editor for visudo is now a colon-separated list
9637 of allowable editors. If the user has $EDITOR set and it matches
9638 one of the allowed editors that editor will be used. If not, the
9639 first editor in the list that actually exists is used.
9641 2000-04-01 16:22 millert
9643 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9646 2000-03-27 12:08 millert
9648 * Makefile.in: Strip sudo and visudo for bindist target
9650 2000-03-26 22:26 millert
9652 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9653 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9654 @mansectsu@ and @mansectform@ in the man page bodies as well.
9656 2000-03-26 22:07 millert
9658 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9661 2000-03-26 21:57 millert
9663 * Makefile.in: 'make dist' should not cause any files to be
9664 modified so remove its dependencies.
9666 2000-03-26 21:43 millert
9668 * CHANGES: Whoops, forgot to add release marker
9670 2000-03-26 11:57 millert
9672 * CHANGES: Final change for 1.6.3 (or so I hope)
9674 2000-03-26 11:57 millert
9676 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9677 BSD systems will have nroff...
9679 2000-03-24 18:58 millert
9681 * parse.yacc: When checking to see if the host/user matches in a
9682 defaults spec, check against TRUE, not just non-zero since it
9685 2000-03-24 15:14 millert
9687 * configure.in, configure: OSF/1 puts file formats in section 4,
9690 2000-03-24 15:13 millert
9692 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9694 2000-03-23 20:24 millert
9696 * RUNSON: Update for 1.6.3
9698 2000-03-23 20:23 millert
9700 * configure, configure.in: If there is no inet_addr but there *is*
9701 an __inet_addr that's ok since inet_addr is probably just a macro
9702 then. The better thing to do would be to look for the macro, but
9703 this is fine for now.
9705 2000-03-23 19:50 millert
9707 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9709 2000-03-23 19:40 millert
9711 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9712 lives in $(srcdir), add a @mansrcdir@ configure variable so we
9713 can deal with this. Also, only remove *.man for 'distclean' not
9716 2000-03-23 19:16 millert
9718 * sudo.c: set_loginclass() should be static like the proto says
9720 2000-03-23 14:14 millert
9722 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9723 header to avoid promotion of test to int, thus violating the
9724 prototype. Gcc handles this gracefully but more std ANSI
9725 compilers will complain.
9727 2000-03-23 10:11 millert
9729 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9732 2000-03-23 10:11 millert
9734 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9735 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9738 2000-03-22 23:41 millert
9740 * CHANGES, TODO: update for 1.6.3
9742 2000-03-22 23:38 millert
9744 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9745 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9746 not matching the FQHOST token type. There's really no need for a
9747 separate token for fully-qualified vs. unqualified anymore so
9748 FQHOST is now history and hostname_matches now decides which
9749 hostname (short or long) to check based on whether or not the
9750 pattern contains a '.'.
9752 2000-03-22 23:09 millert
9754 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9755 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9758 2000-03-22 22:50 millert
9760 * Makefile.in: Add targets for *.man.in, using config.status to
9761 generate *.man from *.man.in
9763 2000-03-22 22:20 millert
9765 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9766 option and enbolden refs to sudo and visudo.
9768 2000-03-22 19:35 millert
9770 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9771 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9772 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9773 FreeBSD login.conf support (untested on BSD/OS) based on a patch
9774 from Michael D. Marchionna. configure now does substitution on
9775 the man pages, allowing us to fix up the paths and set the
9776 section correctly. Based on an idea from Michael D. Marchionna.
9778 2000-03-22 19:27 millert
9780 * auth/passwd.c: Better fix for handling HP-UX aging info.
9782 2000-03-22 19:20 millert
9784 * sudo.c: Add support for set_logname run-time default
9786 2000-03-22 19:17 millert
9788 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9789 substitution on these to produce *.man
9791 2000-03-22 19:16 millert
9793 * sudo.man, sudoers.man, visudo.man: These files now get generated
9794 from *.man.in at configure time.
9796 2000-03-22 18:40 millert
9798 * defaults.c, defaults.h: Add set_logname option so users can turn
9799 off setting of LOGNAME/USER environment variables.
9801 2000-03-22 10:53 millert
9803 * testsudoers.c, lsearch.c, parse.c: kill register
9805 2000-03-13 15:52 millert
9807 * auth/passwd.c: HP-UX adds extra info at the end for password
9808 aging so when comparing the result of crypt to pw_passwd we only
9809 compare the first len(epass) bytes *unless* the user entered an
9810 empty string for a password.
9812 2000-03-13 11:05 millert
9814 * logging.c: Get rid of grandchild hack, it was causing problems
9815 and there is really no need for it. This fixes a bug where we
9816 spin eating up CPU when the user runs a long-running process like
9819 2000-03-07 14:26 millert
9821 * sudo.c: User can always specify a login class if he/she is
9824 2000-03-06 23:29 millert
9826 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9827 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9829 2000-03-06 14:42 millert
9831 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9834 2000-03-03 18:04 millert
9836 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9837 encrypted password is exactly 13 characters (indicateing standard
9838 a DES password). Many versions of crypt() do this for you, but
9839 not all (like HP-UX's).
9841 2000-03-01 21:01 millert
9843 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9845 2000-02-29 17:46 millert
9847 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9850 2000-02-29 17:41 millert
9852 * defaults.c: Use Argv[0] as the first arg to openlog() since
9853 visudo uses this too.
9855 2000-02-28 18:58 millert
9857 * sudo.c: Stash coredumpsize resource limit and retsore it before
9858 the exec() Otherwise the child ends up with a coredumpsize of 0.
9860 2000-02-26 22:56 millert
9862 * sudo.cat, sudo.man, sudo.pod: document -S flag
9864 2000-02-26 22:54 millert
9866 * sudo.c: fix usage string
9868 2000-02-26 22:48 millert
9870 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9871 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9872 -S flag (read passwd from stdin) and tgetpass_flags global that
9873 holds flags to be passed in to tgetpass(). Change echo_off param
9874 to tgetpass() into a flags field. There are currently 2 possible
9875 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9876 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9877 but echo is not set on the terminal, but sure to set it.
9879 2000-02-26 22:11 millert
9881 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9882 password timeout was disabled.
9884 2000-02-18 12:56 millert
9886 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9887 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9888 runaspw, and targetpw options.
9890 2000-02-18 12:11 millert
9892 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9893 visudo.c: enveditor -> env_editor
9895 2000-02-15 19:07 millert
9897 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9898 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9899 visudo.cat, visudo.man: crank versino to 1.6.3
9901 2000-02-15 19:03 millert
9903 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9904 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9905 defaults and make visudo honor them. This means that visudo will
9906 now parse the sudoers file *before* it is edited so a bogus
9907 sudoers file will cause a warning to go to stderr. Also, visudo
9908 checks the variables once--it does not check them after each
9909 editor run since that could be confusing.
9911 2000-02-15 18:49 millert
9913 * RUNSON: 1.6.2 -> 1.6.2p1
9915 2000-02-15 18:36 millert
9917 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9920 2000-02-13 13:38 millert
9922 * configure, configure.in: Fix thinko, some && should have been ||
9925 2000-02-13 13:28 millert
9927 * configure, configure.in: Don't initialized Makefile variables to
9928 be NULL since the user may want to import variables from their
9931 2000-02-03 21:09 millert
9933 * configure, configure.in: typo
9935 2000-01-27 15:01 millert
9937 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9938 11.0;jaearick@colby.edu
9940 2000-01-27 15:01 millert
9942 * CHANGES: recent changes; prepare for 1.6.2p1
9944 2000-01-26 23:31 millert
9946 * find_path.c: Don't apply SECURE_PATH if user is example;
9949 2000-01-26 16:21 millert
9951 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9952 'defaults' options based on INSTALL file info.
9954 2000-01-26 16:21 millert
9956 * INSTALL: Fix some while lies
9958 2000-01-24 10:48 millert
9960 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9963 2000-01-23 22:57 millert
9965 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9967 2000-01-23 22:42 millert
9969 * RUNSON: Last minute updates
9971 2000-01-23 22:26 millert
9973 * TROUBLESHOOTING: PAM entry
9975 2000-01-23 22:23 millert
9977 * auth/pam.c: correct a comment
9979 2000-01-23 22:03 millert
9981 * CHANGES, RUNSON: update for 1.6.2
9983 2000-01-23 21:59 millert
9985 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9986 with PAM. Based on patches from "Cloyce D. Spradling"
9987 <cloyce@headgear.org>
9989 2000-01-20 11:15 millert
9991 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9992 to an unsigned long long value.
9994 2000-01-19 14:07 millert
9996 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9997 sudoers locking in visudo. We now lock the sudoers file itself,
9998 not the temp file (since locking the temp file can foul up
9999 editors). The previous locking scheme didn't work because the fd
10000 was closed too early.
10002 2000-01-19 13:37 millert
10004 * configure, config.h.in, configure.in: Don't need test for
10005 ftruncate() any more.
10007 2000-01-18 21:23 millert
10009 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
10010 cc. Fixes compilation with the unbundled HP-UX cc.
10012 2000-01-18 17:00 millert
10014 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
10015 Campbell <aaron@cs.dal.ca>
10017 2000-01-17 18:46 millert
10019 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
10020 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
10021 tgetpass.c, version.h, visudo.c: update copyright year on changed
10024 2000-01-17 18:45 millert
10028 2000-01-17 18:45 millert
10032 2000-01-17 18:42 millert
10034 * INSTALL: Crank version to 1.6.2
10036 2000-01-17 18:11 millert
10038 * configure: Crank version to 1.6.2
10040 2000-01-17 17:46 millert
10042 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
10043 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
10045 2000-01-17 12:32 millert
10047 * CHANGES: recent changes
10049 2000-01-17 12:28 millert
10051 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
10052 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
10053 Crank version to 1.6.2
10055 2000-01-17 12:25 millert
10057 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
10058 'shell_noargs' runtime option back in. We have to defer checking
10059 until after the sudoers file has been parsed but since there are
10060 now other options that operate that way this one can too. Based
10061 on a patch from bguillory@email.com.
10063 2000-01-16 23:05 millert
10065 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
10066 "verifypw" options.
10068 2000-01-16 22:57 millert
10070 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
10071 o Add section on verifypw and listpw o Define how NOPASSWD
10072 interacts with the -v and -l flags
10074 2000-01-14 12:39 millert
10076 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
10077 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
10079 2000-01-14 12:29 millert
10081 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
10082 to the end and don't initialize the union member since that only
10083 works with an ANSI compiler. We set the value of the union by
10084 hand in init_defaults() anyway. This allows sudo to compile on a
10085 K&R compiler again.
10087 2000-01-11 13:20 millert
10089 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
10090 netgr_matches needs to check shost as well as host since they may
10093 2000-01-11 13:17 millert
10095 * tgetpass.c: End on \r as well as \n
10097 2000-01-02 23:53 millert
10099 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
10100 chaning from 0400 to whatever SUDOERS_MODE is (converting from
10101 the old sudoers mode). Assumes that SUDOERS_MODE is less
10102 restrictive than 0400 which should always be the case.
10104 2000-01-02 23:43 millert
10106 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
10107 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
10108 *any* entry for the user on the host with a NOPASSWD flag. For
10109 -v, only allow w/o a passwd if *all* entries for the user on the
10110 host w/ the specified runas user have the NOPASSWD flag set.
10112 2000-01-02 23:26 millert
10114 * Makefile.in: add check target
10116 1999-12-16 13:02 millert
10118 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
10121 1999-12-10 00:09 millert
10123 * CHANGES: recent changes
10125 1999-12-08 23:04 millert
10127 * config.h.in, configure, configure.in, sudo.c: Add check for
10128 initgroups() since old SYSV lacks this.
10130 1999-12-08 22:54 millert
10132 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
10133 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
10134 Only define HAVE_FNMATCH if <fnmatch.h> exists.
10136 1999-12-06 01:47 millert
10138 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
10139 to be enabled if the insults[] array is empty. Otherwise there
10140 would be division by zero.
10142 1999-12-06 01:25 millert
10144 * insults.h: Don't care about USE_INSULTS #define since the insult
10145 stuff may be overridden at runtime.
10147 1999-12-06 01:23 millert
10149 * auth/sudo_auth.c: Honor insults flag.
10151 1999-12-05 19:14 millert
10153 * CHANGES, parse.c: Don't ask the user for a password if the user
10154 is not allowed to run the command and the authenticate flag (in
10157 1999-12-05 19:05 millert
10159 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
10160 newline we change to the INITIAL state. o Enter GOTRUNAS when we
10163 This allows #uid to work in a RunasAlias.
10165 1999-12-05 14:06 millert
10167 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
10168 and runaslist now return a value o in a runasspec, if a runaslist
10169 does not return TRUE, set runas_matches to FALSE. Normally, a
10170 runaslist only returns FALSE for explicitly denied users. o
10171 since runaslist does not modify the stack there is no need for a
10172 push/pop in runasalias.
10174 1999-12-04 21:54 millert
10176 * check.c, sudo.c: Don't kill the user's tickets until after
10177 sudoers has been parsed since tty_tickets and ticket_dir could be
10180 1999-12-04 21:18 millert
10182 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10183 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10184 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10187 1999-12-04 21:18 millert
10189 * testsudoers.c: add set_fqdn() stub
10191 1999-12-02 15:31 millert
10193 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10194 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10195 it cannot work since the command needs to be set before sudoers
10196 is parsed. o Fix the "set_home" sudoers option (only worked at
10197 compile time). o Fix "fqdn" sudoers option. We now set
10198 host/shost via set_fqdn which gets called when the "fqdn"
10199 option is set in sudoers. o Move the openlog() to
10200 store_syslogfac() so this gets overridden correctly from the
10203 1999-12-02 15:21 millert
10205 * auth/securid.c: SecurID support should compile now.
10207 1999-11-28 20:56 millert
10209 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10210 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10212 1999-11-28 18:51 millert
10214 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10215 the .html files as they are generated automatically on the web
10218 1999-11-28 18:49 millert
10220 * CHANGES, LICENSE: kill characters that made wml unhappy
10222 1999-11-28 18:34 millert
10226 1999-11-25 12:05 millert
10228 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10230 1999-11-24 19:43 millert
10232 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10235 1999-11-23 22:52 millert
10237 * sudo.c: Make the -s flag be exclusive too. Also reorder the
10238 flags in the exclusive usage message so they are alphabetical.
10240 1999-11-23 13:27 millert
10242 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10244 1999-11-23 13:07 millert
10246 * auth/API: fix typo
10248 1999-11-23 13:07 millert
10250 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10252 1999-11-23 13:06 millert
10254 * auth/pam.c: fix a warning on redhat and spew an error if
10255 pam_authenticate() returns an error other than AUTH_SUCCESS or
10258 1999-11-23 00:43 millert
10260 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10261 password required is the user's not root's
10263 1999-11-19 21:04 millert
10265 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10267 1999-11-18 19:13 millert
10269 * RUNSON: updates from Brian Jackson + some formatting
10271 1999-11-17 21:39 millert
10273 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10274 update o Changes for automating real binary releases
10276 1999-11-17 21:38 millert
10278 * Makefile.in: Add bindist target
10280 1999-11-16 16:26 millert
10282 * TROUBLESHOOTING: talk about run-time options in addition to
10283 compile-time options
10285 1999-11-16 01:16 millert
10287 * CHANGES: fix typos
10289 1999-11-16 01:09 millert
10291 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10293 1999-11-16 00:42 millert
10295 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10296 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10297 rid of references to sudo-bugs. Now mention the web site or the
10300 1999-11-16 00:35 millert
10302 * sudoers.html: repair pod2html damage
10304 1999-11-16 00:28 millert
10306 * RUNSON, TODO: Update for 1.6 release
10308 1999-11-16 00:23 millert
10310 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10311 about using ALL in a command context.
10313 1999-11-09 15:12 millert
10315 * visudo.c: Call yyrestart() on a parse error to reset the lexer
10318 1999-11-09 15:06 millert
10320 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10321 yyrestart() into visudo.c since it might not get called in yywrap
10322 if we get a parse error (and we only reread the file on error
10325 1999-11-09 14:32 millert
10327 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10328 clean up any buffers that might still exist. Call yyrestart()
10329 instead of using the deprecated YY_NEW_FILE macro.
10331 1999-11-09 12:13 millert
10333 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10335 1999-11-08 19:00 millert
10337 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10338 characters need to be escaped in names.
10340 1999-11-08 18:59 millert
10344 1999-11-08 18:59 millert
10346 * INSTALL: clarify Mac OS X entry
10348 1999-11-08 18:59 millert
10352 1999-11-08 17:45 millert
10354 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10355 configure options for danity
10357 1999-11-05 17:11 millert
10359 * defaults.c: Fix printing of type T_MODE in dump_defaults()
10361 1999-11-05 12:00 millert
10363 * strcasecmp.c: missing sys/types.h
10365 1999-11-05 00:42 millert
10367 * INSTALL: Break out options that may be overridden at run time
10368 into their own section. Add a not about Max OS X and correct
10371 1999-11-04 14:01 millert
10373 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10374 getrlimit to find the highest fd when closing all non-std fd's o
10375 Turn off core dumps via setrlimit for the sake of paranoia
10377 1999-11-04 13:57 millert
10381 1999-11-01 10:59 millert
10385 1999-11-01 10:58 millert
10387 * tgetpass.c: When read()'ing, do a single character at a time to
10388 be sure we don't go oast the newline.
10390 1999-11-01 10:43 millert
10392 * sudo.c: For the sudo_root option, check against user_uid, not
10393 getuid() since at this point, ruid == euid == 0.
10395 1999-10-31 23:14 millert
10397 * RUNSON: some updates
10399 1999-10-31 23:14 millert
10401 * logging.h: Fix compilation problem when --with-logging=file was
10402 specified. This means that syslog is now required to build sudo
10403 but that should not be a problem. If it is it can be fixed
10404 trivially with a configure check for syslog() or syslog.h.
10406 1999-10-31 23:00 millert
10408 * tgetpass.c: Make this work again for things like "sudo echo hi |
10409 more" where the tty gets put into character at a time mode. We
10410 read until we read end of line or we run out of space (similar to
10413 1999-10-20 11:23 millert
10415 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10418 1999-10-20 11:23 millert
10422 1999-10-16 13:56 millert
10424 * defaults.c: Error out if syslog parameters are given without a
10425 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10426 since there are no facilities in the 4.2BSD syslog.
10428 1999-10-15 16:37 millert
10430 * defaults.c: Ignore the syslog facility for systems w/ old syslog
10433 1999-10-15 12:51 millert
10435 * TROUBLESHOOTING: people with "." early in their path can have
10436 problems running sudo from the build dir ;-)
10438 1999-10-13 00:18 millert
10440 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10442 1999-10-12 22:34 millert
10444 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10445 auth/sudo_auth.h: New krb5 code from Frank Cusack
10446 <fcusack@iconnet.net>.
10448 1999-10-12 22:33 millert
10450 * CHANGES: update to reality
10452 1999-10-11 20:53 millert
10454 * auth/fwtk.c: include <auth.h> to get function prototypes.
10456 1999-10-11 20:05 millert
10458 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10460 1999-10-11 19:42 millert
10462 * sudo.c: in set_perms(), always call setuid(0) before changing the
10463 ruid/euid so we always know it will succeed.
10465 1999-10-11 12:24 millert
10467 * defaults.h: #undef T_FOO to avoid conflicts with system defines
10470 1999-10-11 11:55 millert
10472 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10473 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10474 needs some fleshing out but this is a start.
10476 1999-10-10 17:21 millert
10478 * defaults.c: use strtol, not strtoul since not everyone has not
10481 1999-10-10 15:01 millert
10483 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10486 1999-10-10 14:38 millert
10488 * lex.yy.c, parse.lex: o Add support for escaped characters in the
10489 WORD macro o Modify fill() to squash escape chars
10491 1999-10-10 13:56 millert
10493 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10494 checks for default values that are supposed to be pathnames. o
10495 Fix a duplicate free when visudo finds an error.
10497 1999-10-09 01:01 millert
10499 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10501 1999-10-07 21:12 millert
10503 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10504 requiretty option o Move O_NOCTTY to compat.h
10506 1999-10-07 21:12 millert
10508 * logging.c: The exit() in log_error() was mistakenly removed in a
10509 previous version. Put it back...
10511 1999-10-07 17:20 millert
10513 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10514 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10515 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10516 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10517 Change defaults stuff to put the value right in the struct. o
10518 Implement mailer_flags o Store syslog stuff both in int and
10519 string form. Setting the string form magically updates the int
10520 version. o Add boolean attribute to strings where it makes sense
10523 1999-10-07 17:13 millert
10525 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10527 1999-10-06 00:48 millert
10529 * auth/API: cleanup function no longer takes a status arg
10531 1999-10-06 00:48 millert
10535 1999-09-15 05:15 millert
10537 * TODO, config.h.in, configure, configure.in, logging.c: Use
10538 strftime() instead of ctime() if it is available.
10540 1999-09-14 12:58 millert
10542 * defaults.c: fix copyright date
10544 1999-09-14 12:57 millert
10546 * RUNSON: update ReliantUNIX entry
10548 1999-09-14 12:56 millert
10550 * defaults.c, defaults.h, logging.c: add log_year option
10552 1999-09-14 04:01 millert
10554 * configure, configure.in: add --without-sendmail to help output
10556 1999-09-14 03:42 millert
10558 * configure, configure.in: enforce an otctal arg for
10559 --with-suoders-mode
10561 1999-09-08 04:06 millert
10563 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10564 config.h.in, configure, configure.in, defaults.c, defaults.h,
10565 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10566 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10567 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10568 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10569 "Defaults" line in sudoers to make configuration variables
10570 changable at runtime (and on a global, per-host and per-user
10571 basis). Both the names and the internal representation are still
10572 subject to change. It was necessary to make sudo_user.runas but
10573 a char ** instead of a char * since this value can be changed by
10574 a Defaults line. There is a similar (but more complicated) issue
10575 with sudo_user.prompt but it is handled differently at the
10578 Add a "-L" flag to list the name of options with their
10579 descriptions. This may only be temporary.
10581 Move some prototypes to parse.h
10583 Be much less restrictive on what is allowed for a username.
10585 1999-09-08 04:01 millert
10587 * sample.syslog.conf: Add more info
10589 1999-09-04 03:09 millert
10591 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10592 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10593 from their license.
10595 1999-08-31 05:39 millert
10597 * auth/sudo_auth.h: move dce_verofy proto to correct section
10599 1999-08-31 05:39 millert
10601 * auth/dce.c: remove XXX
10603 1999-08-28 06:00 millert
10605 * emul/fnmatch.h: Add fnmatch() prototype
10607 1999-08-28 06:00 millert
10609 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10610 emul/fnmatch.h to be after sudo.h for __P
10612 1999-08-28 05:59 millert
10614 * sudo.h: add strcasecmp proto
10616 1999-08-28 05:50 millert
10618 * auth/sudo_auth.c: add check for case where there are no auth
10621 1999-08-28 05:36 millert
10623 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10624 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10626 1999-08-28 05:24 millert
10628 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10629 everywhere we include string.h
10631 1999-08-28 05:22 millert
10633 * version.c: nicer output when showing auth methods
10635 1999-08-28 05:00 millert
10637 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10639 1999-08-28 04:49 millert
10641 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10643 1999-08-28 04:22 millert
10645 * parse.lex, lex.yy.c: fix definition of OCTECT
10647 1999-08-28 04:10 millert
10649 * configure, configure.in: aix_auth.o not authenticate.o
10651 1999-08-27 17:02 millert
10653 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10654 generated from the keyboard). Since we run with ruid/euid == 0
10655 the user can't really signal us in nasty ways.
10657 1999-08-27 17:01 millert
10659 * visudo.c: Don't need to worry about catching too many signals
10660 since we do locking on the tmp file. If a lockfile is really
10661 stale, it will be detected and overwritten.
10663 1999-08-27 16:09 millert
10665 * INSTALL, Makefile.in: include auth/API in tarball
10667 1999-08-27 16:09 millert
10669 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10670 loop and only do the memset if we are *not* in standalone mode.
10672 1999-08-27 13:46 millert
10674 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10676 1999-08-27 11:53 millert
10678 * sudo.c: fix --enable-noargs-shell
10680 1999-08-27 11:06 millert
10682 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10684 1999-08-27 10:54 millert
10686 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10688 1999-08-27 10:50 millert
10690 * auth/dce.c: there were still some return(0)'s hanging around,
10691 make them AUTH_FAILURE
10693 1999-08-27 10:39 millert
10695 * parse.c: typo in comment
10697 1999-08-27 10:03 millert
10699 * version.c: add missing semicolon
10701 1999-08-27 08:31 millert
10703 * auth/sudo_auth.h: missing backslash
10705 1999-08-26 17:24 millert
10707 * CHANGES, config.h.in, configure, configure.in: Kill
10708 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10710 1999-08-26 09:21 millert
10712 * Makefile.in: add parse.h to HDRS
10714 1999-08-26 09:16 millert
10716 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10717 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10718 in LIBS, commong ld flags go in LDFLAGS and network libs like
10719 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10720 on Solaris and is a bit cleaner in general.
10722 1999-08-26 06:56 millert
10724 * UPGRADE: mention ptmp -> sudoers.tmp
10726 1999-08-26 06:12 millert
10728 * configure.in, configure, config.h.in: Define
10729 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10731 1999-08-26 05:37 millert
10733 * RUNSON: add 2 reports
10735 1999-08-26 05:20 millert
10737 * auth/kerb5.c: Minor changes, mostly cosmetic.
10738 verify_krb_v5_tgt() changed to return a value more like a system
10741 1999-08-26 05:19 millert
10743 * auth/dce.c: Add an XXX
10745 1999-08-26 05:19 millert
10747 * TODO: more things todo!
10749 1999-08-26 05:18 millert
10751 * sample.sudoers: update based on what is in the man page
10753 1999-08-26 05:10 millert
10755 * parse.yacc: minor change to first line printed in -l mode
10757 1999-08-26 05:10 millert
10759 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10760 VARIABLES" section to "ENVIRONMENT" to be more standard and add
10763 1999-08-26 05:08 millert
10765 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10766 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10769 1999-08-26 05:06 millert
10771 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10773 1999-08-26 05:05 millert
10775 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10777 1999-08-26 05:04 millert
10779 * UPGRADE: mention timestamp changes
10781 1999-08-26 05:04 millert
10783 * PORTING: cosmetic cleanup
10785 1999-08-26 05:00 millert
10787 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10788 sudoers(8) man page
10790 1999-08-24 13:45 millert
10792 * version.c: Update comments about syslog name tables
10794 1999-08-24 13:37 millert
10796 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10797 configure.in, parse.yacc: include strcasecmp() for those without
10800 1999-08-24 12:43 millert
10802 * sample.sudoers: Use the : operator some more and fix a typo
10804 1999-08-24 12:43 millert
10806 * HISTORY: update the history of sudo
10808 1999-08-24 12:42 millert
10810 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10812 1999-08-24 12:41 millert
10814 * CHANGES: recent changes
10816 1999-08-24 12:40 millert
10818 * sudo.tab.h: these should be generated with byacc, not bison
10820 1999-08-24 12:40 millert
10824 1999-08-24 11:58 millert
10826 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10827 the stored (expanded) alias was not stored with the contents.
10828 This could lead to incorrect output if the sudoers file had
10829 different alias types with the same name. Normal parsing (ie:
10830 not in '-l' mode) is unaffected.
10832 1999-08-23 12:47 millert
10834 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10835 proto on some systems
10837 1999-08-22 13:10 millert
10839 * snprintf.c: fix comment
10841 1999-08-22 13:09 millert
10843 * tgetpass.c: don't need limits.h
10845 1999-08-22 07:36 millert
10847 * snprintf.c: kill bogus reference to vfprintf
10849 1999-08-22 07:26 millert
10851 * sample.sudoers, sudoers: better examples
10853 1999-08-22 07:23 millert
10855 * snprintf.c: Add some const in the K&R defs. This is safe since
10856 we define const away if the compiler doesn't grok it.
10858 1999-08-22 07:22 millert
10860 * aclocal.m4, configure: Better test for working long long support.
10861 Ultrix compiler supports basic long long but not all operations
10864 1999-08-22 05:59 millert
10866 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10867 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10868 MAXINT before including hpsecurity.h to silence an HP-UX warning
10869 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10871 1999-08-21 15:00 millert
10873 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10874 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10875 quads if the compiler does. No floating point yet, perhaps
10878 1999-08-20 16:37 millert
10880 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10881 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10882 code as root, not the invoking user. It doesn't really gain us
10883 anything to run as the user since an attacker can just have an
10884 setuid(0) in their egg. Running as root solves potential
10885 problems wrt signalling.
10887 1999-08-19 13:45 millert
10889 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10890 let the signal handler get it if we are still running, else let
10891 init reap it for us. The extra time it takes to wait lets the
10892 user know that mail is being sent.
10894 Install SIGCHLD handler in main() and for POSIX signals, block
10895 everything *except* SIGCHLD.
10897 1999-08-19 12:30 millert
10899 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10900 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10901 a bitmap instead of an int. This makes it possible to express
10902 things like "failed to validate because user not listed for this
10903 host". Some thigns that were previously VALIDATE_FOO are now
10904 FLAG_FOO. This may change later on.
10906 Reorganized code in log_auth() and sudo.c to deal with above
10909 Safer versions of push/pushcp with in the do { ... } while (0)
10912 parse.yacc now saves info on the stack to allow parse.c to
10913 determine if a user was listed, but not for the host he/she tried
10916 Added --with-mail-if-no-host option
10918 1999-08-17 11:29 millert
10920 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10921 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10922 externally visible. o If pedantic > 1, it is a parse error. o
10923 Add -s (strict) option to visudo which sets pedantic to 2.
10925 1999-08-17 11:26 millert
10927 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10929 1999-08-17 11:20 millert
10931 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10933 1999-08-17 10:29 millert
10935 * configure, configure.in, Makefile.in: Add testsudoers to default
10936 build target if --with-devel Don't clean generated parser files
10937 unless "distclean".
10939 1999-08-17 08:47 millert
10941 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10942 not just those that match, or we get spurious warnings.
10944 1999-08-17 05:32 millert
10946 * TROUBLESHOOTING: reference samples.sylog.conf
10948 1999-08-14 11:50 millert
10950 * sample.syslog.conf: Sample entries for syslog.conf
10952 1999-08-14 11:40 millert
10954 * CHANGES: recent changes
10956 1999-08-14 11:36 millert
10958 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10959 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10960 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10961 configured into flags and add a flag to specify an auth method is
10962 running alone (the only one). Pass auth methods their sudo_auth
10963 pointer, not the data pointer. This allows us to get at the
10964 flags and tell if we are the only auth method. That, in turn,
10965 allows the method to be able to decide what should/should not be
10966 a fatal error. Currently only rfc1938 uses it this way, which
10967 allows us to kill the OTP_ONLY define and te hackery that went
10968 with it. With access to the sudo_auth struct, methods can also
10969 get at a string holding their cannonical name (useful in error
10972 1999-08-14 11:34 millert
10974 * Makefile.in, INSTALL, README, config.h.in, configure,
10975 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10976 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10977 o real dependencies in the Makefile o --with-devel option to
10978 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10979 "foo->bar" o ALL goes back to being a token, not a string but
10980 don't leak memory o rename hsotspec -> host in parse.yacc
10982 1999-08-12 12:26 millert
10984 * BUGS, CHANGES: recent changes
10986 1999-08-12 12:24 millert
10988 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10989 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10990 *snprintf() before -ldb is added to LIBS since -ldb includes a
10991 bogus snprintf(). o Add forward refs for struct mbuf and struct
10992 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10993 to fix -Wall o Add missing includes to fix more -Wall
10995 1999-08-12 10:37 millert
10997 * INSTALL, check.c, config.h.in, configure, configure.in,
10998 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10999 o Add a "pedentic" flag to the parser. This makes sudo warn in
11000 cases where an alias may be used before it is defined. Only
11001 turned on for visudo and testsudoers. o Add
11002 --disable-authentication option that makes sudo not require
11003 authentication by default. The PASSWD tag can be used to require
11004 authentication for an entry. We no longer overload
11007 1999-08-12 10:29 millert
11009 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
11010 USERNAME. These days a username can contain just about anything
11011 so be very permissive. Also drop the unused \. punctuation.
11013 1999-08-09 18:25 millert
11015 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
11016 parse.h o find_alias() now returns an aliasinfo * instead of
11017 boolean o add_alias() now takes a value parameter to store in the
11018 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
11019 return: 1) positive match 0) negative match (due to '!') -1) no
11020 match This means setting $$ explicitly in all cases, which I
11021 should have done in the first place. It also means that we
11022 always store a value that is != -1 and when we see a '!' we can
11023 set *_matches to !rv if rv != -1. The upshot of all of this is
11024 that '!' now works the way it should in lists and some of the
11025 rules are more uniform and sensible.
11027 1999-08-09 18:17 millert
11029 * Makefile.in: add parse.h dependency
11031 1999-08-09 18:17 millert
11033 * parse.h: kill unused *_matched macros
11035 1999-08-09 10:35 millert
11037 * parse.yacc: Allow a list of users as the first thing in a user
11038 spec, not just a single entry. This makes things more uniform,
11039 though it does allow you to write user specs that are hard to
11042 1999-08-09 10:08 millert
11046 1999-08-09 10:08 millert
11048 * configure.in: fix check for crypt() in libufc
11050 1999-08-07 14:03 millert
11052 * README: sudo-users list now exists
11054 1999-08-07 07:46 millert
11056 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
11059 1999-08-07 05:59 millert
11061 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
11062 config.h.in, configure.in, logging.c, sudo.h, version.c,
11063 visudo.c, configure, fileops.c: o Move lock_file() and touch()
11064 into fileops.c so visudo can use them o Visudo now locks the
11065 sudoers temp file instead of bailing when the temp file already
11066 exists. This fixes the problem of stale temp files but it does
11067 *require* that you not try to put the temp file in a
11068 world-writable directory. This shoud not be an issue as the temp
11069 file should live in the same dir as sudoers. o Visudo now only
11070 installs the temp file as sudoers if it changed.
11072 1999-08-06 09:49 millert
11074 * logging.c: add fcntl locking
11076 1999-08-06 09:33 millert
11078 * configure, config.h.in, configure.in, logging.c: Lock the log
11081 1999-08-06 05:36 millert
11083 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
11084 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
11085 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
11086 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
11087 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
11089 1999-08-05 17:38 millert
11091 * INSTALL, check.c, config.h.in, configure, configure.in,
11092 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
11093 more things to root sudo -V config reporting
11095 1999-08-05 10:56 millert
11097 * configure, configure.in: aix_auth.o not authenticate.o
11099 1999-08-05 10:48 millert
11101 * config.h.in: Add --with-goodpri and --with-badpri configure
11102 options to specify the syslog priority to use.
11104 1999-08-05 10:30 millert
11106 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
11107 and --with-badpri configure options to specify the syslog
11110 1999-08-05 10:25 millert
11112 * compat.h: kill crufty AIX stuff
11114 1999-08-05 06:55 millert
11116 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
11117 deal with $< like I would expect. Both GNU and BSD makes get
11118 this right but... So, we just expand $< inline at the cost of
11121 1999-08-05 06:52 millert
11123 * version.c: If the invoking user is root, sudo will now print
11124 configure info in -V mode. Currently just prints logging info,
11125 to be expanded later.
11127 1999-08-05 06:51 millert
11129 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
11130 facility and priority o use new print_version() functino for -V
11133 1999-08-05 06:49 millert
11135 * check.c: Don't need version.c
11137 1999-08-05 06:21 millert
11139 * configure, configure.in, aclocal.m4, config.h.in: Add check for
11140 syslog facilities and priorities tables in syslog.h
11142 1999-08-05 05:23 millert
11144 * Makefile.in: o authenticate -> aix_auth o add version.c
11146 1999-08-05 05:21 millert
11148 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
11150 1999-08-04 13:32 millert
11152 * TODO: sudo should lock its logfile
11154 1999-08-04 13:28 millert
11156 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
11157 shortcut macros for append() to make things more readable. o The
11158 separator in append() is now a string instead of a char. o In
11159 append(), only prepend the separator if the last char is not a
11160 '!'. This is a hack but it greatly simplifies '!' handling. o
11161 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
11162 inherited across entries in a list (matches current behavior).
11163 o Fix formatting in -l mode such that items in a list are
11164 separated by a space. Greatlt improves readability. o Space
11165 for name field in struct aliasinfo is now allocated dyanically
11166 instead of using a (big) buffer. o In add_alias(), only search
11167 the list once (lsearch instead of lfind + lsearch)
11169 1999-08-04 11:31 millert
11171 * lex.yy.c, sudo.tab.h: regen
11173 1999-08-04 10:54 millert
11175 * configure, configure.in: Solais pam doesn't require anye xtra
11178 1999-08-04 05:35 millert
11180 * parse.yacc: o Simpler '!' support now that the lexer deals with
11181 multiple !'s for us. o In the case of opFOO, have FOO give a
11182 boolean return value and set foo_matches in opFOO, not FOO. o
11183 Treat 'ALL' as a string since it gets fill()'d in
11184 parse.lex--fixes a small memory leak. In the long run it may
11185 be better to just fix parse.lex and make ALL back into a token.
11186 However, having it be a string is useful since it can be
11187 easily passed back to the parent rule if we so desire.
11189 1999-08-04 03:54 millert
11191 * parse.lex: o Remove some unnecessary backslashes o collapse
11192 multiple !'s by using !+ and checking if yyleng is even or odd.
11193 this allows us to simplify ! handling in parse.yacc
11195 1999-08-04 03:53 millert
11197 * sudo.c: -u flag was being ignored
11199 1999-08-01 13:04 millert
11201 * Makefile.in: correct fix
11203 1999-08-01 12:37 millert
11205 * Makefile.in: work around pod2man stupididy
11207 1999-08-01 12:35 millert
11209 * Makefile.in: correct dependencies for .cat
11211 1999-08-01 12:26 millert
11213 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11215 1999-08-01 12:25 millert
11217 * sudo.pod, visudo.pod: Add copyright Update to reality
11219 1999-08-01 11:42 millert
11221 * parse.c, sudo.c, sudo.h: rename validate() to the more
11222 descriptive sudoers_lookup()
11224 1999-08-01 06:49 millert
11226 * auth/aix_auth.c: use tgetpass
11228 1999-07-31 12:32 millert
11232 1999-07-31 12:31 millert
11234 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11235 configure, configure.in, sudo.c: Sudo, not CU Sudo
11237 1999-07-31 12:19 millert
11239 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11240 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11241 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11242 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11243 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11244 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11245 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11246 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11247 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11248 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11249 LICENSE: add 4th term to license similar to term 5 in the apache
11252 1999-07-31 12:02 millert
11254 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11255 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11257 1999-07-28 05:24 millert
11261 1999-07-28 05:21 millert
11263 * check.c: Use dirs instead of files for timestamp. This allows
11264 tty and non-tty schemes to coexist reasonably. Note, however,
11265 that when you update a tty ticket, the mtime on the user dir gets
11268 1999-07-28 05:17 millert
11270 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11271 to link with "-lprot -lx" when linking test program, not just
11272 -lprot. Also add check for getspnam(). The SCO docs indicate
11273 that /etc/shadow can be used but this may be a lie.
11275 1999-07-24 03:35 millert
11277 * auth/API: first cut at auth API description
11279 1999-07-22 15:48 millert
11281 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11282 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11283 now an init method that gets run before the main loop. This
11284 allows auth routines to differentiate between initialization that
11285 happens once vs. setup that needs to run each time through the
11288 1999-07-22 12:23 millert
11290 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11292 1999-07-22 12:22 millert
11294 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11295 versions of asprintf() and vasprintf()
11297 1999-07-22 09:14 millert
11299 * TODO: remove 2 items. One done, one won't do.
11301 1999-07-22 09:10 millert
11303 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11304 visudo.cat, visudo.html, configure, lex.yy.c: regen
11306 1999-07-22 09:06 millert
11308 * CHANGES: new changes
11310 1999-07-22 09:01 millert
11312 * sudo.pod: o Document -K flag and update meaning of -k flag. o
11313 BSD-style copyright o Document clearing of BIND resolver
11314 environment variables o Clarify bit about shared libs o suggest
11315 rc files create /tmp/.odus if your OS gives away files
11317 1999-07-22 08:59 millert
11319 * visudo.pod: BSD license
11321 1999-07-22 08:58 millert
11323 * tgetpass.c: o BSD copyright o no need to block signals, we now do
11324 that in main() o cosmetic changes
11326 1999-07-22 08:57 millert
11328 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11329 sudo_user" instead of old globals. o some cometic cleanup
11331 1999-07-22 08:56 millert
11333 * sudo_setenv.c, version.h: BSD-style copyright
11335 1999-07-22 08:56 millert
11337 * sudo.h: o BSD copyright o logging and parser bits moved to their
11338 own .h files o new "struct sudo_user" to encapsulate many of the
11341 1999-07-22 08:55 millert
11343 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11344 use new logging routines o simplified flow of control o BIND
11345 resolver additions to badenv_table
11347 1999-07-22 08:53 millert
11349 * strerror.c: BSD-style copyright
11351 1999-07-22 08:53 millert
11353 * snprintf.c: Now compiles on more K&R compilers
11355 1999-07-22 08:52 millert
11357 * putenv.c: BSD-style copyright, cosmetic changes
11359 1999-07-22 08:51 millert
11361 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11362 Move parser-specific defines and structs into parse.h + other
11365 1999-07-22 08:51 millert
11367 * logging.h: defines for logging routines
11369 1999-07-22 08:49 millert
11371 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11372 interfaces.h, pathnames.h.in: BSD-style copyright
11374 1999-07-22 08:48 millert
11376 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11377 copyright, cosmetic changes
11379 1999-07-22 08:46 millert
11381 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11382 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11383 changes to fill in AUTH_OBJS for new auth api o check for
11384 strerror(), v?snprintf() and v?asprintf() o replace
11385 --with-AuthSRV with --with-fwtk
11387 1999-07-22 08:43 millert
11389 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11390 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11391 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11394 1999-07-22 08:42 millert
11396 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11399 1999-07-22 08:39 millert
11401 * alloc.c: BSD-style copyright
11403 1999-07-22 08:38 millert
11405 * TROUBLESHOOTING: no more --with-getpass
11407 1999-07-22 08:34 millert
11409 * TODO: Take out things I've done...
11411 1999-07-22 08:34 millert
11413 * README: Refer to LICENSE
11415 1999-07-22 08:34 millert
11417 * PORTING: --with-getpass no longer exists
11419 1999-07-22 08:33 millert
11421 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11422 new files and new auth modules.
11424 1999-07-22 08:32 millert
11426 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11427 --with-fwtk and --without-passwd.
11429 1999-07-22 08:31 millert
11431 * HISTORY: Update history a bit
11433 1999-07-22 08:29 millert
11435 * COPYING, LICENSE: Now distributed under a BSD-style license
11437 1999-07-22 08:28 millert
11439 * auth/sudo_auth.c: o BSD-style copyright o Add support for
11440 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11441 rfc1938 code o new struct sudo_user global
11443 1999-07-22 08:25 millert
11445 * auth/: pam.c, sia.c: BSD-style copyright and use new log
11448 1999-07-22 08:24 millert
11450 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11451 Use asprintf() and snprintf() where sensible.
11453 1999-07-22 08:19 millert
11455 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11456 handling is now done more reasonably--better sanity checks and
11457 tty-based stamps are now done as files in a directory with the
11458 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11459 It is not currently possible to mix tty and non-tty based ticket
11460 schemes but this may change in the future (it requires sudo to
11461 use a directory instead of a file in the non-tty case). Also,
11462 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11463 really deletes the file. That way you don't get the lecture
11464 again just because you killed your ticket in .logout. BSD-style
11467 1999-07-22 08:13 millert
11469 * logging.c: o rewritten logging routines. log_error() now takes
11470 printf-style varargs and log_auth() for the return value of
11471 validate(). o BSD-style copyright
11473 1999-07-22 07:04 millert
11475 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11478 1999-07-22 07:02 millert
11480 * auth/fwtk.c: Use snprintf() where it makes sense and add a
11481 BSD-style copyright
11483 1999-07-22 07:00 millert
11485 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11486 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11489 1999-07-22 06:57 millert
11491 * emul/utime.h, utime.c: BSD-style copyright
11493 1999-07-22 06:57 millert
11495 * emul/search.h: this has been rewritten so use my BSD-style
11498 1999-07-15 11:21 millert
11500 * snprintf.c: include malloc.h if no stdlib.h
11502 1999-07-15 10:21 millert
11504 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11506 1999-07-15 10:20 millert
11508 * strerror.c: strerror() for systems w/o it
11510 1999-07-12 06:53 millert
11512 * visudo.c: stylistic changes
11514 1999-07-12 06:25 millert
11516 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11519 1999-07-11 16:10 millert
11521 * auth/pam.c: remove missed ref to PAM_nullpw
11523 1999-07-11 16:10 millert
11525 * auth/sudo_auth.h: pasto
11527 1999-07-11 15:19 millert
11529 * auth/kerb5.c: more or less complete now--still untested
11531 1999-07-11 15:09 millert
11533 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11535 1999-07-11 14:42 millert
11537 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11538 code into rfc1938.c
11540 1999-07-11 07:22 millert
11542 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11543 unchanged from dce_pwent.c
11545 1999-07-11 06:44 millert
11547 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11548 Could probably be much better
11550 1999-07-11 06:43 millert
11552 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11555 1999-07-11 05:37 millert
11557 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11559 1999-07-11 05:33 millert
11561 * auth/pam.c: don't use prompt global, it will go away
11563 1999-07-11 05:32 millert
11565 * auth/secureware.c: correct copyright years
11567 1999-07-10 20:32 millert
11569 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11570 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11571 New authentication API and methods
11573 1999-07-08 06:46 millert
11575 * parse.yacc: only save an entry if user_matches && host_matches,
11576 even if the stack is empty (fix for previous commit)
11578 1999-07-08 06:35 millert
11580 * parse.yacc: 1) Always save an entry on the stack if it is empty.
11581 This fixes the -l and -v flags that were broken by earlier parser
11584 2) In a Runas list, don't negate FALSE -> TRUE since that would
11585 make !foo match any time the user specified a runas user (via -u)
11588 1999-07-08 05:45 millert
11590 * testsudoers.c: interfaces and num_interfaces are now auto, not
11593 1999-07-07 14:09 millert
11595 * auth.c: use a static global to keep stae about empty passwords
11597 1999-07-07 14:08 millert
11599 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11602 1999-07-05 16:53 millert
11604 * auth.c: PAM prompt code was wrong, looks like we have to kludge
11607 1999-07-05 16:35 millert
11609 * auth.c: In the PAM code, when a user hits return at the first
11610 password prompt, exit without a warning just like the normal auth
11613 1999-07-05 16:15 millert
11615 * configure, configure.in: kludge around cross-compiler false
11618 1999-07-05 16:14 millert
11620 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11621 (correct) PAM code Tgetpass now takes an echo flag for use with
11622 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11623 useless umask setting Change error from BAD_ALLOCATION ->
11624 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11625 auth.c for consistency
11627 1999-07-05 16:11 millert
11629 * sudo.c: Some -Wall and kill some trailing spaces
11631 1999-07-05 16:10 millert
11633 * configure.in: define -D__EXTENSIONS__ for solaris so we get
11636 1999-06-22 09:42 millert
11638 * RUNSON: add Dynix 4.4.4
11640 1999-06-22 09:30 millert
11642 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11643 version, fall back on old kerb4 auth code
11645 1999-06-22 06:41 millert
11647 * INSTALL: clarify some things
11649 1999-06-22 06:38 millert
11651 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11653 1999-06-14 19:47 millert
11655 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11657 1999-06-03 12:34 millert
11659 * tgetpass.c: Fix open(2) return value checking, was NULL for
11660 fopen, should be -1 for open
11662 1999-06-03 12:06 millert
11666 1999-06-03 12:06 millert
11668 * configure.in: better wording for solaris pam notice
11670 1999-06-03 11:52 millert
11672 * CHANGES: document recent changes
11674 1999-06-03 11:52 millert
11676 * TROUBLESHOOTING: Update shadow password section
11678 1999-06-03 11:51 millert
11680 * auth.c: move authentication code from check.c to auth.c
11682 1999-06-03 11:51 millert
11684 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11686 1999-05-16 21:36 millert
11688 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11689 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11690 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11691 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11692 interface-related defines to interfaces.h so we don't have to
11693 include <netinet/in.h> everywhere.
11695 1999-05-14 12:30 millert
11697 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11698 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11699 braindeath with our own SUDO_MAX_PASS.
11700 It turns out the old DES crypt does the right thing with
11702 longert than 8 characters.
11703 o Fix common typo (necesary -> necessary)
11706 1999-05-03 12:00 millert
11708 * sudo.c: set $LOGNAME when we set $USER
11710 1999-04-27 00:00 millert
11712 * INSTALL: add comment about digital unix and interfaces.c warning
11715 1999-04-15 01:12 millert
11717 * sample.sudoers: use modern paths and give examples for some of
11718 the new parser features
11720 1999-04-10 13:03 millert
11722 * parse.c: fix comment
11724 1999-04-10 00:49 millert
11726 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11727 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11728 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11729 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11730 Function names should be flush with the start of the line so they
11731 can be found trivially in an editor and with grep
11733 1999-04-10 00:40 millert
11735 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11736 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11737 is already void, no need to cast it
11739 1999-04-10 00:37 millert
11741 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11742 (this should not be possible)
11744 1999-04-10 00:10 millert
11746 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11747 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11748 listed in sudoers) to the command instead of stashing the struct
11749 stat. Should be safer.
11751 1999-04-08 19:56 millert
11753 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11756 1999-04-07 20:20 millert
11760 1999-04-07 19:18 millert
11762 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11763 sudoers.pod: You can now specifiy a host list instead of just a
11764 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11767 1999-04-07 02:59 millert
11769 * testsudoers.c: Quiet -Wall
11771 1999-04-07 02:50 millert
11773 * parse.yacc: Move the push from the beginning of cmndspec to the
11774 end. This means we no longer have to do a push at the end of
11775 privilege, just reset some values.
11777 1999-04-06 20:24 millert
11779 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11780 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11783 1999-04-06 14:12 millert
11785 * sudoers.pod: modernize paths and update su example based on
11788 1999-04-06 14:06 millert
11790 * sample.sudoers: New runas semantics
11792 1999-04-06 13:54 millert
11794 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11795 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11796 ourselves so we don't need to rely on the system strdup(3) which
11797 may or may not exist. There is now no need to provide strdup()
11798 for those w/o it. Also, the prototype for estrdup() was wrong,
11799 it returns char * and its param is const.
11801 1999-04-06 13:40 millert
11803 * getcwd.c: $Sudo tag
11805 1999-04-06 13:20 millert
11807 * check.c: buf should be prompt; Michael Robokoff
11808 <mrobo@networkcs.com>
11810 1999-04-06 01:40 millert
11812 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11813 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11816 1999-04-06 01:38 millert
11818 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11821 1999-04-06 01:08 millert
11823 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11826 1999-04-06 01:00 millert
11828 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11829 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11830 command but the NOPASSWD flag was set. Make runasspec,
11831 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11832 support for '!' in the runas list Fix double printing of '%' and
11833 '+' for groups and netgroups respectively Add *_matched macros
11834 (no need for local stack variable). Should only be used directly
11835 after a pop (since top must be >= 2).
11837 1999-04-05 23:25 millert
11839 * aclocal.m4, configure.in: Add copyright, somewhat silly
11841 1999-04-05 16:57 millert
11843 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11844 check_sia.c, compat.h, config.h.in, configure, configure.in,
11845 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11846 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11847 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11848 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11849 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11850 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11851 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11852 1.6 and combine copyright statements
11854 1999-04-05 16:30 millert
11856 * sample.sudoers: Use ! not ^ to do negation
11858 1999-04-05 16:29 millert
11862 1999-04-05 16:28 millert
11864 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11865 across entris in a command list. Add a PASSWD tag to reverse
11866 NOPASSWD. When you override a runas or *PASSWD tag the value
11867 given becomes the new default for the rest of the command list.
11869 1999-04-02 16:03 millert
11871 * CHANGES, RUNSON: update for 1.5.9
11873 1999-04-02 16:02 millert
11875 * visudo.c: Shift return value of system(3) by 8 to get real exit
11876 value and if it is not 1 or 0 print the retval along with the
11879 1999-03-30 16:45 millert
11881 * Makefile.in: testsudoers needs LIBOBJS too
11883 1999-03-30 12:17 millert
11885 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11886 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11887 would not allow millert to run ls as root.
11889 1999-03-30 01:08 millert
11891 * CHANGES: new change
11893 1999-03-30 01:03 millert
11895 * parse.yacc: Save entries that match a ! command on the matching
11898 1999-03-30 01:01 millert
11900 * sudo.c: Make sudo's usage info better when mutually exclusive
11901 args are given and don't rely on argument order to detect this;
11904 1999-03-29 15:03 millert
11906 * CHANGES, Makefile.in, RUNSON: updates from CU
11908 1999-03-28 23:38 millert
11910 * Makefile.in: use gzip
11912 1999-03-28 23:31 millert
11914 * parse.yacc: Fix off by one error introduced in *alloc changes
11916 1999-03-28 23:05 millert
11918 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11919 check_sia.c, compat.h, config.h.in, configure, configure.in,
11920 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11921 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11922 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11923 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11924 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11925 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11926 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11927 emul/utime.h: ++version
11929 1999-03-28 21:59 millert
11931 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11932 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11933 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11934 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11935 emalloc/erealloc/estrdup
11937 1999-03-28 20:29 millert
11939 * alloc.c: error checking memory allocation routines
11941 1999-03-28 19:23 millert
11943 * parse.yacc: Still not right, this fixes it for real
11945 1999-03-28 19:08 millert
11947 * parse.yacc: Fix for previous commit
11949 1999-03-28 19:05 millert
11951 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11952 when mixing different runas specs and ! commands. For example:
11953 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11954 allow millert to run whoami as root as well as daemon when it
11955 should just allow daemon. The problem was that comma-separated
11956 commands in a list shared the same entry on the matching stack.
11957 Now they get their own entry iff there is a full match. It may
11958 be better to just make the runas spec persistent across all
11959 commands in a list like the user and host entries of the matching
11960 stack. However, since that is a fairly major change it should
11961 gets its own minor rev increase.
11963 1999-03-28 13:50 millert
11965 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11968 1999-03-26 13:17 millert
11972 1999-03-26 13:12 millert
11974 * sample.sudoers: better su entry
11976 1999-03-26 13:10 millert
11980 1999-03-26 13:09 millert
11982 * check.c, configure.in: new pam code that works on solaris, should
11983 work on linux too; aelberg@home.com
11985 1999-03-19 14:44 millert
11987 * RUNSON: more entries
11989 1999-03-19 14:43 millert
11991 * config.h.in: only include strings.h if there is no string.h
11993 1999-03-17 15:25 millert
11995 * config.guess: Sinix is now being called ReliantUNIX;
11996 bjjackso@us.oracle.com
11998 1999-03-13 13:37 millert
12000 * sudo.c: shost must be set before log functions are called #ifdef
12003 1999-03-07 18:34 millert
12005 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
12006 command args. Stop processing an arg when you hit a backslash so
12007 the quoted-character detection can catch it.
12009 1999-02-26 01:19 millert
12011 * interfaces.c: include sys/time.h; aparently AIX needs it.
12014 1999-02-23 19:43 millert
12016 * configure, configure.in: add missing case statement so
12017 --without-sendmail works
12019 1999-02-22 21:51 millert
12023 1999-02-22 15:10 millert
12025 * configure, configure.in: only search for -lsun in irix <= 4.x
12027 1999-02-22 15:01 millert
12029 * configure, configure.in: back out last configure.in change now
12030 that I've hacked autoconf to fix the real problem and add a
12033 1999-02-22 14:32 millert
12037 1999-02-22 14:05 millert
12039 * getcwd.c: add def of dirfd() for those without it
12041 1999-02-22 10:58 millert
12043 * configure.in, configure: When falling back to checking for
12044 socket() when linking with "-lsocket -lnsl" check for main()
12045 instead since autoconf has already cached the results of checking
12046 for socket() in -lsocket. This is really an autoconf bug as it
12047 should use the extra libs as part of the cache variable name.
12049 1999-02-22 10:47 millert
12051 * configure.in: typo
12053 1999-02-21 15:18 millert
12055 * configure.in: fix occurrence of $with_timeout that should be
12056 $with_password_timeout;
12057 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
12059 1999-02-17 11:40 millert
12061 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
12064 1999-02-11 01:41 millert
12066 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
12067 it does not have it
12069 1999-02-09 13:11 millert
12071 * configure, configure.in: define for_BSD_TYPES irix
12073 1999-02-06 19:47 millert
12075 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
12076 clear that it is the user's password, not root's, that we want.
12078 1999-02-06 19:43 millert
12080 * check.c, sudo.h: If the user enters an empty password and really
12081 has no password, accept the empty password they entered.
12082 Perviously, they could enter anything *but* an empty password.
12083 Also, add GETPASS macro that calls either tgetpass() or getpass()
12084 depending on how sudo was configured. Problem noted by
12085 jdg@maths.qmw.ac.uk
12087 1999-02-02 23:32 millert
12089 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12090 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12091 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12092 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12093 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
12094 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
12095 emul/utime.h: add explicate copyright
12097 1999-02-02 23:16 millert
12099 * CHANGES: mention -lsocket, -lnsl configure changes
12101 1999-02-02 17:54 millert
12103 * sudo.c: Don't clobber errno after calling check_sudoers().
12105 1999-01-31 19:46 millert
12107 * configure.in, configure: When linking with both -lsocket and
12108 -lnsl be sure to do so in that order. Also, when we can't find
12109 socket() or inet_addr() and have to try linking with both libs,
12112 1999-01-31 19:45 millert
12114 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
12116 1999-01-23 12:18 millert
12118 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
12121 1999-01-22 13:13 millert
12123 * configure, CHANGES, INSTALL, configure.in: fix and correctly
12124 document --with-umask; problem noted by adap@adap.org
12126 1999-01-19 20:38 millert
12128 * configure.in, configure: only use /usr/{man,catman}/local to
12129 store man pages if suer didn't override prefix or mandir
12131 1999-01-19 20:24 millert
12133 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
12136 1999-01-18 21:53 millert
12138 * RUNSON: updates from users
12140 1999-01-18 21:04 millert
12142 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
12143 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
12145 1999-01-18 20:00 millert
12147 * configure, configure.in: better fix for the problem of unresolved
12148 symbols in -lnsl or -lsocket
12150 1999-01-18 19:39 millert
12152 * configure, configure.in: when checking for functions in -lnsl and
12153 -lsocket link with both of them to avoid unresolved symbols on
12154 some weirdo systems
12156 1999-01-17 20:49 millert
12158 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
12159 RCS before the RCS->CVS switch
12161 1999-01-17 18:16 millert
12163 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12164 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
12165 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12166 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
12167 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
12168 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
12169 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
12170 emul/utime.h: add sudo tags
12172 1999-01-17 17:53 millert
12174 * version.h, sudo.h: testing Sudo tag
12176 1999-01-17 17:40 millert
12178 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12179 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12180 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12181 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12182 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12183 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12184 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12185 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12186 emul/utime.h: crank version and regen files
12188 1999-01-17 17:27 millert
12190 * Makefile.in: kill rcs goop in update_version and fix now that
12193 1999-01-17 17:08 millert
12195 * INSTALL, check.c, config.h.in, configure, configure.in,
12196 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12197 fcusack@iconnet.net
12199 1999-01-17 16:45 millert
12201 * realpath.c, sudo_realpath.c: we no longer use realpath
12203 1999-01-17 16:44 millert
12205 * qualify.c: replaced by find_path.c
12207 1999-01-17 16:43 millert
12209 * options.h: all options are now configure flags
12211 1999-01-17 16:42 millert
12215 1999-01-17 16:41 millert
12217 * getwd.c: superceded by getcwd.c
12219 1999-01-17 16:36 millert
12221 * getpass.c: superceded by tgetpass.c
12223 1999-01-17 16:36 millert
12225 * SUPPORTED: superceded by RUNSON
12227 1999-01-17 16:33 millert
12229 * OPTIONS: No longer used now that we have configure options for
12232 1999-01-17 16:32 millert
12234 * configure: regen based on configure.in
12236 1999-01-17 16:31 millert
12238 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12239 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12240 on sudo.pod, sudoers.pod, and visudo.pod
12242 1998-12-11 12:16 millert
12244 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12246 1998-12-07 16:16 millert
12248 * interfaces.c: close sock when we are done with it
12250 1998-11-27 19:37 millert
12252 * parse.yacc: never say "error on line -1"
12254 1998-11-23 23:38 millert
12256 * configure.in: check for -lnsl before -lsocket
12258 1998-11-23 23:29 millert
12260 * configure.in: quote '[', ']' used in ranges correctly
12262 1998-11-21 17:54 millert
12264 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12266 1998-11-20 18:33 millert
12270 1998-11-20 18:33 millert
12272 * INSTALL: more info for 1.5.7
12274 1998-11-20 18:30 millert
12276 * README: update for 1.5.7
12278 1998-11-20 14:26 millert
12280 * parse.yacc: make increases of cm_list_size and ga_list_size be
12281 similar to increases of stacksize (ie: >= not > in initial
12284 1998-11-20 14:22 millert
12286 * parse.yacc: when we get a syntax error, report it for the
12287 previous line since that's generally where the error occurred.
12289 1998-11-18 15:31 millert
12291 * config.h.in, configure.in, interfaces.c: add back check for
12292 sys/sockio.h but only use it if SIOCGIFCONF is not defined
12294 1998-11-18 15:25 millert
12296 * config.h.in: define BSD_COMP for svr4
12298 1998-11-17 23:16 millert
12300 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12301 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12302 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12303 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12306 1998-11-17 23:10 millert
12308 * configure.in: kill check for sockio,h
12310 1998-11-17 23:10 millert
12312 * config.h.in: no more HAVE_SYS_SOCKIO_H
12314 1998-11-17 22:51 millert
12316 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12317 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12318 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12319 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12322 1998-11-16 17:38 millert
12324 * sudo.c: add missing inform_user()
12326 1998-11-13 19:21 millert
12328 * find_path.c: return NOT_FOUND if given fully qualified path and
12329 it does not exist previously it would perror(ENOENT) which
12330 bypasses the option to not leak path info
12332 1998-11-13 19:20 millert
12334 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12335 for kerb, check for -ldes
12337 1998-11-13 14:19 millert
12339 * INSTALL: tty tickets are user:tty now
12341 1998-11-13 14:10 millert
12343 * check.c: when using tty tickets make it user:tty not user.tty as
12344 a username could have a '.' in it
12346 1998-11-09 19:15 millert
12348 * sudo.c: add "ignoring foo found in ." for auth successful case
12350 1998-11-09 17:57 millert
12352 * sudo.c: add missing printf param
12354 1998-11-08 15:56 millert
12356 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12357 go back to printing "command not found" unless
12358 --disable-path-info specified. Also, tell user when we ignore
12359 '.' in their path and it would have been used but for
12362 1998-11-08 13:51 millert
12364 * check.c, sudo.c: Only one space after a colon, not two, in
12367 1998-11-05 12:59 millert
12369 * sudo.pod: document setting $USER
12371 1998-11-04 22:24 millert
12373 * check.c: fix bugs with prompt expansion
12375 1998-11-04 21:21 millert
12377 * sudo.c: set $USER for root too
12379 1998-11-04 17:13 millert
12381 * getspwuid.c: typo
12383 1998-11-04 17:07 millert
12385 * configure.in: HP-UX's iscomsec is in -lsec, not libc
12387 1998-11-03 22:24 millert
12389 * configure.in: remove some entries in the OS case statement that
12392 1998-11-03 22:19 millert
12394 * TROUBLESHOOTING: add "cd" section and flush out syslog section
12396 1998-11-03 20:51 millert
12398 * Makefile.in: no more sudo-lex.yy.c
12400 1998-11-03 20:50 millert
12402 * check_sia.c: add custom prompt support
12404 1998-11-03 20:40 millert
12406 * sudo.c: kill perror("malloc") since we already have a good error
12407 messages pw_ent -> pw for brevity set $USER if -u specified
12409 1998-11-03 20:39 millert
12411 * parse.c: kill perror("malloc") since we already have a good error
12412 messages pw_ent -> pw for brevity when checking if %group
12413 matches, look up user in password file so that %groups works in a
12416 1998-11-03 20:39 millert
12418 * logging.c, parse.yacc: kill perror("malloc") since we already
12419 have a good error messages
12421 1998-11-03 20:38 millert
12423 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12424 perror("malloc") since we already have a good error messages
12425 pw_ent -> pw for brevity
12427 1998-11-03 15:03 millert
12429 * tgetpass.c: the prompt is expanded before tgetpass is called
12431 1998-11-03 15:03 millert
12433 * sudo.h: tgetpass now has the same args as getpass again
12435 1998-11-03 15:02 millert
12437 * getspwuid.c: add iscomsec, issecure support
12439 1998-11-03 15:02 millert
12441 * check.c: we now expand any %h or %u in the prompt before passing
12444 1998-11-03 14:58 millert
12446 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12448 1998-11-03 14:56 millert
12450 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12452 1998-11-03 14:55 millert
12454 * configure.in: add check for iscomsec in HP-UX
12456 1998-11-03 14:51 millert
12458 * configure.in: check for issecure if we have getpwanam on SunOS
12459 some options are incompatible with DUNIX SIA check for dispcrypt
12462 1998-10-25 15:21 millert
12464 * config.h.in: add HAVE_DISPCRYPT
12466 1998-10-25 15:21 millert
12468 * secureware.c: add back support for non-dispcrypt based checking
12471 1998-10-25 00:51 millert
12473 * INSTALL: sia changes
12475 1998-10-25 00:48 millert
12477 * configure.in: SIA becomes the default on Digital UNIX now havbe
12478 --disable-sia to turn it off...
12480 1998-10-24 23:52 millert
12482 * check.c: move local includes after system ones
12484 1998-10-24 19:28 millert
12486 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12487 INCORRECT_PASSWORD or an insult to stderr
12489 1998-10-24 19:07 millert
12491 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12492 password. Only the first iteration was working.
12494 1998-10-21 21:00 millert
12496 * aclocal.m4: don't trust UID_MAX or MAXUID
12498 1998-10-21 20:35 millert
12500 * configure.in: fix two pastos
12502 1998-10-21 20:30 millert
12504 * configure.in: fix typo
12506 1998-10-21 20:19 millert
12508 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12509 legal to be negative in DUNX 5.0
12511 1998-10-21 20:15 millert
12513 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12514 -lm but check for -ldb since DUNX < 4.0 lacks it
12516 1998-10-21 19:50 millert
12518 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12519 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12520 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12523 1998-10-20 17:22 millert
12525 * INSTALL: updated --with-editor blurb
12527 1998-10-20 17:21 millert
12529 * TROUBLESHOOTING: tell how to put sudoers in a different dir
12531 1998-10-20 16:22 millert
12533 * configure.in: add missing quotes around $with_editor
12535 1998-10-20 14:00 millert
12537 * configure.in: typo in --with-editor bits
12539 1998-10-20 01:24 millert
12541 * INSTALL: I don't expect it to work on Solaris
12543 1998-10-20 01:24 millert
12545 * check.c: add back security/pam_misc.h
12547 1998-10-19 17:13 millert
12549 * INSTALL: remove dunix note since configure checks for this now
12551 1998-10-19 16:30 millert
12553 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12556 1998-10-19 14:32 millert
12558 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12561 1998-10-19 14:32 millert
12563 * config.h.in: add HAVE_INITPRIVS
12565 1998-10-19 14:31 millert
12567 * sudo.c: call initprivs() if we have it for getprpwuid later on
12569 1998-10-19 14:30 millert
12571 * Makefile.in: clean pathnames.h too
12573 1998-10-19 14:28 millert
12575 * configure.in: quote "Sorry, try again." with [] since it has a
12576 comma in it set LIBS when we add stuff to SUDO_LIBS set
12577 SECUREWARE when we find getprpwuid() so we can check for
12578 bigcrypt, set_auth_parameters, and initprivs later.
12580 1998-10-19 13:48 millert
12582 * INSTALL: update Digital UNIX note about acl.h
12584 1998-10-18 20:26 millert
12586 * INSTALL: add --with-sia --without-root-sudo ->
12587 --disable-root-sudo some reordering
12589 1998-10-18 20:22 millert
12591 * secureware.c: add whitespace
12593 1998-10-18 20:22 millert
12595 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12596 sudo.h: add SIA support
12598 1998-10-18 20:21 millert
12600 * check_sia.c: Initial revision
12602 1998-10-18 19:42 millert
12604 * configure.in: when checking for -lsocket, -lnsl, and -linet,
12605 check for the specific functions we need from them.
12607 1998-10-18 19:10 millert
12609 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12611 1998-10-18 18:15 millert
12613 * sudo.h, Makefile.in: added check_secureware
12615 1998-10-18 18:12 millert
12617 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12620 1998-10-18 18:00 millert
12622 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12623 other sets defined. configure now does that for us
12625 1998-10-18 17:45 millert
12627 * configure.in: move some --with options around change a bunch of
12628 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12630 1998-10-18 01:09 millert
12632 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12633 that caused a syntax error add some echo verbage
12635 1998-10-17 18:08 millert
12637 * check.c: moved SecureWare stuff into secureware.c
12639 1998-10-17 18:07 millert
12641 * secureware.c: Initial revision
12643 1998-10-17 17:02 millert
12645 * INSTALL: update url to solaris gcc bins
12647 1998-10-17 16:39 millert
12649 * INSTALL: change option formatter and flesh out someentries
12651 1998-10-17 16:18 millert
12653 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12654 environment variable
12656 1998-10-17 16:01 millert
12658 * BUGS: everything is now done via configure
12660 1998-10-17 16:00 millert
12662 * README: prev rev was 1.5.6
12664 1998-10-17 00:33 millert
12666 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12669 1998-10-17 00:32 millert
12671 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12674 1998-10-17 00:31 millert
12676 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12677 sudoers_gid, sudoers_mode from configure
12679 1998-10-17 00:30 millert
12681 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12682 substituted into the Makefile, not config.h
12684 1998-10-17 00:30 millert
12686 * INSTALL: document all --with/--enable options
12688 1998-10-15 02:25 millert
12690 * insults.h: options.h is no more
12692 1998-10-15 02:25 millert
12694 * config.h.in: assimilated options.h
12696 1998-10-15 02:24 millert
12698 * configure.in: moved options from options.h to configure
12700 1998-10-15 01:41 millert
12702 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12703 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12704 sudo_setenv.c, visudo.c: no more options.h
12706 1998-10-15 01:39 millert
12708 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12711 1998-10-15 01:32 millert
12713 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12715 1998-10-15 00:10 millert
12717 * tgetpass.c: if select return < -1 still prompt for pw
12719 1998-10-15 00:03 millert
12721 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12722 IGNORE_DOT_PATH into configure options
12724 1998-10-14 23:57 millert
12726 * parse.c: FAST_MATCH is no longer an optino
12728 1998-10-14 23:52 millert
12730 * check.c: remove_timestamp() if timestamp is preposterous
12732 1998-10-14 23:36 millert
12734 * options.h: convert more options to --with/--enable
12736 1998-10-14 23:36 millert
12738 * INSTALL, aclocal.m4: logfile -> logpath
12740 1998-10-14 23:31 millert
12742 * configure.in: convert more options into --with and --enable
12744 1998-10-14 23:28 millert
12746 * tgetpass.c: catch EINTR in select and restart
12748 1998-10-14 23:15 millert
12750 * logging.c: sys/errno -> errno
12752 1998-09-24 11:40 millert
12754 * sudo.c: UMASK -> SUDO_UMASK.
12756 1998-09-24 11:36 millert
12758 * check.c, logging.c: time.h, not sys/time.h
12760 1998-09-21 19:52 millert
12762 * logging.c: MAILER -> _PATH_SENDMAIL
12764 1998-09-21 00:06 millert
12766 * INSTALL, configure.in: no more --with-C2, now it is
12769 1998-09-21 00:00 millert
12771 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12772 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12773 Always include shadow support if the platform supports it and the
12774 user did not disable it via configure
12776 1998-09-20 19:48 millert
12778 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12780 1998-09-20 19:16 millert
12782 * Makefile.in: pathnames.h -> pathnames.h.in
12784 1998-09-20 19:14 millert
12786 * check.c: fix version string
12788 1998-09-20 19:12 millert
12790 * check.c: move pam_conv to be static to auth function remove
12791 pam_misc.h (solaris doesn't have one)
12793 1998-09-20 19:10 millert
12795 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12798 1998-09-20 19:10 millert
12800 * configure.in: munge pathnames.h.in -> pathnames.h kill
12803 1998-09-20 19:10 millert
12805 * pathnames.h.in: convert to pathnames.h.in
12807 1998-09-18 20:20 millert
12809 * configure.in: fix typo in sysv4 matching case /.
12811 1998-09-18 01:29 millert
12813 * check.c: pam stuff needs to run as root, not user, for shadow
12816 1998-09-17 12:26 millert
12818 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12819 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12820 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12821 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12822 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12823 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12824 BUGS, INSTALL, README, configure.in: updated version
12826 1998-09-17 12:13 millert
12828 * check.c: user version.h for long message
12830 1998-09-17 11:53 millert
12832 * check.c: this is version 1.5.6
12834 1998-09-16 13:42 millert
12836 * Makefile.in: remove errant backslash
12838 1998-09-14 22:25 millert
12840 * options.h, parse.yacc, pathnames.h.in: fix version string
12842 1998-09-14 22:02 millert
12844 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12846 1998-09-14 22:02 millert
12848 * RUNSON: updated for 1.5.6
12850 1998-09-14 11:48 millert
12852 * interfaces.c: kill unused localhost_mask var copy if name to
12853 ifr_tmp after we zero it
12855 1998-09-13 15:50 millert
12857 * INSTALL: Better description of new vs. old sudoers modes fix some
12858 typos better description of /usr/ucb/cc gotchas on slowaris
12860 1998-09-13 15:49 millert
12862 * Makefile.in: add sample.pam
12864 1998-09-13 15:32 millert
12866 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12868 1998-09-12 11:10 millert
12870 * README: mention TROUBLESHOOTING more fix some typos
12872 1998-09-11 20:30 millert
12874 * configure.in: move --enable/--disable to be after --with
12876 1998-09-11 20:30 millert
12878 * INSTALL: document --enable/--disable
12880 1998-09-11 20:26 millert
12882 * INSTALL: document --with-pam
12884 1998-09-11 19:47 millert
12886 * configure.in: Add message for pam users
12888 1998-09-11 19:27 millert
12890 * sample.pam: Initial revision
12892 1998-09-11 19:23 millert
12894 * config.h.in: fix HAVE_PAM
12896 1998-09-11 19:19 millert
12898 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12899 <GCalvin@kenwoodusa.com>
12901 1998-09-10 18:51 millert
12903 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12905 1998-09-10 18:51 millert
12907 * logging.c: add WRAP_LOG and HOST_IN_LOG
12909 1998-09-10 18:37 millert
12911 * configure.in: add --enable-log-host and --enable-log-wrap
12913 1998-09-10 18:32 millert
12915 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12918 1998-09-08 20:45 millert
12920 * compat.h: add howmany macro
12922 1998-09-08 20:43 millert
12924 * tgetpass.c: include sys/param.h to get howmany macro
12926 1998-09-07 20:42 millert
12928 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12931 1998-09-07 12:51 millert
12933 * fnmatch.c: bring in stdio.h for NULL
12935 1998-09-07 12:50 millert
12937 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12939 1998-09-07 12:43 millert
12941 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12943 1998-09-07 12:42 millert
12945 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12947 1998-09-07 12:41 millert
12949 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12952 1998-09-07 12:39 millert
12954 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12956 1998-09-07 12:06 millert
12958 * interfaces.c: initialize previfname
12960 1998-09-07 11:51 millert
12962 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12963 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12964 IFF_LOOPBACK instead of kludging it
12966 1998-09-07 11:49 millert
12968 * configure.in: typo
12970 1998-09-07 00:01 millert
12972 * Makefile.in: don't need special build line for sudo.tab.o
12974 1998-09-06 23:58 millert
12976 * Makefile.in: don't clean sudo.tab.[ch]
12978 1998-09-06 23:48 millert
12980 * sudo.c: Sudo should prompt for a password before telling the user
12981 that a command could not be found.
12983 1998-09-06 23:47 millert
12987 1998-09-06 23:25 millert
12989 * INSTALL, README: no longer require yacc
12991 1998-09-06 23:19 millert
12993 * Makefile.in: typo
12995 1998-09-06 23:18 millert
12997 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12999 1998-09-06 23:09 millert
13001 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
13002 command args if you get a '='
13004 1998-09-06 22:59 millert
13006 * insults.h: fix version ,
13008 1998-09-06 22:57 millert
13010 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
13013 1998-09-06 22:55 millert
13015 * getcwd.c: getcwd(3) from OpenBSD for those without it.
13017 1998-09-06 22:51 millert
13019 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
13021 1998-09-06 22:49 millert
13023 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
13026 1998-09-06 22:41 millert
13028 * parse.c: use NAMLEN() macro
13030 1998-09-06 22:34 millert
13032 * fnmatch.c: remove duplicate include of string.h
13034 1998-09-06 22:28 millert
13036 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13038 1998-09-06 22:28 millert
13040 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13042 1998-09-06 22:28 millert
13044 * config.h.in: add dev_t and ino_t
13046 1998-07-28 12:44 millert
13048 * check.c: fix OTP_ONLY for opie
13050 1998-06-24 12:22 millert
13052 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
13054 1998-05-19 00:10 millert
13056 * Makefile.in: make update_version saner
13058 1998-05-18 23:32 millert
13060 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
13062 1998-05-18 23:32 millert
13064 * configure.in: check for waitpid and wait3 or no waitpid
13066 1998-05-18 23:31 millert
13068 * logging.c: used waitpid or wait3 if we have 'em
13070 1998-05-02 14:16 millert
13072 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
13075 1998-04-27 20:09 millert
13077 * configure.in: don't need to explicately mention -lsocket -lnsl
13080 1998-04-25 01:56 millert
13082 * configure.in: dynix should not link with -linet
13084 1998-04-10 15:32 millert
13086 * INSTALL: mention that HP-UX doesn't ship with yacc
13088 1998-04-06 22:35 millert
13090 * check.c: ignore kerberos if we can't get the local realm
13092 1998-04-05 23:37 millert
13094 * configure.in, BUGS, INSTALL, README: ++version
13096 1998-04-05 23:36 millert
13100 1998-04-05 23:35 millert
13102 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
13103 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
13104 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
13105 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
13106 visudo.c: updated version
13108 1998-04-05 23:34 millert
13110 * check.c, sudo.h: fix version
13112 1998-04-05 23:33 millert
13114 * getcwd.c: don't use popen/pclose. Do it inline.
13116 1998-04-05 23:25 millert
13118 * lsearch.c: add rcsid
13120 1998-04-05 23:21 millert
13124 1998-04-05 23:17 millert
13126 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
13127 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13128 check.c: updated version
13130 1998-04-05 23:15 millert
13132 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
13135 1998-04-05 23:14 millert
13137 * Makefile.in: getwd.c -> getcwd.c
13139 1998-04-05 22:49 millert
13141 * config.h.in: kill HAVE_GETWD
13143 1998-04-05 22:49 millert
13145 * configure.in: getcwd, not getwd
13147 1998-04-05 22:48 millert
13149 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
13150 defeats the purpose
13152 1998-03-31 00:15 millert
13154 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
13156 1998-03-31 00:05 millert
13158 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13159 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13160 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13161 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13162 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13163 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13166 1998-03-30 23:54 millert
13168 * configure.in: support *-ccur-sysv4 and fix two typos
13170 1998-03-27 19:52 millert
13172 * configure.in: don't echo about with_logfile and with_timedir
13174 1998-03-27 19:49 millert
13176 * INSTALL: document --with-logfile and --with-timedir
13178 1998-03-27 19:46 millert
13180 * aclocal.m4: support --with-logfile and --with-timedir
13182 1998-03-27 19:46 millert
13184 * configure.in: Add --with-logfile and --with-timedir
13186 1998-03-27 19:27 millert
13188 * sudo.c: change size computation of NewArgv for UNICOS
13190 1998-02-18 20:10 millert
13192 * configure.in: treate -*-sysv4* like *-*-svr4
13194 1998-02-18 18:19 millert
13196 * configure.in: fix spacing for --with-authenticate help
13198 1998-02-18 16:39 millert
13200 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13201 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13202 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13203 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13204 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13205 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13208 1998-02-18 16:23 millert
13210 * parse.yacc: fix off by one error in push macro
13212 1998-02-17 01:15 millert
13214 * configure.in: removed bogus alloca hack
13216 1998-02-17 01:15 millert
13218 * check.c: added AIX 4.x authenticate() support
13220 1998-02-17 01:11 millert
13222 * parse.yacc: include alloca.h if using bison and not gcc and it
13223 exists. fixes an alloca problem on hpux 10.x
13225 1998-02-17 00:39 millert
13227 * INSTALL: mention --with-authenticate
13229 1998-02-17 00:37 millert
13231 * configure.in: added AIX authenticate() support
13233 1998-02-17 00:22 millert
13235 * config.h.in: add HAVE_AUTHENTICATE
13237 1998-02-16 23:58 millert
13239 * interfaces.c: dynamically size ifconf buffer
13241 1998-02-16 23:56 millert
13243 * configure.in: quote '[' and ']'
13245 1998-02-16 21:42 millert
13247 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13248 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13249 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13250 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13251 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13252 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13255 1998-02-16 19:06 millert
13257 * visudo.pod: add ERRORS section
13259 1998-02-16 18:57 millert
13261 * TROUBLESHOOTING: add busy stmp file explanation
13263 1998-02-15 18:49 millert
13265 * configure.in: the name of the cached var that signals whether or
13266 not you are cross compiling changed. It is now
13267 ac_cv_prog_cc_cross
13269 1998-02-11 16:26 millert
13271 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13273 1998-02-06 21:55 millert
13275 * sample.sudoers, sudoers.pod: better example of su but not root su
13277 1998-02-06 15:49 millert
13279 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13280 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13281 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13282 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13283 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13284 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13287 1998-02-06 15:48 millert
13289 * Makefile.in: correct regexp for updating version
13291 1998-02-06 14:05 millert
13293 * tgetpass.c: remove bogus flush of stderr spew prompt before
13294 turning off echo. Seems to fix a weird problem where if sudo
13295 complained about a bogus stamp file the user would sometimes not
13296 have a chance to enter a password
13298 1998-02-06 14:05 millert
13300 * check.c: fix bogus flush of stderr
13302 1998-02-05 19:19 millert
13304 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13306 1998-02-05 19:18 millert
13308 * configure.in: support hpux1[0-9] not just hpux10
13310 1998-01-30 14:59 millert
13312 * parse.c: set sudoers_fp to nil after closing
13314 1998-01-24 01:05 millert
13316 * config.guess, config.sub: updated from autoconf 2.12
13318 1998-01-24 00:50 millert
13320 * configure.in: add *-*-svr4 rule
13322 1998-01-22 22:53 millert
13324 * tgetpass.c: fix select usage for high fd's (dynamically allocate
13327 1998-01-22 22:49 millert
13329 * check.c: kill extra whitespace
13331 1998-01-22 19:28 millert
13333 * sudo.c: do an initgroups() before running a command, unless the
13334 target user is root.
13336 1998-01-22 12:22 millert
13338 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13341 1998-01-21 01:56 millert
13343 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13344 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13347 1998-01-21 01:32 millert
13349 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13352 1998-01-21 01:29 millert
13354 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13355 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13356 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13359 1998-01-21 01:20 millert
13361 * Makefile.in: more tweaks to update_version
13363 1998-01-21 01:19 millert
13365 * Makefile.in: fixed up update_version rule
13367 1998-01-21 00:55 millert
13369 * configure.in: ++version
13371 1998-01-21 00:53 millert
13373 * Makefile.in: removed supe of check.c
13375 1998-01-21 00:51 millert
13377 * INSTALL: ++version I missed
13379 1998-01-21 00:51 millert
13383 1998-01-21 00:48 millert
13385 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13386 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13387 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13388 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13389 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13390 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13391 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13393 1998-01-21 00:47 millert
13395 * CHANGES: updated for 1.5.5
13397 1998-01-21 00:35 millert
13399 * Makefile.in: add rules to update version stuff in files so I
13400 don't need to do it by hand
13402 1998-01-21 00:04 millert
13404 * sudo.h: sudoers_fp is now extern
13406 1998-01-21 00:03 millert
13408 * sudo.c: in check_sudoers, cache the sudoers file handle in
13409 sudoers_fp so we don't have to open it again in the parse. This
13410 may help with weird solaris problems where EAGAIN sometime
13413 1998-01-21 00:02 millert
13415 * parse.c: sudoers file open is now done only in check_sudoers() so
13416 we just do a rewind() instead of an open. May help people on
13417 solaris who were getting EAGAIN.
13419 1998-01-16 11:43 millert
13421 * INSTALL: mention that newer glibc is fixed
13423 1998-01-13 12:58 millert
13425 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13426 so ignore _RLD* instead of _RLD_*
13428 1998-01-13 10:32 millert
13432 1998-01-13 10:19 millert
13434 * parse.c: fix that bug for real
13436 1998-01-13 02:39 millert
13438 * INSTALL: document Linux's libc6 brokenness.
13440 1998-01-13 02:00 millert
13442 * parse.yacc: -Wall
13444 1998-01-13 01:22 millert
13448 1998-01-13 00:50 millert
13450 * TROUBLESHOOTING: remind people to HUP syslogd
13452 1998-01-13 00:05 millert
13454 * Makefile.in: add -O flag to tar
13456 1998-01-13 00:00 millert
13458 * TODO, RUNSON: updated
13460 1998-01-12 23:59 millert
13462 * sudo.pod: remove author's email addr. people should mail
13465 1998-01-12 23:49 millert
13467 * INSTALL: fix version
13469 1998-01-12 23:48 millert
13471 * README, check.c, compat.h, config.h.in, configure.in,
13472 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13473 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13474 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13475 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13476 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13477 visudo.c: ++version
13479 1998-01-12 23:44 millert
13483 1998-01-12 23:42 millert
13485 * INSTALL, Makefile.in: ++version
13487 1998-01-12 23:41 millert
13489 * CHANGES: updated fort 1.5.4
13491 1998-01-12 23:41 millert
13493 * check.c: exit(1) if user enters no passwd
13495 1998-01-12 23:37 millert
13499 1998-01-12 23:10 millert
13501 * parse.c: commands can start with ./* not just /* -- fixes a
13502 serious security hole.
13504 1997-12-21 18:17 millert
13506 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13507 leave it as "unknown".
13509 1997-11-23 13:29 millert
13511 * sample.sudoers: fix usage of (username) in conjunction with , and
13514 1997-11-23 13:28 millert
13516 * visudo.c: catch the case where the user is not in the passwd file
13518 1997-11-23 13:24 millert
13520 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13521 the nfds arg to select(2)
13523 1997-11-23 01:53 millert
13525 * sudo.c: define tty global to an initial value to avoid dumping
13526 core in logging functions when passwd file is unavailable.
13528 1997-11-23 01:51 millert
13530 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13531 gotten the passwd entry
13533 1997-11-23 00:21 millert
13535 * sudo.pod: talk about problem of ALL
13537 1997-10-10 00:54 millert
13539 * README: new web location
13541 1997-10-10 00:54 millert
13543 * INSTALL: fdesc bug is fixed in Open/Net BSD
13545 1997-10-10 00:52 millert
13547 * HISTORY: updates from Nieusma
13549 1997-10-09 18:37 millert
13551 * dce_pwent.c: move compat.h after the system includes
13553 1997-08-06 14:58 millert
13555 * logging.c: save errno from being clobbered by wait(). From Theo
13557 1997-05-21 11:57 millert
13559 * compat.h: fix an occurence of setresuid -> setreuid (typo)
13561 1997-03-19 17:45 millert
13563 * install-sh: check for path to strip
13565 1997-01-15 19:05 millert
13567 * logging.c: deal with maxfilelen < 0 case
13569 1997-01-15 19:05 millert
13571 * OPTIONS: fixed descriptin
13573 1996-12-11 23:10 millert
13575 * sudo.c: correct error message if mode/owner wrong and not
13576 statable by owner but is statable by root.
13578 1996-11-23 02:18 millert
13580 * config.guess, config.sub: autoconf 2.11
13582 1996-11-16 14:42 millert
13584 * CHANGES, RUNSON, TODO: sudo 1.5.3.
13586 1996-11-14 15:08 millert
13588 * sudo.h, parse.yacc: command_alias -> generic_alias
13590 1996-11-13 22:50 millert
13592 * sample.sudoers: added Runas_Alias example and fixed syntax errors
13594 1996-11-13 22:50 millert
13596 * OPTIONS, options.h: updated MAILSUBJECT
13598 1996-11-13 22:49 millert
13600 * logging.c: added %h expansion
13602 1996-11-13 21:37 millert
13604 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13605 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13606 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13607 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13608 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13609 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13610 visudo.c, INSTALL, README, configure.in: ++version
13612 1996-11-13 20:01 millert
13614 * emul/utime.h, BUGS: ++version
13616 1996-11-13 19:45 millert
13618 * sudoers.pod: document Runas_Alias
13620 1996-11-13 19:22 millert
13622 * visudo.pod: q (uid) -> Q
13624 1996-11-13 19:21 millert
13626 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13629 1996-11-13 19:05 millert
13631 * parse.yacc: add size params to sprintf
13633 1996-11-13 19:04 millert
13635 * parse.lex: allow trailing space after '\\' but before '\n'
13637 1996-11-13 19:04 millert
13639 * find_path.c: off by one error in path size check
13641 1996-11-13 19:03 millert
13643 * check.c: sprintf paranoia
13645 1996-11-12 11:59 millert
13647 * parse.yacc: fixed more_aliases
13649 1996-11-12 11:58 millert
13651 * visudo.c: now warns if killed by signal ./
13653 1996-11-11 10:49 millert
13655 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13656 expanded (but it is gross)
13658 1996-11-10 20:32 millert
13660 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13663 1996-11-10 20:08 millert
13665 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13668 1996-11-10 20:02 millert
13670 * parse.lex: Add Runas_Alias and simplify a rule.
13672 1996-11-10 19:15 millert
13674 * parse.yacc: always store User_Alias's since they can be used
13675 inside of a runas list. Sigh. Really need a Runas_Alias
13678 1996-10-30 18:04 millert
13680 * visudo.c: deal with case where there is no sudoers file
13682 1996-10-11 23:01 millert
13684 * TROUBLESHOOTING: added one
13686 1996-10-10 22:11 millert
13688 * HISTORY, testsudoers.c: developement -> development
13690 1996-10-10 22:08 millert
13692 * INSTALL: added a note
13694 1996-10-10 20:36 millert
13696 * RUNSON: for 1.5.2
13698 1996-10-10 20:36 millert
13702 1996-10-10 00:56 millert
13704 * PORTING: removed seteuid() notes
13706 1996-10-09 13:37 millert
13708 * compat.h: better seteuid() emulatino
13710 1996-10-09 13:36 millert
13712 * configure.in: added check for seteuid
13714 1996-10-09 13:36 millert
13716 * config.h.in: added HAVE_SETEUID
13718 1996-10-08 19:22 millert
13720 * configure.in: first stab at sequent support
13722 1996-10-08 19:21 millert
13724 * config.h.in: added HAVE_SYS_SELECT_H
13726 1996-10-08 19:21 millert
13728 * compat.h: sequent -> _SEQUENT_
13730 1996-10-08 19:11 millert
13732 * compat.h: added seteuid() macro for DYNIX
13734 1996-10-08 18:54 millert
13736 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13738 1996-10-07 01:05 millert
13740 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13741 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13742 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13743 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13744 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13745 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13746 visudo.c, tgetpass.c: ++version
13748 1996-10-07 00:59 millert
13750 * sudo.pod: added -H and SUDO_PS1
13752 1996-10-07 00:55 millert
13754 * configure.in: use SUDO_FUNC_FNMATCH
13756 1996-10-07 00:54 millert
13758 * aclocal.m4: added SUDO_FUNC_FNMATCH
13760 1996-10-07 00:53 millert
13762 * sudo.c: added -H flag
13764 1996-10-07 00:53 millert
13766 * sudo.h: added MODE_RESET_HOME /
13768 1996-10-05 00:00 millert
13770 * INSTALL: mention OPIE
13772 1996-10-04 23:59 millert
13774 * configure.in: added opie support
13776 1996-10-04 23:59 millert
13778 * check.c: added HAVE_OPIE and changed to *_OTP_*
13780 1996-10-04 23:58 millert
13782 * compat.h, config.h.in: added HAVE_OPIE
13784 1996-10-04 23:58 millert
13786 * OPTIONS, options.h: SKEY -> OTP
13788 1996-10-03 23:27 millert
13790 * check.c: moved fclose() in skey stuff.
13792 1996-10-03 19:53 millert
13794 * putenv.c: index -> strchr remove unnecesary stuff
13796 1996-10-03 19:43 millert
13798 * check.c: now call skeychallenge() to get challenge instead of
13799 making one up ourselves. this way, we get extra goodies in the
13802 1996-09-10 00:32 millert
13804 * CHANGES: added one
13806 1996-09-10 00:18 millert
13808 * parse.lex: allow logins to start with a number (YUCK!)
13810 1996-09-08 15:18 millert
13812 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13814 1996-09-08 15:15 millert
13816 * configure.in: DUNIX doesn't need -lnsl
13818 1996-09-07 20:22 millert
13820 * CHANGES: [no log message]
13822 1996-09-07 20:21 millert
13824 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13825 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13826 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13827 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13828 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13829 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13831 1996-09-07 20:13 millert
13833 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13836 1996-09-07 20:12 millert
13838 * visudo.pod: [no log message]
13840 1996-09-07 20:00 millert
13842 * sudo.pod, visudo.pod: courtesan
13844 1996-09-07 19:45 millert
13846 * HISTORY: added courtesan ./
13848 1996-09-06 00:12 millert
13850 * sudo.c: added $SUDO_PROMPT support
13852 1996-09-04 17:19 millert
13854 * check.c: print long skey challemged to stderr, not stdout
13856 1996-08-31 23:10 millert
13858 * CHANGES: updated for 1.5.1
13860 1996-08-31 23:07 millert
13862 * emul/utime.h: ++version
13864 1996-08-31 12:34 millert
13866 * RUNSON: updated for 1.5.1
13868 1996-08-30 10:49 millert
13870 * check.c: use shost, not host for tgetpass
13872 1996-08-30 00:21 millert
13874 * OPTIONS, sudo.pod: documented %u and %h
13876 1996-08-29 20:40 millert
13878 * configure.in: fixed typo
13880 1996-08-29 20:37 millert
13882 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13883 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13884 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13885 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13886 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13887 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13888 visudo.c: ++version
13890 1996-08-29 20:30 millert
13894 1996-08-29 18:32 millert
13896 * configure.in, Makefile.in, version.h: ++version
13898 1996-08-29 17:58 millert
13900 * sudo.h: new tgetpass() params
13902 1996-08-29 17:58 millert
13904 * check.c: pass use and host to tgetpass
13906 1996-08-29 17:57 millert
13908 * tgetpass.c: added %u and %h escapes
13910 1996-08-29 16:56 millert
13912 * OPTIONS, options.h, check.c: added NO_MESSAGE
13914 1996-08-29 16:23 millert
13916 * configure.in: added cray (unicos) support
13918 1996-08-27 11:36 millert
13920 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13922 1996-08-25 17:56 millert
13924 * INSTALL: added note about "make install"
13926 1996-08-25 17:50 millert
13928 * parse.yacc: changed length/size params from int to size_t
13930 1996-08-25 13:35 millert
13932 * OPTIONS: now get CSOPS insults as well by default
13934 1996-08-25 13:33 millert
13936 * insults.h: use csops insults too by default
13938 1996-08-25 13:31 millert
13940 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13941 version.h: version = 1.5
13943 1996-08-25 13:27 millert
13945 * sudo.c: added runas_homedir
13947 1996-08-25 13:27 millert
13949 * TODO: updated for 1.5
13951 1996-08-25 13:23 millert
13953 * RUNSON: updated for 1.5
13955 1996-08-25 13:19 millert
13957 * CHANGES: 1.5 release
13959 1996-08-25 13:17 millert
13961 * INSTALL: added "upgrading" notes
13963 1996-08-22 14:00 millert
13965 * visudo.c: now do chmod and chown after edit of temp file and
13968 1996-08-18 12:52 millert
13970 * Makefile.in: ++version added INSTALL.configure
13972 1996-08-18 12:52 millert
13974 * version.h, configure.in: ++version
13976 1996-08-18 12:51 millert
13978 * TROUBLESHOOTING: [no log message]
13980 1996-08-18 12:50 millert
13982 * parse.yacc: added missing cast
13984 1996-08-17 20:37 millert
13986 * sudo.c: sets $HOME to pw_dir of runas user
13988 1996-08-17 20:02 millert
13990 * sudo.pod: document $HOME change
13992 1996-08-17 19:43 millert
13994 * sudo.pod: fixed up some wording
13996 1996-08-17 19:25 millert
13998 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13999 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
14000 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14001 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
14003 1996-08-17 19:19 millert
14005 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
14006 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
14009 1996-08-17 19:18 millert
14011 * sudo.h: name nad type changes
14013 1996-08-17 19:17 millert
14015 * testsudoers.c: now works with new sudo
14017 1996-08-17 19:07 millert
14019 * parse.yacc: fixed some XXX
14021 1996-08-17 18:52 millert
14023 * parse.yacc: some variable name changes + comment headers for
14026 1996-08-17 18:41 millert
14028 * tgetpass.c: added extra paren's to make compilers happy
14030 1996-08-17 18:34 millert
14032 * sudo.c: [no log message]
14034 1996-08-17 18:30 millert
14036 * parse.c: now uses init_parser() if not in sudoers and tries
14037 "list" or "validate" scold but don't be nasty.
14039 1996-08-17 18:29 millert
14041 * TROUBLESHOOTING: now can use upper case login names
14043 1996-08-17 18:29 millert
14045 * visudo.c: now uses init_parser()
14047 1996-08-17 18:28 millert
14049 * PORTING: added info about PASSWORD_TIMEOUT
14051 1996-08-17 18:28 millert
14053 * INSTALL, README: updated
14055 1996-08-17 18:28 millert
14057 * INSTALL.configure: Initial revision
14059 1996-08-17 18:27 millert
14061 * BUGS: fixed a bug ,
14063 1996-08-17 18:27 millert
14065 * parse.yacc: now dynamically allocates memory for the stacks -- no
14068 1996-08-17 18:26 millert
14070 * sudo.pod: -l now explands command aliases
14072 1996-08-17 13:22 millert
14074 * parse.yacc: hacks to expand command aliases for `sudo -l'
14076 1996-08-17 13:22 millert
14078 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
14081 1996-08-17 13:22 millert
14083 * sudo.h: added struct command_alias
14085 1996-08-17 13:20 millert
14087 * sudo.pod: fixed a bug
14089 1996-08-17 13:15 millert
14091 * lsearch.c: in compar() key should be first arg
14093 1996-08-15 15:48 millert
14095 * BUGS: fixed some bugs
14097 1996-08-15 15:47 millert
14099 * parse.yacc: can now deal with upcase HOST and USER names
14101 1996-08-15 15:47 millert
14103 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
14105 1996-08-15 15:46 millert
14107 * sudo.pod: fixed thinko
14109 1996-08-15 15:46 millert
14111 * parse.c: fix comment
14113 1996-08-09 18:07 millert
14115 * parse.c, parse.yacc: added support for new `sudo -l' stuff
14117 1996-08-09 18:06 millert
14119 * sudo.c: now uses list_matches()
14121 1996-08-09 18:06 millert
14123 * sudo.h: added struct sudo_match
14125 1996-08-09 17:37 millert
14127 * configure.in: now more -lgnumalloc
14129 1996-08-01 13:12 millert
14131 * install-sh: added more paths for chown and whoami
14133 1996-07-31 10:41 millert
14137 1996-07-30 13:45 millert
14139 * aclocal.m4: fixed DUNIX check for shadow pw
14141 1996-07-30 13:41 millert
14143 * tgetpass.c: now only turn off echo if it is already on. this
14144 fixes a race when you use sudo in a pipelin
14146 1996-07-30 12:53 millert
14150 1996-07-29 22:29 millert
14152 * configure.in: changed "test -z $foo && do_this" to if; then
14155 1996-07-28 22:47 millert
14157 * configure.in: added missing defines of SHADOW_TYPE
14159 1996-07-26 14:10 millert
14161 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
14162 they are only in dunix 4.x
14164 1996-07-26 14:09 millert
14166 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
14168 1996-07-26 13:23 millert
14170 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
14171 that didn't match. Now we can have runas stuff on more than one
14174 1996-07-25 23:45 millert
14176 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
14177 defined to something
14179 1996-07-25 23:45 millert
14181 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14183 1996-07-25 23:44 millert
14185 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14186 instead of HAVE_C2_SECURITY
14188 1996-07-25 23:44 millert
14190 * check.c: SHADOW_TYPE is always defined so just against its value
14192 1996-07-25 23:44 millert
14194 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14196 1996-07-25 18:47 millert
14198 * sudoers.pod: * -> ?* in one example added another instance of
14199 (runas) and one of NOPASSWD:
14201 1996-07-24 13:02 millert
14203 * configure.in: added back check for config.cache from other host
14206 1996-07-24 12:49 millert
14208 * parse.lex: removed an instance of \"
14210 1996-07-24 12:49 millert
14212 * sample.sudoers: added an example
14214 1996-07-24 12:44 millert
14216 * sudoers.pod: updated wrt new wildcard matching
14218 1996-07-24 10:28 millert
14220 * configure.in: new check for shadow passwords if we don't know
14223 1996-07-24 10:28 millert
14225 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14227 1996-07-24 02:19 millert
14229 * configure.in: added back check for -lsocket (oops)
14231 1996-07-24 02:16 millert
14233 * configure.in: better (working) check for shadow passwd type if we
14236 1996-07-24 01:59 millert
14238 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14240 1996-07-24 01:59 millert
14242 * Makefile.in: added config.{guess,sub}
14244 1996-07-24 01:58 millert
14246 * aclocal.m4: removed unused stuff to figure out os type
14248 1996-07-23 22:58 millert
14250 * config.sub: added openbsd
14252 1996-07-23 22:54 millert
14254 * config.sub: Initial revision
14256 1996-07-23 22:40 millert
14258 * config.guess: Initial revision
14260 1996-07-23 21:18 millert
14262 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14263 it can only be a pathname. need to check against sudoers_args
14264 even if user_args is nil
14266 1996-07-23 21:18 millert
14268 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14269 can only be a pathname need to check against sudoers_args even if
14272 1996-07-23 18:52 millert
14274 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14276 1996-07-23 01:18 millert
14278 * testsudoers.c: now takes command line args and uses cmnd_args
14280 1996-07-23 01:10 millert
14282 * parse.lex: fill_args was adding an extra leading space
14284 1996-07-22 15:50 millert
14286 * visudo.c: fixed dummy command_matches()
14288 1996-07-22 15:50 millert
14290 * parse.yacc: fixed prototype
14292 1996-07-22 15:31 millert
14294 * sudo.h: added cmnd_args
14296 1996-07-22 15:31 millert
14298 * parse.yacc: now uses flat args string
14300 1996-07-22 15:30 millert
14302 * parse.c, parse.lex: now uses flat arg string
14304 1996-07-22 15:29 millert
14306 * visudo.c: added cmnd_args def
14308 1996-07-22 14:30 millert
14310 * sudo.c: now sets cmnd_args global
14312 1996-07-22 14:30 millert
14314 * logging.c: cmnd_args is now exported from sudo.[ch]
14316 1996-07-21 18:41 millert
14318 * parse.yacc: can't rely on cmnd_matches as much as I thought --
14319 added some $$ stuff back in to prevent namespace pollution
14322 1996-07-21 18:01 millert
14324 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14327 1996-07-20 00:45 millert
14329 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14330 starts a 'runas' if in the initial state to avoid collision with
14333 1996-07-20 00:23 millert
14335 * configure.in: added checks for specific shadow passwd schemes
14337 1996-07-20 00:18 millert
14339 * aclocal.m4: added routines to check for specific shadow passwd
14342 1996-07-18 18:27 millert
14344 * configure.in: added support for ncr boxen
14346 1996-07-18 18:26 millert
14348 * aclocal.m4: added support for detecting ncr boxen
14350 1996-07-16 14:57 millert
14352 * configure.in: added sinix support
14354 1996-07-13 22:29 millert
14356 * TROUBLESHOOTING: added info about "config.cache from other other"
14359 1996-07-13 22:22 millert
14361 * aclocal.m4: now makes sure you don't have a config.cache file
14364 1996-07-13 21:36 millert
14366 * configure.in: now sets $LIBS when needed to configure links with
14367 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14368 check for bigcrypt(3) if SPW_SECUREWARE
14370 1996-07-13 21:30 millert
14372 * getspwuid.c: fixed typo
14374 1996-07-13 21:05 millert
14376 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14377 AUTH_MAX_PASSWD_LENGTH
14379 1996-07-13 21:05 millert
14381 * getspwuid.c: no more SPW_HPUX10
14383 1996-07-13 21:04 millert
14385 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14387 1996-07-13 21:04 millert
14389 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14391 1996-07-13 21:04 millert
14393 * check.c: SPW_SECUREWARE now uses bigcrypt
14395 1996-07-13 18:24 millert
14397 * sample.sudoers: fixed 2 syntax errors
14399 1996-07-13 18:24 millert
14401 * sudoers: root may now run ALL as ALL
14403 1996-07-11 20:59 millert
14405 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14407 1996-07-08 16:08 millert
14409 * check.c, configure.in: updated AFS support
14411 1996-07-08 16:07 millert
14413 * TROUBLESHOOTING: added entry about /usr/ucb/cc
14415 1996-07-08 16:06 millert
14417 * INSTALL: prep no longer holds gcc binaries
14419 1996-07-08 15:48 millert
14421 * INSTALL: updated AFS note
14423 1996-07-08 15:43 millert
14425 * Makefile.in: added @AFS_LIBS@
14427 1996-07-08 15:33 millert
14429 * compat.h: AFS allows long passwords
14431 1996-07-08 14:16 millert
14433 * testsudoers.c: fixed -u user support
14435 1996-07-08 14:16 millert
14437 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14439 1996-07-08 13:30 millert
14441 * parse.yacc: fixed no_passwd vs. runas_matched
14443 1996-07-08 10:30 millert
14445 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14448 1996-07-08 10:30 millert
14450 * INSTALL: added --with-libraries > --with-libpath --with-incpath
14452 1996-07-08 10:21 millert
14454 * parse.yacc: was setting runas_matches to -1 in wrong place
14456 1996-07-08 09:58 millert
14458 * check.c: removed usersec.h which is not present in new AFS
14461 1996-07-08 09:55 millert
14463 * tgetpass.c: now deals with timeout <= 0
14465 1996-07-08 09:51 millert
14469 1996-07-08 00:04 millert
14471 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14473 1996-07-07 22:30 millert
14475 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14476 for root readable/writable filesystems
14478 1996-07-07 20:49 millert
14480 * Makefile.in: now gives INSTALL -c flag
14482 1996-07-07 20:34 millert
14484 * parse.yacc: slightly simpler initialization of no_passwd and
14487 1996-07-07 20:33 millert
14489 * testsudoers.c: added -u username support
14491 1996-07-07 20:32 millert
14493 * configure.in: improved --with-libraries support
14495 1996-07-07 16:27 millert
14497 * configure.in: added --with-incpath, --with-libpath,
14500 1996-07-07 16:01 millert
14502 * parse.yacc: now initializes some fields that weren't getting set
14503 to -1 pretty gross -- need a rewrite.
14505 1996-06-25 23:19 millert
14507 * alloca.c: removed emacs'isms
14509 1996-06-25 22:29 millert
14511 * configure.in: no longer add -lPW to *_LIBS since we include
14514 1996-06-25 22:29 millert
14516 * config.h.in: added HAVE_ALLOCA_H
14518 1996-06-25 22:28 millert
14520 * Makefile.in: added alloca.c
14522 1996-06-25 22:18 millert
14524 * alloca.c: Initial revision
14526 1996-06-25 21:58 millert
14528 * configure.in: ++version
14530 1996-06-25 19:32 millert
14532 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14533 nobody is not always set to a valid uid.
14535 1996-06-25 19:31 millert
14537 * OPTIONS: fixed entry for SUDO_MODE
14539 1996-06-25 18:02 millert
14541 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14542 *and* gid were being set to -2. Now beat NFS to the punch and
14543 set uid to "nobody" ourselves, preserving group 0 to read
14546 1996-06-25 18:02 millert
14548 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14550 1996-06-25 18:00 millert
14552 * logging.c: fixed a typo
14554 1996-06-25 18:00 millert
14556 * configure.in: no longer need AC_PROG_INSTALL
14558 1996-06-25 17:59 millert
14560 * Makefile.in: always use install-sh to avoid install(1)'s that use
14563 1996-06-25 16:07 millert
14565 * INSTALL: make clean -> make distclean
14567 1996-06-20 01:17 millert
14569 * parse.yacc: removed some unnecsary if's
14571 1996-06-20 01:16 millert
14573 * Makefile.in, version.h: ++version
14575 1996-06-20 01:16 millert
14577 * parse.c, testsudoers.c: now includes netgroup.h
14579 1996-06-20 00:45 millert
14581 * interfaces.c: removed cats of ioctl to int since they didn't shut
14584 1996-06-20 00:43 millert
14586 * interfaces.c: explicately cast ioctl() to int since it it not
14589 1996-06-20 00:41 millert
14591 * sudo.h: added declarations for yyparse() and yylex()
14593 1996-06-20 00:27 millert
14595 * parse.yacc: fixed an occurence of '==' -> '='
14597 1996-06-20 00:22 millert
14599 * config.h.in, configure.in: added check for netgroup.h
14601 1996-06-20 00:20 millert
14603 * sudo.c: fixed 2 compiler warnings
14605 1996-06-20 00:08 millert
14607 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14608 weren't being initialized
14610 1996-06-19 13:53 millert
14612 * sudo.pod: fixed a typo
14614 1996-06-17 12:19 millert
14616 * parse.yacc: fixed a formatting thingie
14618 1996-06-17 12:16 millert
14620 * parse.c, parse.yacc: fixed -u support with multiple user lists on
14623 1996-06-17 10:23 millert
14625 * configure.in: unixware needs -lgen
14627 1996-06-17 10:23 millert
14629 * README: updated ftp location
14631 1996-06-17 00:08 millert
14633 * sudoers.pod: add net_addr/netmask support
14635 1996-06-17 00:07 millert
14637 * sample.sudoers: added net_addr/mask example
14639 1996-06-17 00:02 millert
14641 * parse.lex, parse.c: added support for net_addr/netmask
14643 1996-06-15 20:13 millert
14645 * sudoers.pod: ^ -> !
14647 1996-06-15 18:12 millert
14649 * RUNSON: updated for 1.4.3
14651 1996-06-15 18:12 millert
14653 * CHANGES: udpated for 1.4.3
14655 1996-06-15 18:11 millert
14657 * TROUBLESHOOTING, TODO, BUGS: updated
14659 1996-06-15 18:11 millert
14661 * sample.sudoers: updated with examples of new stuff
14663 1996-06-15 18:10 millert
14665 * INSTALL, README: ++version
14667 1996-06-15 18:01 millert
14669 * sudoers.pod: updated wrt -u and NOPASSWD
14671 1996-06-15 17:58 millert
14673 * sudo.pod: updated wrt -u and CAVEATS
14675 1996-06-08 23:15 millert
14677 * sudo.c: fixed usage()
14679 1996-06-08 22:57 millert
14681 * parse.lex: now use :foo: character classes (makes no diff for
14684 1996-06-07 14:33 millert
14686 * check.c: fixed LONG_SKEY_PROMPT stuff
14688 1996-06-06 15:35 millert
14690 * visudo.c: fixed a comment
14692 1996-06-06 15:03 millert
14694 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14696 1996-06-06 15:02 millert
14698 * emul/search.h: fixed decls of lsearch()
14700 1996-06-05 22:20 millert
14702 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14704 1996-06-05 22:20 millert
14706 * check.c: hpux 10 uses bigcrypt() if C2
14708 1996-06-04 19:57 millert
14710 * parse.c: now always uses fnmatch to match args
14712 1996-06-04 19:40 millert
14714 * tgetpass.c: back to using stdio instead of raw i/o since that
14715 caused some problems
14717 1996-05-28 22:14 millert
14719 * sudo.c: now give usage warning if use -l,-v,-k with args
14721 1996-05-28 18:22 millert
14723 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14725 1996-05-28 12:50 millert
14727 * sudo.c: now sets sudoers to correct group if mode is 0400
14729 1996-05-28 12:02 millert
14731 * install-sh: updated to version used by inn and bind
14733 1996-05-28 00:08 millert
14735 * configure.in: now uses -lgnumalloc if it exists
14737 1996-05-28 00:02 millert
14739 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14742 1996-05-28 00:01 millert
14744 * sudo.c: rmeoved debugging statements
14746 1996-05-28 00:00 millert
14748 * parse.yacc: added a missing free()
14750 1996-05-27 23:58 millert
14752 * sudo.c: now uses user_gid instead of getegid (which was wrong
14753 anyway) to set SUDO_GID Now sets command line args in
14754 SUDO_COMMAND envariabled (logging.c depends on args being in the
14757 1996-05-27 23:57 millert
14759 * logging.c: now uses SUDO_COMMAND envariable to get command args
14760 rather than building it up again.
14762 1996-05-27 22:42 millert
14764 * parse.c: now uses user_gid
14766 1996-05-27 20:02 millert
14768 * sudo.c: fixed off by one error in allocation NewArgv
14770 1996-05-27 20:01 millert
14772 * parse.c: in sudoers, 'command ""' now means command with no args
14774 1996-05-27 20:01 millert
14776 * configure.in: added check for fnmatch(3) and fnmatch.h
14778 1996-05-27 20:01 millert
14780 * config.h.in: added HAVE_FNMATCH
14782 1996-05-27 20:00 millert
14784 * Makefile.in: replaced wildcat.* with fnmatch.*
14786 1996-05-27 20:00 millert
14788 * testsudoers.c: now uses fnmatch()
14790 1996-05-27 19:38 millert
14792 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14793 (*) by itself now matches multiple args added support for
14794 wildcards in the pathname in sudoers
14796 1996-05-25 19:23 millert
14798 * fnmatch.c: now includes compat.h and config.h
14800 1996-05-25 18:09 millert
14802 * config.h.in: added HAVE_FNMATCH_H
14804 1996-05-25 18:07 millert
14806 * configure.in: now checks for alloca() (if needed by bison or dce)
14807 and links with -lPW if it contains alloca() and libv and compiler
14810 1996-05-25 18:03 millert
14812 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14814 1996-04-28 22:38 millert
14816 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14819 1996-04-28 17:44 millert
14821 * Makefile.in: fixed pod2man usage
14823 1996-04-28 17:40 millert
14825 * configure.in, Makefile.in, version.h: ++version
14827 1996-04-28 17:20 millert
14829 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14831 1996-04-28 17:20 millert
14833 * sudo.h: removed PERM_FULL_ROOT
14835 1996-04-28 17:18 millert
14837 * sudo.c: runas_user defaults to "root" so no more need to
14840 1996-04-28 17:16 millert
14842 * parse.c: will now only running commands as root if there was no
14843 runas list (or if root is in the runas list)
14845 1996-04-28 17:15 millert
14847 * logging.c: now logs "USER=%s"
14849 1996-04-28 17:12 millert
14851 * parse.yacc: runas_matches is now set to false if we get a
14854 1996-04-28 15:01 millert
14856 * parse.lex: make #uid work + some minor cleanup
14858 1996-04-27 21:04 millert
14860 * sample.sudoers: added support for NOPASSWD and "runas" from
14863 1996-04-27 21:03 millert
14865 * visudo.c: added support for "runas" from garp@opustel.com
14866 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14867 support for SUDOERS_MODE
14869 1996-04-27 21:03 millert
14871 * testsudoers.c: added support for "runas" from garp@opustel.com
14873 1996-04-27 21:02 millert
14875 * sudo.h: added support for NO_PASSWD and runas from
14876 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14877 SUDOERS_GID and added support fro SUDOERS_MODE
14879 1996-04-27 21:00 millert
14881 * sudo.c: added support for NO_PASSWD and runas from
14882 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14883 SUDOERS_GID and added support fro SUDOERS_MODE
14885 1996-04-27 21:00 millert
14887 * parse.yacc: added support for NO_PASSWD and runas from
14890 1996-04-27 20:58 millert
14892 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14895 1996-04-27 20:56 millert
14897 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14899 1996-04-27 20:40 millert
14901 * configure.in: added --with-CC only link with -lshadow on linux
14902 (with shadow pw) if libc lacks getspnam()
14904 1996-04-27 20:39 millert
14906 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14907 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14908 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14910 1996-04-27 20:26 millert
14912 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14914 1996-04-27 11:20 millert
14916 * INSTALL: added --with-CC
14918 1996-04-06 16:31 millert
14920 * parse.lex: added double quote support
14922 1996-04-06 16:29 millert
14924 * sudoers.pod: documented double quoting
14926 1996-04-05 16:53 millert
14928 * mkinstalldirs: Initial revision
14930 1996-04-05 16:53 millert
14932 * check.c: fixed some indentation
14934 1996-04-05 16:48 millert
14936 * Makefile.in: fixed a typo
14938 1996-04-04 19:39 millert
14940 * Makefile.in: added install-dirs .
14942 1996-04-04 14:16 millert
14944 * dce_pwent.c: new version from "Jeff A. Earickson"
14945 <jaearick@colby.edu>
14947 1996-04-03 13:40 millert
14949 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14951 1996-04-03 13:40 millert
14955 1996-04-03 13:36 millert
14957 * parse.lex: FQHOST now has same constraints as non-FQHOST
14959 1996-04-02 19:00 millert
14961 * INSTALL: added note about OS's w/ shadow passwords turned on by
14964 1996-04-02 18:58 millert
14966 * configure.in: fixed a typo
14968 1996-04-02 18:48 millert
14970 * configure.in: added support for --without-THING sanitized shadow
14971 pw situtation by adding support for --without-C2
14973 1996-04-02 16:42 millert
14975 * tgetpass.c: fixed a typo wrt placement of an end paren
14977 1996-04-02 14:57 millert
14979 * check.c: was closing an fd that may not have been opened
14981 1996-03-21 19:55 millert
14983 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14985 1996-03-19 19:40 millert
14987 * configure.in: now always use shadow pw on some arches
14989 1996-03-19 17:07 millert
14991 * configure.in: added pyramid support
14993 1996-03-19 17:04 millert
14995 * configure.in: no longer check for C2 if alternate passwd method
14996 is used no longer check for some libs twice
14998 1996-03-19 17:00 millert
15000 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
15002 1996-03-19 17:00 millert
15004 * parse.lex: added FQHOST rules
15006 1996-03-18 20:57 millert
15008 * tgetpass.c: now define TCSASOFT in necesary
15010 1996-03-18 20:31 millert
15012 * tgetpass.c: now uses read/write instead of stdio string goop to
15013 avoid problems with select(2)
15015 1996-03-18 19:37 millert
15017 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
15020 1996-03-17 16:18 millert
15022 * INSTALL: added note about no shadow auto-detect if using
15023 alternate auth schemes
15025 1996-03-17 15:33 millert
15027 * configure.in: don't check for C2 if AFS or DCE (unless they said
15030 1996-03-17 15:08 millert
15032 * testsudoers.c: now groks shost
15034 1996-03-17 15:01 millert
15036 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
15038 1996-03-16 14:43 millert
15040 * find_path.c: checkdot now works correctly
15042 1996-03-12 18:01 millert
15044 * configure.in: can't have DCE and C2 passwords both...
15046 1996-03-11 14:05 millert
15048 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
15051 1996-03-11 14:04 millert
15053 * configure.in: now looks for skey in /usr/lib and doesn't require
15054 libskey to be in /usr/local/lib just because skey.h is (for my
15057 1996-03-11 02:00 millert
15059 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
15062 1996-03-10 21:01 millert
15064 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
15066 1996-03-10 20:59 millert
15068 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
15070 1996-03-10 20:59 millert
15072 * OPTIONS: udpated FQDN
15074 1996-03-10 20:58 millert
15076 * config.h.in: added _SUDO_PATH_TIMEDIR
15078 1996-03-10 20:58 millert
15080 * aclocal.m4, configure.in: added SUDO_TIMEDIR
15082 1996-03-10 20:58 millert
15084 * sudo.pod: updated wrt /var/run/sudo
15086 1996-03-10 20:16 millert
15088 * sudo.c, sudo.h: added support for shost if FQDN
15090 1996-03-10 20:14 millert
15092 * parse.yacc, visudo.c: now uses shost if FQDN
15094 1996-03-10 20:12 millert
15096 * check.c: Now use skeylookup() instead off skeychallenge()
15098 1996-02-27 20:41 millert
15100 * logging.c: mail_argv should not contain ALERTMAIL as it includes
15103 1996-02-22 17:06 millert
15105 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
15107 1996-02-22 16:27 millert
15109 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
15111 1996-02-22 16:27 millert
15113 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
15115 1996-02-05 19:20 millert
15117 * README, INSTALL: ++version
15119 1996-02-05 19:20 millert
15121 * Makefile.in: ++versoin
15123 1996-02-05 19:16 millert
15125 * Makefile.in: fixed a typo
15127 1996-02-05 19:16 millert
15129 * configure.in: ++version
15131 1996-02-05 18:53 millert
15135 1996-02-05 18:47 millert
15137 * CHANGES: done for 1.4.1 (I hope)
15139 1996-02-05 18:45 millert
15141 * sudoers.pod: added info on wildcards
15143 1996-02-05 18:39 millert
15145 * sample.sudoers: added wildcard example
15147 1996-02-05 17:03 millert
15149 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
15151 1996-02-05 17:03 millert
15153 * configure.in: addedSUDO_PROG_BSHELL !ll
15155 1996-02-05 16:10 millert
15157 * visudo.pod: fixed up some formatting
15159 1996-02-05 16:10 millert
15161 * sudoers.pod: redid section describing sample sudoers stuff
15163 1996-02-05 16:10 millert
15165 * sudo.pod: fixed some formatting
15167 1996-02-04 22:50 millert
15169 * getspwuid.c: now treats "" as bourne shell
15171 1996-02-04 22:49 millert
15173 * Makefile.in: TESTOBJS nwo includes wildmat.o
15175 1996-02-04 22:48 millert
15177 * testsudoers.c: now works with NewArg[cv]
15179 1996-02-04 21:59 millert
15181 * sudo.c: removed an XXX (fixed it in getspwuid.c)
15183 1996-02-04 21:58 millert
15185 * aclocal.m4: added check for bourne shell
15187 1996-02-04 21:58 millert
15189 * pathnames.h.in: added _PATH_BSHELL
15191 1996-02-04 21:58 millert
15193 * config.h.in: added _SUDO_PATH_BSHELL
15195 1996-02-04 16:36 millert
15197 * visudo.c: unixware vi returns 256 instead of 0
15199 1996-02-04 16:24 millert
15201 * INSTALL: added Linux note
15203 1996-02-04 16:13 millert
15205 * logging.c: fixed up some XXX's. file log format now looks a
15206 little more like real syslog(3) format.
15208 1996-02-04 16:13 millert
15210 * README, TROUBLESHOOTING: updated wrt lex/flex
15212 1996-02-04 16:11 millert
15214 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15215 since we ship with a pre-flex'd parser
15217 1996-02-04 16:09 millert
15219 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15221 1996-02-04 02:28 millert
15223 * logging.c: eliminated some strcat()'s
15225 1996-02-04 02:10 millert
15227 * configure.in: no longer checks for lex/flex (now assumes flex)
15229 1996-02-04 02:08 millert
15231 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15232 just kerb_dir_candidate
15234 1996-02-02 20:48 millert
15236 * parse.yacc: now use a 'hook' expression instead of an iffy one
15239 1996-02-02 01:14 millert
15241 * visudo.c: now works with new sudo arg stuff
15243 1996-02-02 01:14 millert
15245 * parse.yacc: fixed dereferencing deadbeef
15247 1996-02-01 23:53 millert
15249 * sudo.c: changed an occurrence of Argv to NewArgv
15251 1996-02-01 23:53 millert
15253 * parse.lex: took out support for quoted commands since there is no
15256 1996-02-01 23:52 millert
15258 * parse.c: fixed a typo in a for() loop
15260 1996-02-01 23:52 millert
15262 * logging.c: protected against dereferencing rogue pointers
15264 1996-02-01 22:34 millert
15266 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15267 needed this also allows us to eliminate some kludges in
15268 parse_args() and eliminate superfluous code.
15270 1996-02-01 22:34 millert
15272 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15274 1996-02-01 22:32 millert
15276 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15277 cmnd_args (no longer used)
15279 1996-02-01 22:31 millert
15281 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15283 1996-02-01 22:30 millert
15285 * parse.yacc: COMMAND is now a struct containing the path and args
15287 1996-02-01 22:30 millert
15289 * parse.lex: replaced append() with fill_cmnd() and fill_args.
15290 command args from a sudoers entry are now stored in an arrary for
15293 1996-02-01 22:28 millert
15295 * parse.c: command line args from sudoers file are now in an array
15296 like ones passed in from the command line
15298 1996-01-31 20:59 millert
15300 * parse.c: wildwat stuff now works
15302 1996-01-29 00:44 millert
15304 * version.h: ++version
15306 1996-01-29 00:44 millert
15308 * Makefile.in: ++version added wildmat.*
15310 1996-01-28 17:55 millert
15312 * parse.lex: added support for quoted commands (w/ or w/o args)
15314 1996-01-22 01:55 millert
15316 * sudo.pod, visudo.pod: cleaned up formatting
15318 1996-01-21 20:53 millert
15320 * sudo.pod, visudo.pod: Initial revision
15322 1996-01-21 02:07 millert
15324 * sudoers.pod: looks reasonable, could be mroe readable
15326 1996-01-20 23:47 millert
15328 * sudoers.pod: Initial revision
15330 1996-01-16 14:38 millert
15334 1996-01-16 14:37 millert
15336 * OPTIONS: updated NO_ROOT_SUDO entry
15338 1996-01-15 11:37 millert
15340 * RUNSON: [no log message]
15342 1996-01-15 11:34 millert
15344 * sudo.c: fixed SECURE_PATH
15346 1996-01-14 20:55 millert
15348 * RUNSON: udpa`ted for 1.4
15350 1996-01-14 20:52 millert
15352 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15354 1996-01-14 20:32 millert
15356 * TROUBLESHOOTING: added entry for anal ansi compilers
15358 1996-01-14 16:13 millert
15360 * INSTALL: added info on libcrypt_i for SCO
15362 1996-01-14 16:05 millert
15364 * TODO: [no log message]
15366 1996-01-14 15:39 millert
15368 * sample.sudoers: added comments
15370 1996-01-14 15:25 millert
15372 * TODO: 1.4 release
15374 1996-01-14 15:22 millert
15376 * README, config.h.in, configure.in, CHANGES: ++version
15378 1996-01-14 15:21 millert
15380 * BUGS: ++version and fixed ISC
15382 1996-01-14 15:19 millert
15384 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15385 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15386 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15387 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15388 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15391 1996-01-14 15:16 millert
15393 * interfaces.c: added STUB_LOAD_INTERFACES ++version
15395 1996-01-14 15:14 millert
15397 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15398 emul/utime.h: ++version
15400 1996-01-14 15:13 millert
15402 * PORTING: added info about fd_set in tgetpass added info on
15405 1996-01-11 13:22 millert
15407 * dce_pwent.c: added sudo header
15409 1996-01-11 13:04 millert
15411 * tgetpass.c: fixed a typo
15413 1996-01-11 13:01 millert
15415 * Makefile.in: tgetpass.o is now only linked in with sudo (not
15418 1996-01-09 12:56 millert
15420 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15421 configure.in: ++version
15423 1996-01-09 12:54 millert
15425 * emul/utime.h: added copyright notice
15427 1996-01-09 12:52 millert
15429 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15430 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15431 interfaces.c, logging.c, options.h, parse.c, parse.lex,
15432 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15433 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15434 visudo.c: ++version
15436 1996-01-09 12:46 millert
15438 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15441 1996-01-09 12:42 millert
15443 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15445 1996-01-09 12:41 millert
15447 * config.h.in: added check for sys/bsdtypes.h
15449 1996-01-07 16:00 millert
15451 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15453 1996-01-07 15:55 millert
15455 * TROUBLESHOOTING: added 2 entries
15457 1996-01-07 15:55 millert
15459 * Makefile.in: added FAQ
15461 1996-01-07 14:26 millert
15463 * TROUBLESHOOTING: added section on syslog
15465 1996-01-07 14:25 millert
15467 * configure.in: added AC_ISC_POSIX for better ISC support
15469 1996-01-07 14:25 millert
15471 * config.h.in: fixed typo
15473 1996-01-07 14:25 millert
15475 * config.h.in: added define for _POSIX_SOURCE
15477 1996-01-04 00:41 millert
15479 * configure.in: fixed check for lsearch()
15481 1995-12-21 21:53 millert
15483 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15484 (should not happen)
15486 1995-12-20 17:02 millert
15488 * configure.in: now only define HAVE_LSEARCH if there is a
15489 corresponding search.h
15491 1995-12-20 15:52 millert
15493 * interfaces.c: works on ISC again
15495 1995-12-18 17:36 millert
15497 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15500 1995-12-18 17:32 millert
15502 * lsearch.c: char * -> const char *
15504 1995-12-18 17:29 millert
15506 * configure.in: now looks in -lcompat for lsearch()
15508 1995-12-18 17:23 millert
15510 * Makefile.in: remove sudo.core visudo.core for clan target
15512 1995-12-17 22:53 millert
15514 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15516 1995-12-17 22:36 millert
15518 * Makefile.in: fixed another occurence of sudo_getpwuid.*
15520 1995-12-17 22:30 millert
15522 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15524 1995-12-17 22:22 millert
15526 * configure.in: moved the "echo"
15528 1995-12-17 22:09 millert
15530 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15531 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15532 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15533 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15534 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15535 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15536 tgetpass.c, utime.c, version.h, visudo.c: ++version
15538 1995-12-17 22:04 millert
15540 * testsudoers.c: added group support
15542 1995-12-17 22:00 millert
15544 * sample.sudoers: added group entry
15546 1995-12-17 21:59 millert
15548 * sudoers.man: documented group support
15550 1995-12-17 21:50 millert
15552 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15554 1995-12-15 17:45 millert
15556 * check.c: tkfile was too short and overflowed the kerberos realm
15558 1995-12-11 17:09 millert
15560 * sudo.c: now copy command args directly from Argv
15562 1995-12-11 15:55 millert
15564 * sudo.c: replaced code to copy cmnd_args so that is does not use
15565 realloc since most realloc()'s really stink
15567 1995-12-08 14:11 millert
15569 * configure.in: syslog() fixed in hpux 10.01
15571 1995-12-06 17:45 millert
15573 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15576 1995-12-06 17:30 millert
15578 * configure.in: better error if cannot find skey incs or libs
15580 1995-12-06 17:26 millert
15582 * aclocal.m4: now use a temp file for determining max len of uid_t
15583 in string form. the old hacky way broke on netbsd
15585 1995-12-05 19:02 millert
15587 * sudo.c: added set of parens and a space
15589 1995-12-05 18:58 millert
15591 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15593 1995-12-05 18:58 millert
15595 * check.c: modified a comment
15597 1995-12-05 18:57 millert
15599 * Makefile.in: fixed up testsudoers target
15601 1995-12-05 18:56 millert
15603 * configure.in: DCE changes from Jeff Earickson
15604 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15605 SUDO_FDFLAGS and VISUDO_LDFLAGS
15607 1995-12-05 18:17 millert
15609 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15610 SUDO_LDFLAGS, VISUDO_LDFLAGS
15612 1995-11-27 23:32 millert
15614 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15616 1995-11-27 23:17 millert
15618 * check.c: LONG_SKEY_PROMPT is less of a klusge /
15620 1995-11-27 23:17 millert
15622 * configure.in: fixed typos w/ dce stuff
15624 1995-11-27 23:14 millert
15626 * Makefile.in: added dce_pwent.c
15628 1995-11-26 13:48 millert
15630 * INSTALL: amended section on combining authentication mechanisms
15632 1995-11-26 13:48 millert
15634 * PORTING: minor updates for 1.3.6
15636 1995-11-26 13:47 millert
15638 * TROUBLESHOOTING: added 2 more entries
15640 1995-11-26 13:39 millert
15642 * BUGS: updated for 1.3.6
15644 1995-11-26 13:39 millert
15646 * README: overhauled
15648 1995-11-25 21:23 millert
15650 * INSTALL: rewrote for sudo 1.3.6
15652 1995-11-25 21:23 millert
15654 * TROUBLESHOOTING: added 3 entries
15656 1995-11-25 13:53 millert
15658 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15659 since many includes don't prototype it. gag me.
15661 1995-11-25 13:23 millert
15663 * sudo.h: removed prototype for sudo_getpwuid() since convex C
15664 compiler choked on it.
15666 1995-11-25 13:23 millert
15668 * sudo.c: added prototype for sudo_getpwuid()
15670 1995-11-25 13:23 millert
15672 * lsearch.c: now compiles on strict ANSI compilers
15674 1995-11-24 23:56 millert
15676 * check.c: added LONG_SKEY_PROMPT support
15678 1995-11-24 23:55 millert
15680 * Makefile.in: added extra $'s for make to eat up, yum.
15682 1995-11-24 23:38 millert
15684 * OPTIONS, options.h: added LONG_SKEY_PROMPT
15686 1995-11-24 18:48 millert
15688 * check.c: s/key support now works with normal s/key as well as
15691 1995-11-24 18:46 millert
15693 * options.h, OPTIONS: added SKEY_ONLY
15695 1995-11-24 18:46 millert
15697 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15699 1995-11-24 00:42 millert
15701 * INSTALL: added DCE note added more AIX notes
15703 1995-11-24 00:39 millert
15705 * sudo.c: now include pthread.h for DCE support
15707 1995-11-23 22:22 millert
15709 * check.c: dce_pwent() is ok after all .,
15711 1995-11-23 22:21 millert
15713 * logging.c: now uses SYSLOG() macro that equates to either
15714 syslog() or syslog_wrapper
15716 1995-11-23 21:44 millert
15718 * dce_pwent.c: minor formatting changes. renamed check() to
15719 somthing less generic
15721 1995-11-23 21:27 millert
15723 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15724 visudo.c: now uses user_pw_ent and simple macros to get at the
15727 1995-11-22 20:35 millert
15729 * check.c: simpler dec unix C2 support
15731 1995-11-22 20:35 millert
15733 * getspwuid.c: now sets crypt_type for DEC unix C2
15735 1995-11-21 18:00 millert
15737 * configure.in: added csops paths for skey
15739 1995-11-21 16:27 millert
15741 * getspwuid.c: now includes string.h for strdup() prototype
15743 1995-11-21 01:47 millert
15745 * getspwuid.c: fixed a few typos
15747 1995-11-20 22:59 millert
15749 * check.c: now includes skey.h
15751 1995-11-20 22:10 millert
15753 * getspwuid.c: fixed up comments
15755 1995-11-20 22:04 millert
15757 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15759 1995-11-20 22:01 millert
15761 * sudo.c: now uses sudo_pw_ent
15763 1995-11-20 21:50 millert
15765 * testsudoers.c: now uses sudo_pw_ent
15767 1995-11-20 21:40 millert
15769 * visudo.c: now sets sudo_pw_ent
15771 1995-11-20 21:28 millert
15773 * getspwuid.c: Initial revision
15775 1995-11-20 21:28 millert
15777 * tgetpass.c: moved dce stuff into compat.h
15779 1995-11-20 21:27 millert
15781 * sudo.h, logging.c: now uses sudo_pw_ent
15783 1995-11-20 21:27 millert
15785 * Makefile.in: added sudo_getpwuid.c
15787 1995-11-20 21:25 millert
15789 * compat.h: added dce support
15791 1995-11-20 21:13 millert
15793 * parse.yacc: now uses sudo_pw_ent
15795 1995-11-20 14:40 millert
15797 * check.c: fixed exempt_group stuff for OS's that don't put base
15798 gid in group vector
15800 1995-11-20 01:39 millert
15802 * check.c: S/Key support now works with sunos4 shadow passwords
15804 1995-11-19 22:31 millert
15806 * Makefile.in: fixed clean rule
15808 1995-11-19 22:31 millert
15810 * config.h.in, configure.in: added DCE support
15812 1995-11-19 22:30 millert
15814 * tgetpass.c: DCE & KERB support
15816 1995-11-19 22:30 millert
15818 * check.c: first stab at dce support
15820 1995-11-19 22:24 millert
15822 * dce_pwent.c: now smells like sudo
15824 1995-11-19 22:11 millert
15826 * dce_pwent.c: Initial revision
15828 1995-11-19 21:36 millert
15830 * check.c: skey'd sudo now works w/ normal password as well
15832 1995-11-19 18:37 millert
15834 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15835 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15836 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15837 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15838 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15839 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15841 1995-11-19 18:32 millert
15843 * README: updated to reflect version change
15845 1995-11-19 18:27 millert
15847 * configure.in: --with options now line up ++version
15849 1995-11-19 18:26 millert
15851 * sudo.h: removed unecesary S/Key stuff
15853 1995-11-19 18:25 millert
15855 * configure.in: fixed S/Key support
15857 1995-11-19 18:24 millert
15859 * Makefile.in: -I stuff now goes in CPPFLAGS
15861 1995-11-19 18:23 millert
15863 * check.c: fixed SKey support
15865 1995-11-19 15:23 millert
15867 * README: updated version
15869 1995-11-19 13:59 millert
15871 * OPTIONS: fixed description of EXEMPTGROUP
15873 1995-11-19 10:47 millert
15875 * sudo.c: more people use _RLD_ than just alphas...
15877 1995-11-18 21:35 millert
15879 * Makefile.in: replaced $man_prefix with $mandir
15881 1995-11-18 21:30 millert
15883 * configure.in: fixed a typo
15885 1995-11-18 21:28 millert
15887 * Makefile.in: now use more GNU'ish dir names
15889 1995-11-18 21:27 millert
15891 * configure.in: now set *dir correctly (can override from command
15894 1995-11-18 19:17 millert
15896 * sudo.c: now deal with situations where we getwd() fails
15898 1995-11-17 00:37 millert
15900 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15902 1995-11-17 00:37 millert
15904 * configure.in: added sbin_dir
15906 1995-11-16 21:28 millert
15908 * Makefile.in: now ship a flex-generated lex.yy.c
15910 1995-11-16 21:09 millert
15912 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15915 1995-11-16 21:06 millert
15917 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15918 overridden via Makefile
15920 1995-11-16 21:05 millert
15922 * options.h: no more error for redefining SUDOERS_OWNER
15924 1995-11-16 21:05 millert
15926 * OPTIONS: expanded SUDOERS_OWNER section
15928 1995-11-16 03:05 millert
15930 * visudo.c: now warn if chown(2) failed
15932 1995-11-16 02:55 millert
15934 * logging.c: better default warning for NO_SUDOERS_FILE
15936 1995-11-16 02:54 millert
15938 * sudo.c: added missing set_perms() no more cryptic message if the
15939 sudoers file is zero length, now just give a parse error
15941 1995-11-16 02:42 millert
15943 * logging.c: better diagnostics if NO_SUDOERS_FILE
15945 1995-11-16 02:41 millert
15947 * sudo.c: check_sudoers() now catches sudoers files that are not
15948 readable (but are stat'able).
15950 1995-11-13 01:12 millert
15952 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15954 1995-11-13 00:52 millert
15956 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15959 1995-11-13 00:52 millert
15961 * Makefile.in: now uses exec_prefix & prefix from configure
15963 1995-11-13 00:16 millert
15965 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15966 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15967 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15968 so shadow build trees can have a custom copy of options.h
15970 1995-11-13 00:15 millert
15972 * check.c: user_is_exempt() is no longer a hack, it now uses
15975 1995-11-12 23:56 millert
15977 * options.h: EXEMPTGROUP is now "sudo"
15979 1995-11-12 22:25 millert
15981 * configure.in: MAN_POSTINSTALL now contains a leading space
15983 1995-11-12 22:25 millert
15985 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15986 now removes testsudoers in clean:
15988 1995-11-12 22:24 millert
15990 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15992 1995-10-30 15:51 millert
15994 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15995 don't get spoofed into using a bogus server
15997 1995-09-29 17:50 millert
15999 * parse.yacc: now explicately initialize match[] tp be FALSE
16001 1995-09-23 16:48 millert
16003 * sudo.c: removed unused variable now passes -Wall
16005 1995-09-23 16:48 millert
16007 * parse.yacc: yyerror and dumpaliases are now void's now passes
16010 1995-09-23 16:48 millert
16012 * parse.lex: added prototype for yyerror
16014 1995-09-23 16:47 millert
16016 * interfaces.c: rmeoved unused cruft now passes -Wall
16018 1995-09-23 16:47 millert
16020 * check.c, logging.c, parse.c: now passes -Wall
16022 1995-09-23 16:46 millert
16024 * Makefile.in: fixed headers that moved to emul dir
16026 1995-09-23 12:05 millert
16028 * logging.c: fixed deref of nil pointer if no args
16030 1995-09-15 19:18 millert
16032 * OPTIONS: added a caveat to FQDN section
16034 1995-09-13 19:48 millert
16036 * Makefile.in: more $srcdir support for install targets
16038 1995-09-13 17:17 millert
16040 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
16041 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
16042 visudo.c: don't include malloc.h if we include stdlib.h
16044 1995-09-12 21:44 millert
16046 * parse.yacc: local search.h now lives in emul
16048 1995-09-12 21:41 millert
16050 * lsearch.c: local search.h now lives in emul
16052 1995-09-12 21:41 millert
16054 * check.c, utime.c: local utime.h now lives in emul dir
16056 1995-09-12 21:38 millert
16058 * Makefile.in: added support for building in other than the
16061 1995-09-10 14:01 millert
16063 * OPTIONS: annotated CSOPS_INSULTS option
16065 1995-09-10 13:56 millert
16067 * TROUBLESHOOTING: updated shadow passwords blurb
16069 1995-09-09 21:00 millert
16071 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
16072 shell and passes along foo as the arguments
16074 1995-09-09 18:52 millert
16076 * parse.lex: collapsed pathname and dir sections into one -- its
16079 1995-09-09 18:34 millert
16081 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
16082 append() and fill() now take args to make the above work
16084 1995-09-08 20:51 millert
16086 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
16087 a tty on fd 1 to erroneously have "none" as their tty
16089 1995-09-04 15:35 millert
16091 * check.c: timestampfile is now a global static removed decl of
16092 timestampfile in remove_timestamp since we can just use the
16095 1995-09-04 15:28 millert
16097 * check.c: created touch() to update timestamps added
16098 USE_TTY_TICKETS support (bit of a kludge)
16100 1995-09-04 15:28 millert
16102 * compat.h: added _S_IFDIR and S_ISDIR
16104 1995-09-04 15:22 millert
16106 * OPTIONS, options.h: added USE_TTY_TICKETS
16108 1995-09-04 00:38 millert
16110 * parse.yacc: removed const from casts for lsearch() & lfind() to
16111 placate irix 4.x C compiler
16113 1995-09-03 14:12 millert
16115 * sudo.c: now only strip '/dev/' off of a tty if it starts with
16118 1995-09-03 14:12 millert
16120 * pathnames.h.in: added _PATH_DEV
16122 1995-09-03 14:11 millert
16124 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
16125 tcgetattr only if have termios.h
16127 1995-09-03 14:09 millert
16129 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
16130 not int for c_?flag
16132 1995-09-03 13:19 millert
16134 * parse.lex, parse.yacc: fixed a spelling error
16136 1995-09-03 13:17 millert
16138 * Makefile.in: fixed typo
16140 1995-09-02 12:55 millert
16142 * Makefile.in: fixed a comment
16144 1995-09-02 12:54 millert
16146 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
16147 now that we dynamically allocate strings they need to be free()'d
16149 1995-09-02 12:46 millert
16151 * parse.lex: dynamically allocates space for strings
16153 1995-09-02 12:34 millert
16155 * sudo.h: no more MAXCOMMANDLENGTH
16157 1995-09-01 22:25 millert
16159 * sudo.h: added decl of tty
16161 1995-09-01 22:25 millert
16163 * logging.c, sudo.c: moved tty stuff into sudo.c
16165 1995-09-01 14:18 millert
16167 * parse.c: fixed a logic bug. Was denying a command if user gave
16168 command line args but there were none in the sudoers file which
16171 1995-09-01 01:18 millert
16173 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
16175 1995-09-01 01:13 millert
16177 * parse.lex: return foo; -> return(foo);
16179 1995-09-01 01:03 millert
16181 * parse.yacc: fixed netgr_matches() prototype
16183 1995-09-01 01:02 millert
16185 * parse.lex: added support for escaping "termination" characters
16187 1995-09-01 00:55 millert
16189 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16192 1995-09-01 00:50 millert
16194 * sudo.c: fixed comments
16196 1995-09-01 00:49 millert
16198 * goodpath.c: fixed negation problem (doh!)
16200 1995-09-01 00:25 millert
16202 * parse.yacc: fixed 2nd parameter to lfind()
16204 1995-09-01 00:24 millert
16206 * parse.lex: now do bounds checking in fill() and append()
16208 1995-09-01 00:23 millert
16210 * sudo.c: include netdb.h as we should added a missing void cast
16211 added SHELL_IF_NO_ARGS support now use realloc() properly. would
16212 fail if realloc actually moved the string instead of shrinking it
16214 1995-09-01 00:17 millert
16216 * sample.sudoers: updated with examples of new features
16218 1995-09-01 00:05 millert
16220 * goodpath.c: now set errno to EACCES if not a regular file or not
16223 1995-09-01 00:04 millert
16225 * find_path.c: if given a fully-qualified or relative path we now
16226 check it with sudo_goodpath() and error out with the appropriate
16227 error message if the file does not exist or is not executable
16229 1995-09-01 00:03 millert
16231 * lsearch.c, emul/search.h: now use correct args for lfind
16233 1995-09-01 00:03 millert
16235 * logging.c: added a comment
16237 1995-08-31 23:52 millert
16239 * insults.h: added in CSOps insults
16241 1995-08-31 23:51 millert
16243 * ins_csops.h: Initial revision
16245 1995-08-31 23:35 millert
16247 * tgetpass.c: added RCS id
16249 1995-08-31 22:56 millert
16251 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16254 1995-08-31 22:55 millert
16256 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16258 1995-08-31 22:54 millert
16260 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16261 -p now works with -s
16263 1995-08-31 22:54 millert
16265 * parse.c: don't try to stat() "pseudo commands" like "validate"
16267 1995-08-31 22:53 millert
16269 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16272 1995-08-31 22:53 millert
16274 * configure.in: added SecurID support added other insults to
16277 1995-08-31 22:52 millert
16279 * config.h.in: added HAVE_SECURID
16281 1995-08-31 22:52 millert
16283 * Makefile.in: added clobber target added ins_csops.h now gets
16284 CFLAGS from configure
16286 1995-08-31 22:46 millert
16288 * aclocal.m4: relaxed SUDO_FULL_VOID
16290 1995-08-31 22:44 millert
16292 * visudo.c: function comment blocks are now in same style as rest
16295 1995-08-31 22:44 millert
16297 * testsudoers.c: added support for command line args in
16300 1995-08-31 22:43 millert
16302 * sudoers.man: updated to have command args in the sudoers file
16304 1995-08-31 22:42 millert
16306 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16309 1995-08-19 19:32 millert
16311 * parse.yacc: PATH renamed to COMMAND
16313 1995-08-19 19:31 millert
16315 * parse.lex: it is now a parse error for directories to have args
16318 1995-08-19 19:30 millert
16320 * logging.c: now say command args if telling user to buzz off
16322 1995-08-19 19:30 millert
16324 * sudo.c: -s no longer indicates end of args sped up loading on
16325 cmnd_args in load_cmnd()
16327 1995-08-19 19:29 millert
16329 * parse.c: removed an unreachable statement
16331 1995-08-19 17:53 millert
16333 * parse.lex: made more efficient by pulling out the terminators
16334 when in GOTCMND state and making them their own rule
16336 1995-08-14 00:07 millert
16338 * sudo.h: removed MAXLOGLEN since it is no longer used
16340 1995-08-14 00:07 millert
16342 * parse.lex: now allows command args
16344 1995-08-14 00:06 millert
16346 * parse.c: now groks command arguments
16348 1995-08-13 23:39 millert
16350 * logging.c: now sets tty correctly when piped input
16352 1995-08-13 23:35 millert
16354 * sudo.c: fixed loading of cmnd_args (was including command name
16357 1995-08-13 23:34 millert
16359 * logging.c: fixed a core dump due to incorrect if construct
16361 1995-08-13 00:33 millert
16363 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16366 1995-08-13 00:33 millert
16368 * aclocal.m4: fixed check for ISC
16370 1995-08-13 00:32 millert
16372 * sudo.c: now sets cmnd_args used by log_error() and that will be
16373 used by the parse to check against command args
16375 1995-08-13 00:32 millert
16377 * sudo.h: added cmnd_args
16379 1995-08-13 00:31 millert
16381 * logging.c: now dynamically allocate logline since we can guess at
16384 1995-08-05 13:52 millert
16386 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16387 buffer remove "register" since the compiler knows more than I do
16388 now do a "basename" of the tty
16390 1995-07-31 18:20 millert
16392 * configure.in: ++version
16394 1995-07-30 22:37 millert
16396 * sudo.h: added shell extern changed MODE_* to be bit masks to
16397 allow for several options together
16399 1995-07-30 22:36 millert
16401 * sudo.c: added -s (shell) option made MODE_* masks so we can do
16402 bitwise & and | to see if multiple flags are set.
16404 1995-07-30 22:01 millert
16406 * check.c: added securid support
16408 1995-07-30 14:38 millert
16410 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16413 1995-07-29 17:17 millert
16415 * Makefile.in, version.h: ++version
16417 1995-07-27 06:52 millert
16419 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16421 1995-07-26 22:00 millert
16423 * testsudoers.c: added netgr_matches
16425 1995-07-26 21:29 millert
16427 * parse.c: cleaned up netgr_matches
16429 1995-07-26 00:26 millert
16431 * RUNSON: updated for 1.3.4
16433 1995-07-24 21:51 millert
16435 * Makefile.in: now installs sudoers.man -- really should clean this
16438 1995-07-24 21:18 millert
16440 * Makefile.in: added sudoers.cat and sudoers.man
16442 1995-07-24 21:15 millert
16444 * sudo.man: pulled out stuff on the sudoers file format into a
16447 1995-07-24 21:14 millert
16449 * sudoers.man: Initial revision
16451 1995-07-24 21:04 millert
16453 * HISTORY: fixed up my email address
16455 1995-07-24 20:03 millert
16457 * configure.in: added checks for innetgr and getdomainname
16459 1995-07-24 20:02 millert
16461 * visudo.c: added dummy netgr_matches function
16463 1995-07-24 20:01 millert
16465 * parse.c: added netgr_matches
16467 1995-07-24 20:01 millert
16469 * parse.lex, parse.yacc: added NETGROUP support
16471 1995-07-24 20:01 millert
16473 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16475 1995-07-24 18:07 millert
16477 * sudo.c: rewrote clean_env() that has rm_env() builtin
16479 1995-07-23 19:58 millert
16481 * check.c: now cast uid to long in sprintf
16483 1995-07-23 19:58 millert
16485 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16487 1995-07-23 19:57 millert
16489 * options.h: added _INSULTS suffix to HAL & GOONS
16491 1995-07-23 19:35 millert
16493 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16494 new scheme of insult "unions" end
16496 1995-07-23 17:48 millert
16498 * sudo.c: now uses MAX_UID_T_LEN
16500 1995-07-23 17:48 millert
16502 * configure.in: added SUDO_UID_T_LEN !l
16504 1995-07-23 17:48 millert
16506 * config.h.in: added MAX_UID_T_LEN
16508 1995-07-23 17:47 millert
16510 * check.c: now use MAX_UID_T_LEN
16512 1995-07-23 17:47 millert
16514 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16517 1995-07-19 19:05 millert
16519 * configure.in: corrected version
16521 1995-07-19 17:29 millert
16523 * configure.in: added sco support
16525 1995-07-19 17:29 millert
16527 * aclocal.m4: hack to check for sco
16529 1995-07-18 21:27 millert
16531 * interfaces.c: removed #include <net/route.h> since it was hosing
16534 1995-07-18 13:35 millert
16536 * find_path.c: fixed prreadlink() prototype
16538 1995-07-17 23:54 millert
16540 * check.c: added parens in #if's
16542 1995-07-17 23:53 millert
16544 * configure.in: added SPW_ prefix
16546 1995-07-17 23:20 millert
16548 * sudo.h: moved SPW_* to config.h.in
16550 1995-07-17 23:19 millert
16552 * sudo.c: added a set of parens
16554 1995-07-17 23:19 millert
16556 * config.h.in: added SPW_*
16558 1995-07-17 22:50 millert
16560 * sudo.h: added SPW_* reordered error codes
16562 1995-07-17 22:49 millert
16564 * check.c: moved SPW_* to sudo.h
16566 1995-07-17 14:29 millert
16568 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16570 1995-07-17 14:29 millert
16572 * configure.in: AUTH -> SECUREWARE
16574 1995-07-17 14:29 millert
16576 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16578 1995-07-17 00:22 millert
16580 * check.c: now uses SHADOW_TYPE to make shadow pw support more
16581 readable and modular. It's a start...
16583 1995-07-17 00:21 millert
16585 * configure.in: added autodetection of shadow passwords
16587 1995-07-17 00:20 millert
16589 * sudo.c: now uses SHADOW_TYPE define
16591 1995-07-17 00:19 millert
16593 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16596 1995-07-17 00:19 millert
16598 * aclocal.m4: added SUDO_CHECK_SHADOW
16600 1995-07-12 17:09 millert
16602 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16603 took out test for memmove() since we dno longer use it...
16605 1995-07-12 17:08 millert
16609 1995-07-12 17:05 millert
16611 * logging.c: added BROKEN_SYSLOG support
16613 1995-07-12 17:05 millert
16615 * config.h.in: added BROKEN_SYSLOG
16617 1995-07-12 17:04 millert
16619 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16620 allow for a machine udpating its time from a server
16622 1995-07-12 17:04 millert
16624 * sudo.man: added 2 security notes updated Nieusma's email addr
16626 1995-07-12 14:18 millert
16628 * lsearch.c: changed a memmove() to memcpy() since we don't have to
16629 worry about overlapping segments.
16631 1995-07-11 15:41 millert
16633 * interfaces.c: cleanup up the loop when interfaces are groped in
16634 so that it is readable
16636 1995-07-11 14:52 millert
16638 * Makefile.in, version.h: ++version
16640 1995-07-09 18:17 millert
16642 * CHANGES: annotated 124-126
16644 1995-07-07 16:06 millert
16646 * check.c: fixed permissions check on /tmp/.odus
16648 1995-07-06 19:35 millert
16650 * check.c: fixed some comments
16652 1995-07-06 14:49 millert
16654 * check.c: now checks owner & mode of timedir also checks for bogus
16655 dates on timestamp file
16657 1995-07-06 14:49 millert
16659 * OPTIONS: updated TIMEOUT info
16661 1995-07-06 14:48 millert
16663 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16665 1995-07-06 14:47 millert
16667 * compat.h: added definition of S_IRWXU
16669 1995-07-06 14:47 millert
16673 1995-07-03 14:16 millert
16675 * interfaces.c: added #ifdef to make it compile on strange arches
16677 1995-07-02 18:13 millert
16679 * aclocal.m4: fixed check for fulkl void impl.
16681 1995-07-02 09:56 millert
16683 * check.c: added mssing "static"
16685 1995-07-01 20:41 millert
16687 * insults.h: replaced #elif with #else #if constructs for ancient C
16690 1995-07-01 20:18 millert
16692 * INSTALL: updated irix c2 & kerb5 info
16694 1995-07-01 20:15 millert
16696 * configure.in: added shadow pw support for irix
16698 1995-07-01 16:07 millert
16700 * CHANGES: last changes for sudo 1.3.3
16702 1995-07-01 16:07 millert
16704 * TODO, BUGS: updated
16706 1995-07-01 16:04 millert
16708 * configure.in: now calls SUDO_SOCK_SA_LEN
16710 1995-07-01 16:04 millert
16712 * config.h.in: added HAVE_SA_LEN
16714 1995-07-01 16:04 millert
16716 * aclocal.m4: added SUDO_SOCK_SA_LEN
16718 1995-07-01 15:49 millert
16720 * interfaces.c: now works with ip implementations that use sa_len
16723 1995-07-01 14:26 millert
16725 * INSTALL: added note about buggy AIX compiler
16727 1995-07-01 14:24 millert
16729 * interfaces.c: now include sys/time.h for AIX
16731 1995-06-27 22:35 millert
16733 * Makefile.in: getcwd -> getwd
16735 1995-06-27 21:28 millert
16737 * interfaces.c: now works for ISC and others. yay.
16739 1995-06-26 14:24 millert
16741 * Makefile.in, version.h: version++
16743 1995-06-22 20:26 millert
16745 * aclocal.m4: fixed test for full void impl
16747 1995-06-22 20:25 millert
16749 * sudo.c: now check to see that st_dev is non-zero before assuming
16750 that we are being spoofed
16752 1995-06-20 16:56 millert
16754 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16757 1995-06-19 16:32 millert
16759 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16761 1995-06-19 16:10 millert
16763 * logging.c: added cast for ttyname()
16765 1995-06-19 15:23 millert
16767 * configure.in: fixed typo
16769 1995-06-19 15:19 millert
16771 * check.c: now deal correctly with all known variation of utime()
16774 1995-06-19 15:19 millert
16776 * configure.in: added SUDO_FUNC_UTIME_POSIX
16778 1995-06-19 15:19 millert
16780 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16782 1995-06-19 15:14 millert
16784 * config.h.in: added HAVE_UTIME_POSIX
16786 1995-06-19 13:38 millert
16788 * check.c: fixed a typo
16790 1995-06-19 13:29 millert
16792 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16794 1995-06-19 13:20 millert
16796 * check.c: fixed fascist C compiler warning
16798 1995-06-18 23:14 millert
16800 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16801 initialize num_interfaces to 0 (just to be anal)
16803 1995-06-18 18:06 millert
16805 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16807 1995-06-18 18:05 millert
16809 * logging.c: added tty logging
16811 1995-06-18 16:04 millert
16813 * interfaces.c: reworked the ISC code
16815 1995-06-18 15:27 millert
16817 * Makefile.in, version.h: updated version
16819 1995-06-18 15:24 millert
16821 * check.c: now expect old-style utime(3) if utime() can't take NULL
16824 1995-06-18 15:08 millert
16826 * configure.in: added check for utime.h
16828 1995-06-18 15:08 millert
16830 * config.h.in: added HAVE_UTIME_H
16832 1995-06-18 14:48 millert
16834 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16836 1995-06-18 13:58 millert
16838 * configure.in: now search for kerb libs and includes
16840 1995-06-18 13:03 millert
16842 * check.c: added support for utime(2)'s that can't take a NULL
16845 1995-06-18 13:03 millert
16847 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16850 1995-06-17 20:46 millert
16852 * configure.in: added utime(s) stuff
16854 1995-06-17 20:46 millert
16856 * check.c: now use utime()
16858 1995-06-17 20:46 millert
16860 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16862 1995-06-17 19:12 millert
16864 * utime.c: now use HAVE_UTIME_NULL
16866 1995-06-17 19:02 millert
16868 * utime.c, emul/utime.h: Initial revision
16870 1995-06-17 18:24 millert
16872 * check.c: need to setuid(0) to make kerb4 stuff work.
16874 1995-06-17 18:14 millert
16876 * tgetpass.c: no more special case for kerberos
16878 1995-06-17 18:13 millert
16880 * config.h.in: took out setreuid and setresuid stuff added kerb5
16881 stuff (use kerb4 emulation)
16883 1995-06-17 18:13 millert
16885 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16888 1995-06-17 18:12 millert
16890 * check.c: now use private ticket file for kerberos support to
16891 avoid trouncing on system one
16893 1995-06-15 00:48 millert
16895 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16897 1995-06-15 00:47 millert
16899 * sudo.c: added anti-spoofing support
16901 1995-06-15 00:47 millert
16903 * parse.c: now use global cmnd_st
16905 1995-06-15 00:47 millert
16907 * logging.c: added SPOOF_ATTEMPT suypport
16909 1995-06-14 23:41 millert
16911 * testsudoers.c, visudo.c: added void casts where appropriate
16913 1995-06-14 23:40 millert
16915 * parse.yacc: fixed up spacing and added void casts where
16918 1995-06-14 23:27 millert
16920 * sudo.c: fixed problem with "-p prompt" but no args
16922 1995-06-14 04:43 millert
16924 * sudo.man: added BUGS and annotated -l description
16926 1995-06-14 04:43 millert
16928 * sudo.h: validate() now takes a flag
16930 1995-06-14 04:43 millert
16932 * sudo.c: validate() now takes a flag added -l
16934 1995-06-14 04:42 millert
16936 * parse.yacc: added support for -l
16938 1995-06-14 04:41 millert
16940 * parse.c: validate() now takes a flag that says whether or not to
16943 1995-06-07 21:36 millert
16945 * logging.c: now deals with Argv == 1
16947 1995-06-07 21:34 millert
16949 * sudo.man: added -p option
16951 1995-06-07 21:27 millert
16953 * sudo.c: added prompt support reworked parse_args()
16955 1995-06-07 20:49 millert
16957 * sudo.h: added prompt
16959 1995-06-07 20:49 millert
16961 * options.h: added PASSPROMPT
16963 1995-06-07 20:48 millert
16965 * check.c: now use BUFSIZ as length of kerb password added kpass so
16966 pass is always a char * now use prompt global when asking for a
16969 1995-06-07 20:47 millert
16971 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16973 1995-06-07 20:43 millert
16975 * OPTIONS: added PASSPROMPT
16977 1995-06-07 01:44 millert
16979 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16982 1995-06-07 01:43 millert
16984 * check.c: don't exit on kerb error, just warn if k_errno ==
16985 KDC_PR_UNKNOWN (unknown user) silently fail
16987 1995-06-06 22:44 millert
16989 * INSTALL: added kerb4 note
16991 1995-06-06 22:43 millert
16993 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16995 1995-06-06 22:41 millert
16997 * check.c: removed debugging printf
16999 1995-06-06 22:33 millert
17001 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
17004 1995-06-06 22:32 millert
17006 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
17009 1995-06-06 22:32 millert
17011 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
17012 setreuid emulation with setresuid if applic
17014 1995-06-06 22:31 millert
17016 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
17017 chown() hack if no setreuid() or a broken one
17019 1995-06-05 23:44 millert
17021 * config.h.in: added HAVE_KERBEROS
17023 1995-06-05 23:43 millert
17025 * tgetpass.c: added KERBEROS support (long passwords)
17027 1995-06-05 23:42 millert
17029 * check.c, configure.in: added kerberos support
17031 1995-06-03 19:36 millert
17033 * sudo.h: added MODE_BACKGROUND
17035 1995-06-03 19:36 millert
17037 * sudo.man: escaped dashes added -b option
17039 1995-06-03 19:34 millert
17041 * sudo.c: added -b option
17043 1995-06-03 18:52 millert
17045 * check.c: added crypt() for osf/1 3.x enhanced secuiry
17047 1995-06-03 18:18 millert
17049 * configure.in: now check for -lcrypt
17051 1995-06-03 18:00 millert
17053 * interfaces.c: added ENXIO like EADDRNOTAVAIL
17055 1995-05-07 23:14 millert
17057 * configure.in: now emulate getwd(), not getcwd()
17059 1995-05-07 23:13 millert
17061 * sudo.c: getcwd() -> getwd()
17063 1995-05-07 23:12 millert
17065 * getwd.c: getcwd -> getwd
17067 1995-05-02 01:34 millert
17069 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
17071 1995-05-02 01:34 millert
17073 * insults.h: broke out insults into separate include files
17075 1995-05-02 01:32 millert
17077 * options.h, OPTIONS: added GOONS
17079 1995-05-02 01:32 millert
17081 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
17083 1995-05-01 23:34 millert
17085 * Makefile.in, version.h: ++version
17087 1995-05-01 23:34 millert
17089 * visudo.c: moved signal handler setup to setup_signals()
17091 1995-05-01 23:33 millert
17093 * sudo.h: added load_interfaces()
17095 1995-05-01 23:33 millert
17097 * sudo.c: moved load_interfaces to interfaces.c
17099 1995-05-01 23:33 millert
17101 * parse.yacc: added clearaliases
17103 1995-05-01 23:33 millert
17105 * OPTIONS, options.h: added FAST_MATCH
17107 1995-05-01 23:32 millert
17109 * parse.lex: now uses clearaliases variable
17111 1995-05-01 23:31 millert
17113 * interfaces.c: Initial revision
17115 1995-05-01 23:31 millert
17117 * Makefile.in: added interfaces.[co]
17119 1995-05-01 23:30 millert
17121 * testsudoers.c: now uses ip addrs and netmasks via
17124 1995-05-01 22:47 millert
17126 * sudo.c: now remove IFS instead of setting to "sane" value
17128 1995-05-01 16:30 millert
17130 * parse.c: added FAST_MATCH
17132 1995-04-29 20:19 millert
17134 * Makefile.in: sudo_goodpath.c-> goodpath.c
17136 1995-04-29 20:15 millert
17138 * sudo.c: added Andy's new ISC changes
17140 1995-04-14 14:06 millert
17142 * OPTIONS: added a sentence to SECURE_PATH info
17144 1995-04-14 13:57 millert
17148 1995-04-14 13:54 millert
17150 * RUNSON, CHANGES: updated
17152 1995-04-13 17:04 millert
17154 * RUNSON: updated for beta3
17156 1995-04-13 14:32 millert
17158 * Makefile.in, version.h: ++version
17160 1995-04-13 13:56 millert
17162 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
17164 1995-04-13 13:54 millert
17166 * sudo.c: fixed indentation
17168 1995-04-13 13:35 millert
17170 * aclocal.m4: fixed a typo
17172 1995-04-13 13:19 millert
17174 * sudo.c: updated ISC mods
17176 1995-04-13 13:19 millert
17178 * configure.in: added unixware case
17180 1995-04-13 13:19 millert
17182 * check.c: user_is_exempt is no longer hidden
17184 1995-04-13 13:19 millert
17188 1995-04-13 13:19 millert
17190 * aclocal.m4: isc and riscos changes
17192 1995-04-13 13:18 millert
17194 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17197 1995-04-13 13:18 millert
17199 * Makefile.in: fixed a typo and added testsudoers stuff
17201 1995-04-13 12:34 millert
17203 * testsudoers.c: Initial revision
17205 1995-04-12 19:31 millert
17207 * parse.yacc: applied fixed patch from Chris
17209 1995-04-11 14:30 millert
17211 * Makefile.in: fixed a typo
17213 1995-04-11 14:14 millert
17215 * parse.yacc: added a set of braces for bison
17217 1995-04-11 14:01 millert
17219 * parse.yacc: merged in Chris' changes to dekludge the parser.
17221 1995-04-11 00:38 millert
17223 * logging.c: send_mail() was calling find_path() which is wrong
17224 since find_path() stores cmnd in a static var. Anyhow, it
17225 doesn't make much sense since MAILER should always be fully
17228 1995-04-10 19:51 millert
17230 * sample.sudoers: added User_Alias stuff
17232 1995-04-10 19:50 millert
17234 * aclocal.m4: SUDO_NEXT now looks for
17235 /usr/lib/NextStep/software_version
17237 1995-04-10 19:50 millert
17239 * RUNSON: added DEC UNIX 3.0 w/ gcc
17241 1995-04-10 19:49 millert
17243 * visudo.c: Exit was being used in places where exit should be used
17245 1995-04-10 19:44 millert
17247 * sudoers: added "User alias specification"
17249 1995-04-10 18:04 millert
17251 * parse.yacc: fixed probs caused by making nslots and naliases a
17254 1995-04-10 15:09 millert
17256 * RUNSON: added KSR, upped rev to 1.3.1b2
17258 1995-04-10 15:07 millert
17260 * logging.c, parse.yacc: 1024 -> BUFSIZ
17262 1995-04-10 15:05 millert
17264 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17265 to appease lsearch on 64-bit machines
17267 1995-04-09 19:30 millert
17269 * TODO: did a bunch of things and added a bunch :-)
17271 1995-04-09 19:30 millert
17275 1995-04-09 19:24 millert
17277 * visudo.man: closer to BSD manpage style
17279 1995-04-09 19:15 millert
17281 * sudo.man: closer to standard BSD man format
17283 1995-04-09 18:58 millert
17285 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17286 sudo.h, version.h, emul/search.h: added RCS id
17288 1995-04-09 17:35 millert
17290 * sudo.h: removed crufty #defines that are no longer used
17292 1995-04-09 17:13 millert
17294 * BUGS: fixed a bug
17296 1995-04-09 17:12 millert
17298 * sudo.man: updated based on sudo changes
17300 1995-04-09 17:11 millert
17302 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17303 keyword as well as a NAME or ALIAS
17305 1995-04-09 17:11 millert
17309 1995-04-09 17:04 millert
17311 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17313 1995-04-09 15:24 millert
17315 * aclocal.m4: fixed bug with full void impl check
17317 1995-04-08 23:11 millert
17319 * parse.yacc: fixed User_Alias supoprt
17321 1995-04-08 22:27 millert
17323 * parse.yacc: added stubs for User_Alias support
17325 1995-04-08 22:27 millert
17327 * sudo.c: now sets removes # bogus interfaces from num_interfaces
17329 1995-04-08 22:26 millert
17331 * parse.lex: added User_Alias support
17333 1995-04-07 21:10 millert
17335 * Makefile.in: removed extraneous TODO
17337 1995-04-07 19:48 millert
17339 * visudo.c: ntwk_matches -> addr_matches
17341 1995-04-07 15:38 millert
17343 * parse.yacc: ntwk_matches -> addr_matches
17345 1995-04-07 15:37 millert
17347 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17348 inet_network() (which expects octet boundaries) fixes for OSF
17349 (sizeof(int) != sizeof(long))
17351 1995-04-07 15:08 millert
17353 * sudo.c: took out debugging info
17355 1995-04-06 23:45 millert
17357 * aclocal.m4: OS was being set to unknown before non-uname based
17358 host checks. This caused no checks to happen since $OS was not
17361 1995-04-06 23:30 millert
17363 * sudo.c: fixed loading of interfaces struct still has debugging
17366 1995-04-06 22:23 millert
17368 * parse.c: fixed typo
17370 1995-04-06 16:17 millert
17372 * Makefile.in: ++version
17374 1995-04-06 16:16 millert
17378 1995-04-06 16:16 millert
17380 * visudo.c: removed extraneous extern decl of "top
17382 1995-04-06 16:14 millert
17384 * visudo.c: now zeros "top"
17386 1995-04-06 16:13 millert
17388 * parse.yacc: removed parser_cleanup (no need for it now)
17390 1995-04-06 16:13 millert
17392 * parse.lex: now calls reset_aliases() directly
17394 1995-04-04 18:21 millert
17396 * OPTIONS: added a sentence to SECURE_PATH description
17398 1995-04-04 18:17 millert
17400 * parse.c: fixed my stupid bug where I used NAMLEN on something I
17401 wanted to just get the name from. argh.
17403 1995-04-03 16:58 millert
17405 * lsearch.c: fixed argument order of memmove() that i hosed when
17406 converting from bcopy(). arghh.
17408 1995-04-03 15:33 millert
17410 * Makefile.in: finally fixed DISTFILES line
17412 1995-04-03 15:21 millert
17414 * Makefile.in: tabs -> spaces
17416 1995-04-03 15:15 millert
17418 * Makefile.in: added missing files to DISTFILES
17420 1995-04-03 14:50 millert
17422 * Makefile.in: SUPPORTED -> RUNSON
17424 1995-04-01 03:12 millert
17428 1995-04-01 01:54 millert
17430 * RUNSON: updated for pl5b1 release
17432 1995-04-01 01:53 millert
17434 * BUGS, TODO: updated
17436 1995-04-01 01:52 millert
17438 * check.c: fixed bug where if you hit return at first sudo prompt
17439 it would still log as a failure
17441 1995-04-01 01:29 millert
17445 1995-04-01 01:25 millert
17447 * aclocal.m4: better test for bogus void * implementation
17449 1995-03-31 20:33 millert
17451 * logging.c: added PASSWORDS_NOT_CORRECT
17453 1995-03-31 20:32 millert
17455 * check.c: added PASSWORDS_NOT_CORRECT stuff]
17457 1995-03-31 20:30 millert
17459 * sudo.h: added PASSWORDS_NOT_CORRECT
17461 1995-03-31 19:16 millert
17463 * tgetpass.c: moved pathnames.h
17465 1995-03-31 19:16 millert
17467 * sudo.c: removed some unused vars and fixed up uid2str
17469 1995-03-31 19:15 millert
17471 * putenv.c: moved compat.h
17473 1995-03-31 19:14 millert
17475 * getcwd.c, getwd.c: added pathnames.h
17477 1995-03-31 18:18 millert
17479 * parse.yacc: fixed a typo I introduced in the last checkin :-(
17481 1995-03-31 18:11 millert
17483 * parse.lex: can't have #ifdef's where N is defined so just do this
17484 the broken way for AIX
17486 1995-03-31 18:08 millert
17488 * parse.yacc: better hack from Chris (but still a hack)
17490 1995-03-31 18:05 millert
17492 * parse.lex: stupid hack for broken aix lex
17494 1995-03-31 17:47 millert
17496 * tgetpass.c: now includes compat.h
\ 6
17498 1995-03-31 17:27 millert
17500 * visudo.c: now includes fcntl.h
17502 1995-03-31 17:27 millert
17504 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17506 1995-03-31 16:12 millert
17508 * parse.yacc: dirty hack to fix parser bug. i don't really like
17509 this but it works for now...
17511 1995-03-31 16:12 millert
17513 * sudo.c: uid2str is now static like the prototype says
17515 1995-03-29 23:48 millert
17517 * RUNSON: Initial revision
17519 1995-03-29 23:47 millert
17521 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17523 1995-03-29 23:46 millert
17525 * sudo.c: check_sudoers now returns an error code and sudo calls
17526 inform_user and log_error based on the return value.
17528 1995-03-29 23:45 millert
17530 * logging.c, sudo.h: added entries for new errors
17532 1995-03-29 23:03 millert
17534 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17537 1995-03-29 22:52 millert
17539 * Makefile.in: took out testsudoers
\ 6
17541 1995-03-29 22:36 millert
17543 * sudo.c: now explicately checks that it is setuid root
17545 1995-03-29 22:28 millert
17547 * sudo.c: If a user has no passwd entry sudo would segv (writing to
17548 a garbage pointer). Now allocate space before writing :-)
17550 1995-03-29 22:06 millert
17552 * configure.in: reordered AC_CHECK_FUNCS
17554 1995-03-29 22:06 millert
17556 * config.h.in: fixed memset macro
17558 1995-03-29 21:47 millert
17560 * logging.c: bzero -> memset when a parse error is logged the line
17561 number of the error is now logged too
17563 1995-03-29 21:46 millert
17565 * tgetpass.c, visudo.c: bzero -> memset
17567 1995-03-29 21:46 millert
17569 * INSTALL: added Sunos to blurb about c2 security
17571 1995-03-29 21:45 millert
17573 * configure.in: added a SUN4 define for C2 security
17575 1995-03-29 21:44 millert
17577 * config.h.in: bcopy -> memmove bzero -> memset
17579 1995-03-29 21:43 millert
17581 * lsearch.c: bcopy -> memmove char * -> VOID *
17583 1995-03-29 21:30 millert
17585 * check.c: added support for sunos with C2 security
17587 1995-03-29 21:12 millert
17589 * OPTIONS, options.h: reordered
17591 1995-03-29 21:12 millert
17593 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17595 1995-03-29 21:12 millert
17597 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17599 1995-03-29 21:12 millert
17601 * config.h.in: added _SUDO_PATH_LOGFILE
17603 1995-03-29 21:11 millert
17605 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17606 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17607 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17609 1995-03-29 18:17 millert
17611 * TROUBLESHOOTING: Initial revision
17613 1995-03-29 17:59 millert
17615 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17616 load_global() to work around a problem is trusted hpux shadow
17619 1995-03-29 17:41 millert
17621 * parse.yacc: backed out a change in malloc/realloc
17623 1995-03-29 17:38 millert
17625 * parse.yacc: now include stdlib.h
17627 1995-03-29 17:22 millert
17629 * visudo.c: now do an freopen() of the stmp file so that yyin will
17630 always point to the same thing. This is important for flex since
17631 we are doing a YY_NEWFILE
17633 1995-03-29 17:20 millert
17635 * parse.yacc: replaced yywrap() with parser_cleanup() since
17636 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17639 1995-03-29 17:18 millert
17641 * parse.lex: now have a rule that matches anything that doesn't
17642 match an explicite rule. well, you know what i mean (. matches
17643 anything not yet matched). However, this means that there is
17644 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17645 So, yywrap has moved into parse.lex and it calls parser_cleanup()
17646 which is most of the old yywrap() sigh.
17648 1995-03-29 17:17 millert
17650 * SUPPORTED: no longer used
17652 1995-03-29 16:13 millert
17654 * getcwd.c, getwd.c: moved compat.h to be the last include file
17656 1995-03-29 16:11 millert
17658 * parse.yacc: fixed type of aliascmp() args
17660 1995-03-29 15:58 millert
17662 * find_path.c: NULL -> '\0'
17664 1995-03-29 15:42 millert
17666 * parse.yacc: added casts to lfind and lsearch args for irix
17668 1995-03-29 08:20 millert
17670 * Makefile.in: bsdinstall -> install-sh
17672 1995-03-29 08:20 millert
17674 * INSTALL: added info about make realclean
17676 1995-03-29 08:17 millert
17678 * Makefile.in: updated VERSION added dependencies for visudo.cat
17680 1995-03-29 08:17 millert
17682 * version.h: -> pl5b1
17684 1995-03-29 08:16 millert
17686 * sudo.c: took out -l
17688 1995-03-29 00:03 millert
17690 * Makefile.in: now there is a real visudo.man and visudo.cat
17692 1995-03-28 23:54 millert
17694 * sudo.man: took out visudo stuff
17696 1995-03-28 23:54 millert
17698 * visudo.man: Initial revision
17700 1995-03-28 23:12 millert
17702 * parse.c, parse.lex, parse.yacc: updated copyright
17704 1995-03-28 23:05 millert
17706 * README: updated for pl5
17708 1995-03-28 20:02 millert
17710 * sudo.man: updated Nieusma & Hieb email addresses
17712 1995-03-28 19:57 millert
17714 * INSTALL: updated to include options.h and OPTIONS
17716 1995-03-28 19:35 millert
17718 * CHANGES, TODO: updated
17720 1995-03-28 19:35 millert
17722 * BUGS: eliminated bug #1 (yay)
17724 1995-03-28 19:31 millert
17726 * configure.in: sunos no longer gets linked statically
17728 1995-03-28 18:58 millert
17730 * parse.lex: prototype now uses __P()
17732 1995-03-28 18:49 millert
17734 * parse.lex: make fill() non-ansi
17736 1995-03-28 15:26 millert
17738 * parse.c: made -v (validate) work
17740 1995-03-28 15:26 millert
17742 * logging.c: now gives host
17744 1995-03-28 10:34 millert
17746 * find_path.c: don't check for execute/statable if fq or relative
17749 1995-03-28 01:07 millert
17751 * parse.c: added a cast
17753 1995-03-28 00:49 millert
17755 * visudo.c: now include ctype.h for islower and tolower macros
17757 1995-03-28 00:48 millert
17759 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17761 1995-03-28 00:48 millert
17763 * sudo.c: moved a set of parens
17765 1995-03-28 00:48 millert
17767 * strdup.c: now include compat.h
17769 1995-03-28 00:47 millert
17771 * parse.yacc: now cast malloc & realloc return vals added search
17772 for HAVE_LSEARCH now use strcmp if no strcasecmp available
17774 1995-03-28 00:46 millert
17776 * lsearch.c, emul/search.h: void * -> VOID *
17778 1995-03-28 00:45 millert
17780 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17781 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17783 1995-03-28 00:44 millert
17785 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17787 1995-03-28 00:44 millert
17789 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17790 echo and results to most SUDO_* macros
17792 1995-03-28 00:43 millert
17794 * Makefile.in: no more -I.
17796 1995-03-28 00:22 millert
17798 * configure.in: various 1.x ro 2.x autoconf changes now check for
17799 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17800 check for fully woorking void implementation
17802 1995-03-28 00:02 millert
17804 * Makefile.in: added lsearch & search.h visudo links into
17807 1995-03-27 23:43 millert
17809 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17811 1995-03-27 23:40 millert
17813 * visudo.c: whatnow_help was prototyped to be static be was not
17816 1995-03-27 21:15 millert
17818 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17819 used) added check for dirent/dir/ndir.h
17821 1995-03-27 21:09 millert
17823 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17825 1995-03-27 20:38 millert
17827 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17829 1995-03-27 20:23 millert
17831 * emul/search.h, lsearch.c: Initial revision
17833 1995-03-27 18:26 millert
17835 * parse.yacc: eliminated bison warnings
17837 1995-03-27 17:10 millert
17839 * parse.lex: added missing case
17841 1995-03-27 17:04 millert
17843 * visudo.c: now iincludes signal.h
17845 1995-03-27 15:16 millert
17847 * parse.yacc: only clear data structures on a parse error
17849 1995-03-27 15:01 millert
17851 * visudo.c: whatnow() now gives help on invalid input
17853 1995-03-27 14:54 millert
17855 * visudo.c: added a whatnow() function (sort of like mh)
17857 1995-03-27 14:53 millert
17859 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17860 by calling reset_aliases() and clearing top took reset stuff out
17861 of yyerror() since it doesn't beling there (and doesn't work
17862 anyway). errorlineno is now initially set to -1 so we can set it
17863 to the first error that occurrs (it was getting set to the last)
17865 1995-03-27 14:53 millert
17867 * parse.lex: added a void cast
17869 1995-03-27 13:26 millert
17871 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17873 1995-03-26 01:33 millert
17875 * sudo.c, sudo.h: removed ocmnd
17877 1995-03-26 01:19 millert
17879 * sudo.h: no more sudo_realpath() and find_path() changed params
17881 1995-03-26 01:19 millert
17883 * sudo.c: find_path() changed since no more realpath()
17885 1995-03-26 01:18 millert
17887 * parse.yacc: on error, errorlineno is set to the line where the
17888 error occurred added kill_aliases() to free the aliases struct
17889 now clean up in yyerror() so we can reparse cleanly
17891 1995-03-26 01:17 millert
17893 * logging.c: changed to use new find_path()
17895 1995-03-26 01:17 millert
17897 * options.h, parse.c: no more USE_REALPATH
17899 1995-03-26 01:16 millert
17901 * find_path.c: removed all the realpath() stuff
17903 1995-03-26 01:16 millert
17905 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17907 1995-03-26 01:12 millert
17909 * visudo.c: now works correctly with utk parser
17911 1995-03-26 00:04 millert
17913 * goodpath.c: Initial revision
17915 1995-03-25 23:23 millert
17917 * sudo_realpath.c: eliminated a compiler warning
17919 1995-03-25 21:56 millert
17921 * sudo.c: elinated compiler warning
17923 1995-03-25 20:40 millert
17925 * sudo_realpath.c: added sudo_goodpath()
17927 1995-03-25 20:40 millert
17929 * sudo.h: added prototype for sudo_goodpath
17931 1995-03-25 20:39 millert
17933 * parse.c: added support for /sys/dir.h
17935 1995-03-25 20:39 millert
17937 * options.h: USE_REALPATH turned off
17939 1995-03-25 20:39 millert
17941 * find_path.c: added calls to sudo_goodpath()
17943 1995-03-25 20:39 millert
17945 * configure.in: added check for dirent.h
17947 1995-03-25 20:38 millert
17949 * config.h.in: added HAVE_DIRENT_H
17951 1995-03-25 19:27 millert
17953 * configure.in: added in linux shadow pass stuff
\ 6
17955 1995-03-24 14:43 millert
17957 * visudo.c: added back host, user, cmnd, parse_error
17959 1995-03-24 14:19 millert
17961 * visudo.c: added in utk changes plus some minor cosmetic changes
17963 1995-03-24 14:17 millert
17965 * sudo.c, sudo_realpath.c: added void casts for printf's
17967 1995-03-24 14:17 millert
17969 * options.h: added a define of USE_REALPATH
17971 1995-03-24 14:17 millert
17973 * configure.in: there is no more visudoers/Makefile
17975 1995-03-24 14:16 millert
17977 * Makefile.in: added in utk changes (visudo is now built from the
17980 1995-03-24 14:15 millert
17982 * find_path.c: added (void) casts to printf's
17984 1995-03-23 22:32 millert
17986 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17989 1995-03-22 23:13 millert
17991 * find_path.c: now check to see that what we are trying to run is a
17992 file (or a link to a file, we do a stat(2) so there is no diff)
17994 1995-03-13 15:56 millert
17998 1995-03-13 15:56 millert
18000 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
18003 1995-03-13 15:11 millert
18005 * sudo.man: added myself as maintainer
18007 1995-02-16 23:31 millert
18009 * sudo.c: changed setegid -> setgid
18011 1995-02-06 17:43 millert
18013 * configure.in: fixed the test for irix 5.x to skip bad libs
18015 1995-02-06 17:43 millert
18017 * aclocal.m4: now initialize OS and OSREV
18019 1995-01-26 20:52 millert
18021 * configure.in: irix5 changes
18023 1995-01-26 20:28 millert
18025 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
18026 for autoconf 2.1 compatibility
18028 1995-01-18 19:49 millert
18030 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
18031 do the righ thing wrt yyrestart (grrrr)
18033 1995-01-16 18:44 millert
18035 * Makefile.in: added visudoers/compat.h to DISTFILES
18037 1995-01-16 17:01 millert
18039 * configure.in: fixed an echo
18041 1995-01-16 16:36 millert
18043 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
18046 1995-01-16 16:35 millert
18048 * sudo.h: added ocmnd extern adjusted find_path() prototype
18050 1995-01-16 16:34 millert
18052 * parse.c: cmndcmp() now takes 3 arguments and checks against the
18053 qualified as well as the unqualified pathname. more code that
18054 should use cmndcmp() but did not, now does
18056 1995-01-16 16:34 millert
18058 * options.h: added to a comment
18060 1995-01-16 16:33 millert
18062 * logging.c: changed to use new find_path() parameter passing
18064 1995-01-16 16:32 millert
18066 * find_path.c: find_path() now takes 2 copyout parameters (one for
18067 the qualified pathname and one for the unqualified pathname).
18068 The third parameter may be NULL.
18070 1995-01-16 16:31 millert
18072 * configure.in: no longer munge pathnames.h
18074 1995-01-16 16:30 millert
18076 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
18077 defined in config.h) as a result, pathnames.h does not need to be
18078 run through configure and the user can override the configured
18081 1995-01-16 16:30 millert
18083 * config.h.in: added _SUDO_PATH_* entries
18085 1995-01-16 16:30 millert
18087 * aclocal.m4: _PATH* -> _SUDO_PATH_*
18089 1995-01-16 16:28 millert
18091 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
18094 1995-01-13 12:52 millert
18096 * compat.h: removed extraneous #endif
18098 1995-01-13 12:48 millert
18100 * aclocal.m4: added SUDO_PROG_MV
18102 1995-01-13 12:47 millert
18104 * configure.in: added SUDO_PROG_MV added riscos and isc os types
18105 took out -DSHORT_MESSAGE from --with-csops since it is now the
18108 1995-01-13 12:46 millert
18110 * sudo.c: move the include of id.h to compat.h now includes
18113 1995-01-13 12:45 millert
18115 * sudo.h: moved compatibility #defines to compat.h
18117 1995-01-13 12:45 millert
18119 * pathnames.h.in: added _PATH_MV
18121 1995-01-13 12:43 millert
18123 * config.h.in: move __P to compat.h
18125 1995-01-13 12:39 millert
18127 * getcwd.c, getwd.c, putenv.c: now includes compat.h
18129 1995-01-13 12:39 millert
18131 * compat.h: Initial revision
18133 1995-01-11 19:11 millert
18135 * sudo.h: pull user-configurable stuff out and put in options.h
18137 1995-01-11 18:43 millert
18139 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
18140 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
18143 1995-01-11 18:41 millert
18145 * Makefile.in: added visudoers/options.h
18147 1995-01-11 18:40 millert
18149 * options.h, OPTIONS: Initial revision
18151 1995-01-11 18:39 millert
18153 * Makefile.in: added OPTIONS and options.h
18155 1995-01-11 18:36 millert
18157 * logging.c: changed #ifdef's to use LOGGING and
18158 SLOG_SYSLOG/SLOG_FILE
18160 1995-01-11 11:02 millert
18162 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
18164 1994-12-17 18:18 millert
18166 * visudo.c: now only do Editor +line_num if line_num != 0
18168 1994-12-15 21:06 millert
18170 * visudo.c: now use mv if rename(2) fails
18172 1994-12-15 20:32 millert
18174 * BUGS: added a visudo bug
18176 1994-12-15 19:46 millert
18178 * check.c: expanded comment
18180 1994-11-12 18:33 millert
18182 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18185 1994-11-09 19:49 millert
18187 * sudo.c: added mips & isc support
18189 1994-11-09 19:49 millert
18191 * parse.c: added support for non-root owned sudoers file
18193 1994-11-09 19:48 millert
18195 * check.c: added exempt group support
18197 1994-11-09 19:47 millert
18199 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18200 non-root own sudoers file added exempt group support added isc
18203 1994-11-09 19:46 millert
18205 * visudo.c: now copy sudoers to temp file via read/write (not
18206 stdio) now chown new sudoers file to SUDOERS_OWNER
18208 1994-11-07 20:40 millert
18210 * configure.in: added skey support
18212 1994-11-07 20:39 millert
18214 * sudo.h: fixed typo added set_perms support added skey support
18215 added seteuid()/setegid() emulation for AIX
18217 1994-11-07 20:38 millert
18219 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18220 owned by root nread/write by only root
18222 1994-11-07 20:38 millert
18224 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18226 1994-11-07 20:38 millert
18228 * check.c: be_* -> set_perms() added skey support
18230 1994-11-06 18:59 millert
18232 * Makefile.in: ++version
18234 1994-11-06 18:59 millert
18238 1994-10-21 13:16 millert
18240 * sudo.c: now sets IFS
18242 1994-10-21 12:02 millert
18244 * insults.h: fixed typo
18246 1994-10-15 15:48 millert
18248 * config.h.in: added HAVE_SKEY
18250 1994-10-04 13:00 millert
18254 1994-10-04 12:57 millert
18256 * Makefile.in: ++version
18258 1994-10-04 12:57 millert
18262 1994-10-04 12:56 millert
18264 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18266 1994-10-04 12:56 millert
18268 * configure.in: added function check for tcgetattr(3)
18270 1994-10-04 12:55 millert
18272 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18274 1994-10-04 12:53 millert
18276 * config.h.in: added check for tcgetattr
18278 1994-09-26 17:38 millert
18282 1994-09-22 13:30 millert
18284 * parse.lex: now only include unistd.h for linux
18286 1994-09-21 14:29 millert
18288 * Makefile.in: added visudo.8 generation
18290 1994-09-21 14:07 millert
18292 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18294 1994-09-20 19:39 millert
18298 1994-09-20 19:39 millert
18302 1994-09-20 19:38 millert
18304 * README: added mailing list info
18306 1994-09-20 19:37 millert
18308 * parse.yacc: now use sudolineno instead of yylineno fixed bison
18311 1994-09-20 19:37 millert
18313 * configure.in: now use -no_library_replacement for osf don't make
18314 a static binary for hpux >= 9.0
18316 1994-09-20 19:21 millert
18318 * tgetpass.c: added string.h/strings.h inclusion
18320 1994-09-20 19:21 millert
18322 * config.h.in: added ssize_t def
18324 1994-09-20 19:18 millert
18326 * parse.lex: added inclusion of string.h/strings.h
18328 1994-09-20 18:48 millert
18330 * aclocal.m4: fixed uname | sed (needed to quote the '[')
18332 1994-09-20 18:42 millert
18334 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18337 1994-09-20 18:13 millert
18339 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18342 1994-09-20 18:10 millert
18346 1994-09-20 17:52 millert
18348 * parse.c: added code to support command listings
18350 1994-09-20 17:36 millert
18352 * sudo.c: added code for -l flag
18354 1994-09-20 17:35 millert
18356 * sudo.man: fixed typo added info for -l flag
18358 1994-09-20 14:45 millert
18360 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18362 1994-09-20 14:45 millert
18364 * aclocal.m4: added SUDO_SSIZE_T
18366 1994-09-20 14:44 millert
18368 * sudo.h: added MODE_LIST
18370 1994-09-20 14:43 millert
18372 * configure.in: added AC_SSIZE_T
18374 1994-09-19 20:53 millert
18376 * find_path.c, sudo_realpath.c: readlink() is now declared as
18379 1994-09-19 20:44 millert
18381 * configure.in: added -laud for OSF c2
18383 1994-09-02 15:55 millert
18385 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18386 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18387 sudo-bugs@cs.colorado.edu
18389 1994-09-02 15:54 millert
18391 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18392 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18393 sudo_setenv.c, tgetpass.c, version.h: changed
18394 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18396 1994-09-01 15:56 millert
18398 * Makefile.in: ++version
18400 1994-09-01 15:55 millert
18404 1994-09-01 15:55 millert
18406 * logging.c: added host to alertmail messages
18408 1994-09-01 15:55 millert
18410 * CHANGES, TODO: udpated
18412 1994-09-01 15:26 millert
18414 * logging.c: fixed logging problem where mail would not say which
18417 1994-09-01 13:45 millert
18419 * configure.in: added -laud for gcc if osf & c2
18421 1994-09-01 13:39 millert
18423 * check.c: moved set_auth_parameters to sudo.c
18425 1994-09-01 13:38 millert
18427 * sudo.c: added set_auth_parameters for osf
18429 1994-09-01 13:22 millert
18431 * configure.in: cleaned up -static stuff
18433 1994-09-01 13:15 millert
18435 * Makefile.in: ++version
18437 1994-09-01 13:15 millert
18441 1994-09-01 13:15 millert
18443 * sudo.c: changed setenv() to sudo_setenv()
18445 1994-09-01 13:12 millert
18447 * check.c: fixed osf problem
18449 1994-08-31 22:17 millert
18451 * configure.in: added OSF C2 stuff
18453 1994-08-31 22:00 millert
18457 1994-08-31 21:56 millert
18459 * check.c: added osf auth support & removed some extra spaces
18461 1994-08-31 21:52 millert
18463 * INSTALL, SUPPORTED: added osf C2 stuff
18465 1994-08-31 19:52 millert
18467 * TODO: added 2 suggestions
18469 1994-08-31 19:33 millert
18471 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18473 1994-08-31 18:48 millert
18477 1994-08-30 18:31 millert
18479 * version.h: 1.3.1final
18481 1994-08-30 18:30 millert
18483 * Makefile.in: added HISTORY
18485 1994-08-30 18:30 millert
18487 * sudo.man: mention HISTPRY file
18489 1994-08-30 18:30 millert
18491 * sudo.c: use sizeof instead of a constant in 1 place
18493 1994-08-30 18:30 millert
18495 * parse.yacc: added unistd.h
18497 1994-08-30 18:29 millert
18499 * parse.lex: added unistd.h
18501 1994-08-30 18:27 millert
18505 1994-08-30 18:15 millert
18507 * HISTORY: Initial revision
18509 1994-08-17 12:45 millert
18513 1994-08-17 12:39 millert
18517 1994-08-17 12:36 millert
18519 * sudo_setenv.c: added unistd.h include
18521 1994-08-16 15:46 millert
18523 * sudo.c: added sys/time.h for AIX
18525 1994-08-14 21:22 millert
18527 * configure.in: added check for -lsocket and sys/sockio.h
18529 1994-08-14 21:21 millert
18531 * config.h.in: took out libshadow check and added in sys/sockio.h
18534 1994-08-14 21:21 millert
18536 * sudo.c: now include sockio.h instead of ioctl.h if it exists
18537 "sudo -" now gets a better error message
18539 1994-08-14 20:47 millert
18541 * sample.sudoers: now has a dir and subnet entry
18543 1994-08-13 18:15 millert
18545 * sudo.c: removed if_ether.h
18547 1994-08-13 17:16 millert
18549 * TODO: added an item
18551 1994-08-13 17:15 millert
18553 * sudo.man: added network and ip addresses to man page
18555 1994-08-13 17:09 millert
18557 * sudo.c: no error if can't get interfaces or netmask since
18558 networking may not be in the kernel.
18560 1994-08-13 17:08 millert
18562 * parse.c: nwo check for interfaces == NULL
18564 1994-08-12 21:22 millert
18566 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18567 to fail if the last entry in the spec failed (ie: it was only
18568 looking at the last entry). CLeaned things up by adding the
18569 cmndcmp() function--all neat & tidy
18571 1994-08-12 21:21 millert
18573 * CHANGES: added one
18575 1994-08-11 23:42 millert
18577 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18579 1994-08-11 21:58 millert
18581 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18584 1994-08-11 21:58 millert
18586 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18587 visudo.c: added include of netinet/in.h
18589 1994-08-11 21:57 millert
18593 1994-08-11 21:57 millert
18595 * sudo.h: added interfaces global
18597 1994-08-11 21:56 millert
18599 * parse.c: now uses new interfaces global
18601 1994-08-11 21:56 millert
18603 * sudo.c: now ip addresses are gleaned fw/o dns
18605 1994-08-10 19:21 millert
18607 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18609 1994-08-10 19:21 millert
18611 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18614 1994-08-10 19:20 millert
18616 * sudo.h: added ip_addrs def added load_ip_addrs prototype
18618 1994-08-08 16:03 millert
18622 1994-08-08 15:57 millert
18624 * Makefile.in: removed multiple entries in DISTFILES
18626 1994-08-08 13:05 millert
18628 * visudo.c: ansified the !STDC_HEADERS decls
18630 1994-08-08 13:05 millert
18632 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18633 malloc decl if gnuc
18635 1994-08-08 13:04 millert
18637 * sudo.c: can't use getopt(3) since it munges args to the command
18638 to be run as root don't do malloc decl if gnuc
18640 1994-08-08 00:41 millert
18642 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18643 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18646 1994-08-08 00:27 millert
18648 * getcwd.c, getwd.c: added missing paren
18650 1994-08-08 00:23 millert
18652 * Makefile.in: added putenv.c to DISTFILES
18654 1994-08-08 00:08 millert
18656 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18657 not defined now can count on putenv() being there
18659 1994-08-08 00:08 millert
18661 * sudo_realpath.c: took out errno decl since sudo.h does it for us
18662 fixed up a next cc warning added params to func decls when
18663 STDC_HEADERS is not defined
18665 1994-08-08 00:07 millert
18667 * sudo.h: took out environ extern added local declaratio of
18668 putenv() if local version is needed
18670 1994-08-08 00:05 millert
18672 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18673 func decls when STDC_HEADERS is not defined
18675 1994-08-08 00:04 millert
18677 * config.h.in: added memcpy check check to see that ansi vs bsd
18678 macros are ntot already defiend before defining (ie: avoid
18681 1994-08-08 00:03 millert
18683 * configure.in: removed fluff setenv check plus check w/ replace
18684 for putenv if also no setenv
18686 1994-08-08 00:01 millert
18688 * putenv.c: Initial revision
18690 1994-08-06 19:19 millert
18692 * sudo_setenv.c: Initial revision
18694 1994-08-06 19:19 millert
18696 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18698 1994-08-06 19:19 millert
18700 * sudo.c: now use sudo_setenvc
18702 1994-08-06 19:18 millert
18704 * configure.in: added puteenv and setenv, removed realpath
18706 1994-08-06 19:18 millert
18708 * config.h.in: added putenv & setenv
18710 1994-08-06 19:18 millert
18712 * Makefile.in: added sudo_setenv
18714 1994-08-06 19:16 millert
18718 1994-08-05 19:43 millert
18720 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18723 1994-08-05 19:43 millert
18725 * Makefile.in: added MAN_POSTINSTALL
18727 1994-08-05 19:43 millert
18731 1994-08-05 19:10 millert
18733 * sudo.man: added SUDO_* plus new options
18735 1994-08-05 19:10 millert
18737 * CHANGES: added one
18739 1994-08-05 19:07 millert
18741 * configure.in: took out shadow lib
18743 1994-08-05 18:35 millert
18747 1994-08-05 17:52 millert
18749 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18751 1994-08-05 17:49 millert
18753 * Makefile.in: support for installing a cat page instead of a man
18756 1994-08-05 17:48 millert
18758 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18759 looks for nroff to determine whether or not to install a cat or
18762 1994-08-05 17:48 millert
18764 * config.h.in: added HAVE_FLEX
18766 1994-08-05 16:14 millert
18768 * sudo.c: not set ret to MODE_RUN initially
18770 1994-08-05 16:12 millert
18772 * find_path.c: made command (and therefor cmnd dynamically
18775 1994-08-04 20:25 millert
18779 1994-08-04 20:24 millert
18783 1994-08-04 20:24 millert
18785 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18787 1994-08-04 20:24 millert
18789 * sudo.h: added MODE_ removed validate_only and added
18792 1994-08-04 20:22 millert
18794 * sudo.c: usage() now takes an int (exit value) added parse_args()
18795 to parse command line arguments moved call to find_path() from
18796 load_globals to new function load_cmnd() removed validate_only
18797 global -- now use the concept of "modes" added -h and -k options
18799 1994-08-04 20:21 millert
18801 * parse.c: no longer use global validate_only now checks for
18802 command called "validate" removed check for non-fully qualified
18803 commands since that is done by find_path
18805 1994-08-04 20:20 millert
18807 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18809 1994-08-04 20:17 millert
18811 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18814 1994-08-04 20:17 millert
18816 * check.c: check_timestamp no longer runs reminder(), it is implied
18817 in the return val added remove_timestamp()
18819 1994-08-04 20:16 millert
18823 1994-08-04 16:38 millert
18827 1994-08-04 16:38 millert
18829 * sudo_realpath.c: took out old_errno
18831 1994-08-04 16:37 millert
18835 1994-08-03 12:08 millert
18837 * logging.c: moved send_mail to after syslog
18839 1994-08-02 22:41 millert
18841 * sudo.c: now set SUDO_ envariables
18843 1994-08-01 13:40 millert
18847 1994-08-01 13:39 millert
18849 * sudo_realpath.c: now print error if chdir fails
18851 1994-08-01 13:39 millert
18853 * find_path.c: removed an XXX
18855 1994-07-25 20:40 millert
18859 1994-07-25 20:36 millert
18861 * configure.in: no more static binaries for aix
18863 1994-07-25 18:37 millert
18865 * INSTALL: fixed typo
18867 1994-07-25 18:33 millert
18869 * sudo_realpath.c: took out stuff not needed for sudo now does
18870 be_root/be_user itself now uses cwd global
18872 1994-07-25 18:32 millert
18876 1994-07-25 18:31 millert
18878 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18880 1994-07-25 18:26 millert
18882 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18884 1994-07-25 18:25 millert
18886 * find_path.c: now use sudo_realpath()
18888 1994-07-25 18:25 millert
18890 * config.h.in: took out realpth() stuff since we now use
18893 1994-07-25 18:25 millert
18895 * configure.in: ultrix enhanced sec
18897 1994-07-25 18:25 millert
18899 * SUPPORTED: added ultrix enhanced sec.
18901 1994-07-25 18:24 millert
18905 1994-07-25 18:21 millert
18907 * check.c: ultrix enhanced security suport
18909 1994-07-25 18:20 millert
18911 * Makefile.in: added sudo_realpath.c
18913 1994-07-25 18:18 millert
18917 1994-07-25 14:28 millert
18919 * tgetpass.c: increased passwd len to 24 for c2 security
18921 1994-07-25 13:17 millert
18923 * BUGS: updated BUGS
18925 1994-07-15 11:49 millert
18927 * check.c: now use user global var
18929 1994-07-15 11:48 millert
18931 * configure.in: took out -ls
18933 1994-07-14 19:11 millert
18935 * configure.in: added AFS libs
18937 1994-07-14 17:45 millert
18939 * sudo.h: user is now a char * added epasswd
18941 1994-07-14 17:43 millert
18943 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18944 password) global made user dynamically allocated
18946 1994-07-14 17:43 millert
18948 * configure.in: added tzset test
18950 1994-07-14 17:43 millert
18952 * config.h.in: added HAVE_TZSET
18954 1994-07-14 17:42 millert
18956 * check.c: cleaned up encrypted passwd grab somewhat
18958 1994-07-14 12:34 millert
18960 * configure.in: fixed AFS typo
18962 1994-07-14 12:34 millert
18964 * INSTALL: added AFS not
18966 1994-07-14 12:34 millert
18970 1994-07-14 12:33 millert
18972 * logging.c: can now log to both syslog & a file
18974 1994-07-14 12:12 millert
18976 * sudo.h: added BOTH_LOGS
18978 1994-07-14 11:34 millert
18982 1994-07-14 11:32 millert
18984 * configure.in: --with-AFS
18986 1994-07-14 11:32 millert
18988 * config.h.in: added HAVE_AFS
18990 1994-07-14 11:31 millert
18992 * check.c: added afs changes
18994 1994-07-14 11:21 millert
18996 * sudo.h: removed AFS stuff :-)
18998 1994-07-14 11:19 millert
19000 * tgetpass.c: include sys/select for AIX
19002 1994-07-14 11:17 millert
19004 * sudo.h: added AFS
19006 1994-07-14 11:16 millert
19010 1994-07-07 14:45 millert
19012 * SUPPORTED, CHANGES: updated
19014 1994-07-07 14:44 millert
19016 * logging.c: can now have MAILER undefined
19018 1994-07-07 14:37 millert
19020 * INSTALL: new sub-note about MAILER
19022 1994-07-06 23:11 millert
19024 * sudo.man: added blurb about password timeout
19026 1994-07-06 20:52 millert
19028 * configure.in: convex c2 changes
19030 1994-07-06 20:52 millert
19032 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
19034 1994-07-06 20:51 millert
19036 * Makefile.in: added OSDEFS
19038 1994-07-06 20:46 millert
19040 * config.h.in: added spaces
19042 1994-07-06 20:08 millert
19044 * tgetpass.c: added a goto if fgets fails
19046 1994-07-06 20:08 millert
19048 * sudo.h: use __hpux not hpux convex c2 stuff
19050 1994-07-06 20:08 millert
19052 * sudo.c: use __hpux not hpux
19054 1994-07-06 20:08 millert
19056 * logging.c: convex c2 stuff
19058 1994-07-06 20:07 millert
19060 * config.h.in: define ansi-ish cpp os defines if non-ansi are
19061 defined for hpux & convex
19063 1994-07-06 20:07 millert
19065 * INSTALL: updated to say we support sonvex C2
19067 1994-07-06 20:05 millert
19069 * check.c: added convex c2 support
19071 1994-07-01 12:06 millert
19073 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
19074 select() to timeout
19076 1994-06-29 17:04 millert
19078 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
19080 1994-06-29 16:39 millert
19082 * tgetpass.c: now works + uses fgets()
19084 1994-06-28 18:25 millert
19086 * tgetpass.c: select doesn't seem to recognize a single '\n' as
19087 input waiting so we can;t use it, sigh.
19089 1994-06-26 16:38 millert
19091 * PORTING: updated tgetpass() blurb
19093 1994-06-26 16:35 millert
19095 * configure.in: added --with-getpass
19097 1994-06-26 16:35 millert
19099 * Makefile.in: added tgetpass stuff
19101 1994-06-26 15:25 millert
19103 * tgetpass.c: now uses stdio
19105 1994-06-26 15:17 millert
19109 1994-06-24 19:48 millert
19111 * PORTING: updated ,.
19113 1994-06-24 19:46 millert
19115 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
19117 1994-06-24 19:45 millert
19119 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
19121 1994-06-24 19:45 millert
19123 * check.c: added hpux C2 shit
19125 1994-06-24 19:45 millert
19127 * Makefile.in: took out tgetpass.*
19129 1994-06-24 19:45 millert
19131 * INSTALL: added C2 blurb
19133 1994-06-13 15:54 millert
19135 * configure.in: no termio(s) for ultrix since it is broken
19137 1994-06-13 15:41 millert
19139 * check.c: added a space (yeah, anal)
19141 1994-06-13 15:17 millert
19143 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
19145 1994-06-08 14:34 millert
19147 * config.h.in: took out bsd signal stuff for irix
19149 1994-06-08 14:26 millert
19151 * visudo.c: comments in #endif
19153 1994-06-08 14:09 millert
19155 * configure.in: don't define BSD signals for irix
19157 1994-06-08 12:57 millert
19159 * TODO: did some...
19161 1994-06-08 12:57 millert
19165 1994-06-08 12:56 millert
19167 * realpath.c, sudo_realpath.c: took out unneeded code by changing
19168 where a strings was terminated
19170 1994-06-07 19:21 millert
19172 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
19175 1994-06-07 17:40 millert
19177 * sudo.h: move __P to config.h
19179 1994-06-07 17:40 millert
19181 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19184 1994-06-07 17:40 millert
19186 * config.h.in: added __P
19188 1994-06-07 17:21 millert
19190 * config.h.in: added HAVE_FCHDIR
19192 1994-06-07 17:18 millert
19194 * strdup.c: now include stdio
19196 1994-06-07 14:55 millert
19198 * realpath.c, sudo_realpath.c: now works if no fchdir
19200 1994-06-07 14:55 millert
19202 * visudo.c: define SA_RESETHAND to null if not defined
19204 1994-06-07 14:54 millert
19206 * configure.in: added check & replace
19208 1994-06-06 20:05 millert
19210 * configure.in: took out -static for nextstep -- it doesn't work
19212 1994-06-06 19:59 millert
19214 * logging.c: moved #endif to where it belongs
19216 1994-06-06 19:54 millert
19218 * SUPPORTED: correction
19220 1994-06-06 19:42 millert
19222 * configure.in: now checks for strdup realpath getcwd bzero
19224 1994-06-06 19:31 millert
19226 * config.h.in: emulate bzero
19228 1994-06-06 16:57 millert
19230 * visudo.c: added posic signals
19232 1994-06-06 16:57 millert
19234 * tgetpass.c: bzero cast
19236 1994-06-06 16:57 millert
19238 * logging.c: added posix signals
19240 1994-06-06 16:56 millert
19242 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19245 1994-06-06 16:56 millert
19247 * config.h.in: added posix signal stuff
19249 1994-06-06 16:56 millert
19251 * Makefile.in: added new srcs
19253 1994-06-06 12:53 millert
19255 * visudo.c: updated useag
19257 1994-06-06 12:39 millert
19259 * tgetpass.c: now uses posix signals
19261 1994-06-05 20:17 millert
19263 * PORTING: updated sto reflect major changes
19265 1994-06-05 20:05 millert
19267 * TODO, CHANGES: updated
19269 1994-06-05 20:04 millert
19271 * tgetpass.c: uses sysconf() if available
19273 1994-06-05 20:04 millert
19275 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19277 1994-06-05 20:04 millert
19279 * realpath.c, sudo_realpath.c: for those w/o this in libc
19281 1994-06-05 20:03 millert
19283 * getcwd.c, getwd.c: Initial revision
19285 1994-06-05 20:03 millert
19287 * find_path.c: rewrote to use realpath(3) - nis now all my code
19289 1994-06-05 20:02 millert
19291 * config.h.in: added HAVE_REALPATH
19293 1994-06-05 20:02 millert
19295 * check.c: now use tgetpass
19297 1994-06-05 20:02 millert
19299 * Makefile.in: added LIBOBJS use tgetpass.c
19301 1994-06-05 18:55 millert
19303 * tgetpass.c: works now :-)
19305 1994-06-05 18:27 millert
19307 * tgetpass.c: Initial revision
19309 1994-06-05 17:17 millert
19311 * pathnames.h.in: added /dev/tty
19313 1994-06-04 17:12 millert
19315 * version.h: incremented
19317 1994-06-04 15:29 millert
19319 * sudo.c: always use getcwd
19321 1994-06-04 14:49 millert
19323 * config.h.in: added check for getwd
19325 1994-06-04 14:48 millert
19327 * configure.in: replace strdup & realpath & getcwd if missing
19329 1994-06-04 14:47 millert
19331 * pathnames.h.in: added _PATH_PWD
19333 1994-06-04 14:46 millert
19335 * aclocal.m4: added SUDO_PROG_PWD
19337 1994-06-04 14:37 millert
19339 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19341 1994-06-03 11:31 millert
19343 * configure.in: quoted quare brackets
19345 1994-06-02 17:49 millert
19347 * sudo.c: no need to strdup() a constant
19349 1994-06-02 15:45 millert
19353 1994-06-02 15:44 millert
19355 * sudo.man: added validate
19357 1994-06-02 15:42 millert
19359 * sudo.c: added -v to usage
19361 1994-06-02 15:41 millert
19363 * parse.c, sudo.c, sudo.h: added validate_only stuff
19365 1994-05-29 21:29 millert
19367 * configure.in: now finds sed
19369 1994-05-29 21:28 millert
19371 * aclocal.m4: $OSREV is now an int
19373 1994-05-29 19:13 millert
19375 * configure.in: added mtxinu to caser
19377 1994-05-29 18:37 millert
19379 * sudo.h: added EXEC macro
19381 1994-05-29 18:36 millert
19383 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19386 1994-05-29 18:36 millert
19388 * logging.c: changed mail_argv[] def now use EXEC() macro
19390 1994-05-29 18:35 millert
19392 * check.c: took out crypt() definition
19394 1994-05-29 17:23 millert
19396 * version.h: upped the version
19398 1994-05-29 15:52 millert
19400 * configure.in: always look for -lnsl
19402 1994-05-29 15:29 millert
19404 * aclocal.m4: added an echo
19406 1994-05-29 15:25 millert
19408 * sudo.h: SHORT_MESSAGE is now the default
19410 1994-05-29 15:18 millert
19412 * config.h.in: fixed typo
19414 1994-05-29 01:29 millert
19416 * configure.in: added missing AC_DEFINE(SVR4) for solaris
19418 1994-05-28 20:42 millert
19420 * sudo.man: documented the -v flag
19422 1994-05-28 20:34 millert
19424 * SUPPORTED: updated
19426 1994-05-28 20:31 millert
19428 * check.c: proto-ized crypt()
19430 1994-05-28 20:28 millert
19432 * config.h.in: added LIBSHADOW undef
19434 1994-05-28 20:18 millert
19436 * configure.in: nwo set OS to be lowercase
19438 1994-05-28 19:36 millert
19440 * configure.in: now use SUDO_OSTYPE to set $OS
19442 1994-05-28 19:36 millert
19444 * aclocal.m4: now use uname to determine os
19446 1994-05-28 16:23 millert
19448 * visudo.c: added prototypes & moved sig handler around
19450 1994-05-28 15:13 millert
19452 * sudo.h: added prototyppes
19454 1994-05-28 15:13 millert
19456 * parse.c: added comment
19458 1994-05-28 15:12 millert
19460 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19462 1994-05-28 15:11 millert
19464 * check.c, logging.c, sudo.c: added prototypes
19466 1994-05-28 15:11 millert
19468 * aixcrypt.exp: Initial revision
19470 1994-05-28 15:11 millert
19472 * Makefile.in: added aixcrypt.exp
19474 1994-05-28 13:21 millert
19476 * parse.lex, parse.yacc: moved config.h to top of includes
19478 1994-05-25 15:48 millert
19480 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19482 1994-05-24 23:08 millert
19484 * visudo.c: added -v flag and usage()
19486 1994-05-24 23:08 millert
19488 * version.h: fixed a typo
19490 1994-05-24 23:08 millert
19492 * sudo.c: cast Argv to a const for exec added -v flag
19494 1994-05-24 23:07 millert
19496 * logging.c: mail_argv is now a const
19498 1994-05-24 23:07 millert
19500 * configure.in: only set RETSIGTYPE if it is not set already
19502 1994-05-24 23:07 millert
19504 * aclocal.m4: now defines & STDC_HEADERS for Irix
19506 1994-05-24 23:07 millert
19508 * Makefile.in: added version.h
19510 1994-05-24 21:25 millert
19512 * insults.h, sudo.h: prevent multiple inclusion
19514 1994-05-24 21:20 millert
19516 * version.h: Initial revision
19518 1994-05-24 21:09 millert
19520 * parse.lex, parse.yacc: now includes config.h
19522 1994-05-24 20:54 millert
19524 * aclocal.m4: now talks about sunos 4.x
19526 1994-05-24 20:23 millert
19528 * visudo.c: calls to Exit now pass an arg
19530 1994-05-24 18:00 millert
19532 * visudo.c: signal handler now takes an int argument
19534 1994-05-24 18:00 millert
19538 1994-05-24 17:44 millert
19540 * sudo.c: ok, the getcwd() is now *really* done as the user
19542 1994-05-24 17:44 millert
19544 * configure.in: changed AIX STATIC_FLAGS
19546 1994-05-24 16:27 millert
19548 * aclocal.m4: solaris now defines SVR4
19550 1994-05-24 16:18 millert
19552 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19555 1994-05-24 16:18 millert
19557 * sudo.c: moved getcwd stuff into load_globals
19559 1994-05-24 16:18 millert
19561 * parse.c: took out externs that are in suod.h
19563 1994-05-24 16:18 millert
19565 * logging.c: moved cwd into load_globals
19567 1994-05-24 16:17 millert
19569 * find_path.c: moved cwd stuff
19571 1994-05-24 15:55 millert
19573 * Makefile.in: fixed make distclean & realclean
19575 1994-05-24 12:51 millert
19579 1994-05-24 12:51 millert
19581 * CHANGES: added solaris changes
19583 1994-05-24 12:51 millert
19585 * aclocal.m4: added solaris changes, need to rework
19587 1994-05-24 12:50 millert
19589 * configure.in: cleaned up for solaris
19591 1994-05-24 12:13 millert
19593 * logging.c: reinstall reapchild signal handler for non-bsd signals
19595 1994-05-24 12:03 millert
19597 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19600 1994-05-24 12:03 millert
19602 * sudo.c: support for HAVE_SYSCONF
19604 1994-05-24 12:02 millert
19606 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19607 minor prettying up /
19609 1994-05-23 20:26 millert
19611 * config.h.in: added HAVE_SYSCONF
19613 1994-05-16 18:57 millert
19615 * configure.in: now tells you what os you are running /.
19617 1994-05-16 18:56 millert
19619 * aclocal.m4: took out extra ','
19621 1994-05-14 17:56 millert
19623 * config.h.in: added _BSD_COMPAT
19625 1994-05-14 17:56 millert
19627 * aclocal.m4: fixed for irix5
19629 1994-05-14 17:55 millert
19633 1994-05-14 17:27 millert
19635 * sudo.c: uid seinitialized to -2
19637 1994-04-28 12:36 millert
19639 * sudo.c: now removes LIBPATH for AIX
19641 1994-03-12 20:41 millert
19643 * configure.in: now uses ufc if it finds it
19645 1994-03-12 17:42 millert
19647 * sudo.h: no longer define yyval & yylval since yacc does it
19649 1994-03-12 17:42 millert
19651 * parse.lex: now defines yylval as extenr
19653 1994-03-12 17:41 millert
19655 * configure.in: BROKEN_GETPASS is now an OPTION
19657 1994-03-12 17:41 millert
19659 * config.h.in: took out BROKEN_GETPASS
19661 1994-03-12 17:20 millert
19663 * Makefile.in: took out big comment
19665 1994-03-12 16:24 millert
19669 1994-03-12 16:20 millert
19671 * Makefile.in: took out README.beta
19673 1994-03-12 16:19 millert
19675 * SUPPORTED: Initial revision
19677 1994-03-12 16:19 millert
19679 * INSTALL: now reference SUPPORTED .,
19681 1994-03-12 16:17 millert
19683 * config.h.in: now check for convex OR __convex__
19685 1994-03-12 16:16 millert
19687 * aclocal.m4: now check for convex or __convex__
19689 1994-03-12 16:15 millert
19691 * Makefile.in: added dist target
19693 1994-03-12 15:19 millert
19695 * aclocal.m4: use __convex__
19697 1994-03-12 14:33 millert
19699 * find_path.c: now use _S_* stat stuff to be ansi-like
19701 1994-03-12 14:11 millert
19703 * INSTALL: updated for configure directions
19705 1994-03-12 14:05 millert
19707 * Makefile.in: distclean now removes config.h and pathnames.h
19709 1994-03-12 14:03 millert
19713 1994-03-12 14:00 millert
19715 * TODO: fixed typoe
19717 1994-03-12 13:57 millert
19719 * Makefile.in, visudo.c: updated version
19721 1994-03-12 13:57 millert
19723 * config.h.in, pathnames.h.in: added copyright header
19725 1994-03-12 13:55 millert
19727 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19728 parse.yacc, sudo.c, sudo.h: udpated version
19730 1994-03-12 13:39 millert
19732 * visudo.c: udpated to use configure + pathnames.h
19734 1994-03-12 13:37 millert
19736 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19738 1994-03-12 13:37 millert
19740 * sudo.h: now works with configure
19742 1994-03-12 13:36 millert
19744 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19745 updated to work with configure + pathnames.h
19747 1994-03-12 10:40 millert
19749 * Makefile.in: added LEXLIB
19751 1994-03-10 03:18 millert
19753 * COPYING: updated gnu general licence to versio 2
19755 1994-03-10 02:44 millert
19757 * pathnames.h.in, config.h.in: Initial revision
19759 1994-03-10 01:43 millert
19761 * sudo.h: changed to work with configure
19763 1994-03-09 18:51 millert
19765 * Makefile.in, aclocal.m4, configure.in: Initial revision
19767 1994-03-09 17:36 millert
19769 * visudo.c: now uses defines used by configure
19771 1994-03-01 16:31 millert
19773 * find_path.c: sudo won't bitch about EPERM now, for real
19775 1994-02-28 00:36 millert
19777 * logging.c: renamed exec_argv to eliminate a libc name clash with
19780 1994-02-28 00:28 millert
19782 * CHANGES: corrected
19784 1994-02-28 00:27 millert
19786 * logging.c, sudo.c, sudo.h: execve -> execv
19788 1994-02-27 23:27 millert
19792 1994-02-27 23:19 millert
19794 * PORTING: added 2 mroe items
19796 1994-02-27 23:12 millert
19800 1994-02-27 23:11 millert
19802 * sudo.h: added UMASK and mode_t declaration
19804 1994-02-27 23:11 millert
19806 * sudo.c: added UMASK
19808 1994-02-27 20:55 millert
19810 * logging.c: now opens log file with mode 077
19812 1994-02-27 20:55 millert
19814 * check.c: saved current umask ans restores it
19816 1994-02-27 20:36 millert
19818 * sudo.h: added MAXLOGFILELEN
19820 1994-02-27 20:35 millert
19822 * logging.c: split long log lines. FOr syslog, split into multiple
19823 entries, for a log file, indent the extra for readability
19825 1994-02-27 17:22 millert
19827 * CHANGES: added changes
19829 1994-02-27 17:18 millert
19831 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19834 1994-02-25 16:04 millert
19836 * TODO: added input from Brett M Hogden <hogden@rge.com>
19838 1994-02-16 13:35 millert
19840 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19841 execvp() OR execve() becuase of this.
19843 1994-02-16 13:35 millert
19845 * logging.c: now uses execvp() OR execve()
19847 1994-02-16 13:31 millert
19849 * sudo.h: added USE_EXECVE
19851 1994-02-16 13:27 millert
19853 * sudo.h: added environ
19855 1994-02-16 12:53 millert
19857 * find_path.c: now ignore EPERM
19859 1994-02-15 23:52 millert
19861 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19864 1994-02-15 23:52 millert
19868 1994-02-15 23:40 millert
19870 * sudo.h: took out Envp
19872 1994-02-14 12:28 millert
19874 * BUGS: Initial revision
19876 1994-02-10 14:29 millert
19878 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19880 1994-02-10 14:05 millert
19882 * sudo.h: added SECURE_PATH
19884 1994-02-10 13:50 millert
19886 * INSTALL: added sample.sudoers note
19888 1994-02-10 13:47 millert
19890 * sudoers: Initial revision
19892 1994-02-09 14:54 millert
19894 * find_path.c: fixed typo
19896 1994-02-08 23:06 millert
19898 * PORTING: took out SAVED_UID garbage
19900 1994-02-08 22:55 millert
19902 * INSTALL: mentioned HAL
19904 1994-02-08 22:50 millert
19906 * sudo.h: added HAL line
19908 1994-02-08 22:48 millert
19910 * insults.h: added HAL insults
19912 1994-02-08 22:48 millert
19916 1994-02-08 22:02 millert
19918 * logging.c: more verbose error if mailer not found
19920 1994-02-08 22:02 millert
19922 * check.c: now do getpwent as root for soem shadow password systems
19925 1994-02-08 13:22 millert
19927 * sudo.h: took out SAVED_UID garbade
19929 1994-02-08 13:21 millert
19931 * sudo.c: took out SAVED_UID garbage since it don't work
19933 1994-02-06 17:43 millert
19937 1994-02-06 17:40 millert
19939 * insults.h: added a missing space :-)
19941 1994-02-05 19:48 millert
19943 * sudo.c, sudo.h: took out multimax cruft
19945 1994-02-05 19:30 millert
19947 * INSTALL: minor update
19949 1994-02-05 19:30 millert
19951 * PORTING: finished
19953 1994-02-05 19:19 millert
19955 * sudo.c: fixed a typo + indentation
19957 1994-02-05 18:43 millert
19959 * sudo.h: took outumoved some defines to the config file ,. ,.
19961 1994-02-05 15:17 millert
19963 * PORTING: Initial revision
19965 1994-02-05 15:17 millert
19969 1994-02-05 15:16 millert
19971 * sudo.h: added HAS_SAVED_UID
19973 1994-02-05 15:16 millert
19975 * sudo.c: put back AIX cruft
19977 1994-02-03 00:44 millert
19979 * sudo.c: aix changes
19981 1994-02-02 01:31 millert
19985 1994-02-02 01:30 millert
19987 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19990 1994-02-01 22:21 millert
19992 * check.c: added missing %s\n
19994 1994-01-31 02:06 millert
19996 * install-sh: Initial revision
19998 1994-01-31 01:58 millert
20000 * CHANGES, TODO: updated
20002 1994-01-31 01:56 millert
20004 * sudo.c: now removed _RLD_* for alphas
20006 1994-01-31 01:50 millert
20008 * INSTALL: updated for new config scheme
20010 1994-01-30 19:42 millert
20012 * find_path.c: more verbose eror messages
20014 1994-01-27 14:08 millert
20016 * TODO: now have solaris
20018 1994-01-27 14:07 millert
20020 * sudo.h: define __svr4__ for SOLARIS
20022 1994-01-27 14:07 millert
20024 * check.c: added svr4 junk for shadow pws for solaris 2.x
20026 1994-01-27 13:19 millert
20028 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
20029 Its not needed since we start out setuid with the correct perms.
20031 1994-01-26 19:51 millert
20033 * check.c, sudo.c, sudo.h: now use setreuid()
20035 1994-01-26 18:58 millert
20037 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
20040 1994-01-26 18:52 millert
20042 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
20044 1994-01-26 18:52 millert
20046 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
20049 1993-12-07 01:33 millert
20051 * README: minor update + spell fix
20053 1993-12-07 01:33 millert
20055 * INSTALL: rewrote most of this
20057 1993-12-07 01:13 millert
20059 * sudo.h: added all options that are in the Makefile
20061 1993-12-07 00:23 millert
20063 * getpass.c: now use USE_TERMIO #define for sgi & hpux
20065 1993-12-06 23:19 millert
20067 * TODO: todo: posix sigs
20069 1993-12-06 01:12 millert
20071 * check.c, find_path.c: always include strings.h
20073 1993-12-05 20:34 millert
20075 * visudo.c: added STATICEDITOR
20077 1993-12-05 20:30 millert
20079 * sudo.h: sgi has vi in /usr/bin too
20081 1993-12-05 20:23 millert
20083 * sudo.man: added VISUAL
20085 1993-12-02 22:20 millert
20087 * sudo.h: sue /usr/bin/vi on some systems
20089 1993-12-02 22:19 millert
20091 * sudo.c: fixed warning (include strings.h)
20093 1993-12-02 22:06 millert
20095 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
20098 1993-12-02 21:38 millert
20100 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
20102 1993-12-02 21:35 millert
20104 * visudo.c: added EDITOR envar
20106 1993-12-02 21:34 millert
20108 * check.c, find_path.c, parse.c, sudo.c: added patches from
20109 John_Rouillard directory spec uses EDITOR
20111 1993-12-01 19:32 millert
20113 * getpass.c: added flush for hpux
20115 1993-11-30 13:37 millert
20117 * sudo.c: no longer assume malloc returns a char *
20119 1993-11-29 20:35 millert
20121 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
20122 stuff -- now gets removed correctly
20124 1993-11-29 19:31 millert
20126 * sudo.h: added STD_HEADERS macro
20128 1993-11-29 19:14 millert
20130 * sudo.c: now uses STD_HEADERS macor for ansi
20132 1993-11-29 19:14 millert
20134 * find_path.c: now uses STD_HEADERS macro
20136 1993-11-29 19:13 millert
20138 * check.c: niceties for C compiler bitches -- no real change
20140 1993-11-29 13:04 millert
20142 * visudo.c: now doesn't fclose a file never opened.
20144 1993-11-28 16:35 millert
20146 * sudo.man: added visudo line
20148 1993-11-28 16:31 millert
20150 * sudo.man: added error stuff added me in there...
20152 1993-11-28 03:12 millert
20154 * CHANGES: noted insults
20156 1993-11-28 03:01 millert
20158 * INSTALL: added blurb about reading stuff
20160 1993-11-28 03:00 millert
20162 * sudo.h: added insults
20164 1993-11-28 03:00 millert
20166 * insults.h: corrected somments and removed newlines
20168 1993-11-28 03:00 millert
20170 * check.c: now uses insults
20172 1993-11-28 02:45 millert
20174 * insults.h: Initial revision
20176 1993-11-27 19:46 millert
20178 * INSTALL: added dec syslog note
20180 1993-11-27 19:25 millert
20182 * sample.sudoers: added real stuff in there
20184 1993-11-27 19:24 millert
20186 * TODO: added a todo
20188 1993-11-27 19:10 millert
20192 1993-11-27 18:59 millert
20194 * sample.sudoers: Initial revision
20196 1993-11-27 18:59 millert
20198 * sudo.man: updated with changes
20200 1993-11-27 18:52 millert
20202 * sudo.man: Initial revision
20204 1993-11-27 18:48 millert
20206 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20209 1993-11-27 18:46 millert
20211 * visudo.c: updated version number and took out jeff's old addr
20212 since it is no good
20214 1993-11-27 18:42 millert
20216 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20217 parse.yacc, sudo.c: updated version number and took out jeff's
20218 email (since it is invalid)
20220 1993-10-28 09:36 millert
20222 * check.c: added fflush()
20224 1993-10-22 20:46 millert
20226 * find_path.c: now return NULL instead pf
\b\bof exiting for
20227 nopn
\b\bn-fatal errors
20229 1993-10-21 16:57 millert
20231 * check.c: new banner
20233 1993-10-21 16:42 millert
20235 * parse.lex: now sudo.h gets included first
20237 1993-10-17 20:31 millert
20239 * parse.lex: now can use flex
20241 1993-10-17 20:31 millert
20243 * sudo.h: linux patch
20245 1993-10-17 20:30 millert
20247 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20249 1993-10-17 20:30 millert
20251 * check.c: linux diff
20253 1993-10-15 16:03 millert
20255 * find_path.c: stat now ignores EINVAL
20257 1993-10-05 21:48 millert
20259 * find_path.c, sudo.c: now declare strdup as extern
20261 1993-10-04 15:23 millert
20263 * visudo.c: reformatted with indent + by hand
20265 1993-10-04 15:10 millert
20267 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20268 sudo.h: used indent to "fix" coding style
20270 1993-10-03 20:12 millert
20272 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20273 LAST should maybe move the code that does this into the loop
20274 body. makes it messier tho. hmmm.
20276 1993-09-08 11:53 millert
20278 * find_path.c: redid the fix for non-executable files in an easier
20279 to read way plus some minor aethetic changes
20281 1993-09-08 11:39 millert
20283 * find_path.c: fixed bug with non-executable tings of same name in
20284 path introduced by checkig errno after stat(2).
20286 1993-09-05 10:02 millert
20288 * sudo.c: fixed off by one error
20290 1993-09-05 09:55 millert
20292 * find_path.c: now handles decending below '/' correctly
20294 1993-09-05 08:35 millert
20296 * sudo.c: now actually builds Envp instead of munging envp
20298 1993-09-04 15:42 millert
20300 * parse.yacc: now includes sys/param.h
20302 1993-09-04 15:41 millert
20304 * visudo.c: now includes sys/param.h
20306 1993-09-04 15:30 millert
20308 * sudo.h: fixed ifndef -> ifdef
20310 1993-09-04 15:19 millert
20312 * qualify.c: make more like find_path.c
20314 1993-09-04 15:18 millert
20316 * find_path.c: rewritten by millert
20318 1993-09-04 15:17 millert
20320 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20321 added info about new defines in the comment
20323 1993-09-04 15:15 millert
20325 * logging.c: now uses USE_CWD
20327 1993-09-04 14:10 millert
20329 * sudo.h: added delc for clean_envp() and Envp
20331 1993-09-04 14:09 millert
20333 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20336 1993-09-04 14:09 millert
20338 * logging.c: now uses execve()
20340 1993-09-04 14:08 millert
20342 * find_path.c: ENOTDIR is ok now too (in case part of the path is
20345 1993-09-04 08:17 millert
20347 * qualify.c: now works correctly (ttaltotal rewrite)
20349 1993-09-04 07:59 millert
20351 * parse.lex: now includes sys/param.h didn't match trailing / --
20352 fix from rouilj@cs.umb.edu
20354 1993-06-11 18:04 millert
20356 * sudo.c: moved around the #ifndef _AIX
20358 1993-06-11 18:03 millert
20360 * check.c, logging.c, parse.c: Initial revision
20362 1993-03-20 07:57 millert
20364 * qualify.c: Initial revision
20366 1993-03-13 15:09 millert
20368 * find_path.c: now works if you do sudo bin/test
20370 1993-03-13 14:20 millert
20372 * find_path.c: works
20374 1993-03-02 18:28 millert
20376 * sudo.h: Initial revision
20378 1993-03-02 11:35 millert
20380 * visudo.c: Initial revision
20382 1993-03-02 11:32 millert
20384 * parse.lex, parse.yacc: Initial revision
20386 1993-02-16 13:24 millert
20388 * sudo.c: took out errno.h
20390 1993-02-16 13:22 millert
20392 * sudo.c: now spews error if exec fails and exits with -1
20394 1993-02-16 12:07 millert
20396 * sudo.c: Initial revision
20398 1993-02-15 22:27 millert
20400 * find_path.c: now only execs files with (an) executable bit set.
20402 1993-02-15 22:01 millert
20404 * find_path.c: Initial revision
20406 1993-02-15 14:32 millert
20408 * getpass.c: added nice comment
20410 1993-02-15 14:19 millert
20412 * getpass.c: now works on sgi's
20414 1993-02-15 13:57 millert
20416 * getpass.c: Initial revision