1 2009-06-30 08:41 millert
3 * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
4 quotes around a colon in Runas_Spec definition. From Elias
7 2009-06-29 09:36 millert
9 * redblack.c: In rbrepair, re-color the root or the first non-block
10 node we find to be black. Re-coloring the root is probably not
11 needed but won't hurt.
13 2009-06-29 09:35 millert
15 * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
17 2009-06-26 16:40 millert
19 * redblack.c: When repairing the tree, don't touch the root node.
21 2009-06-25 08:44 millert
23 * set_perms.c: Protect call to setegid in runas_setup with #ifdef
24 HAVE_SETEUID. Reported by Josef Schmid.
26 2009-06-23 14:29 millert
28 * sudoers.pod: Document that we accept env_pam-style environment
31 2009-06-23 14:24 millert
33 * env.c: Adapt to accept pam_env-style /etc/environment which
34 allows shell-style lines such as: export EDITOR="/usr/bin/vi"
36 2009-06-23 12:22 millert
38 * sudoers.pod: Make it clear that env_delete only works when
39 !env_reset. From Loïc Minier
41 2009-06-15 17:19 millert
43 * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
46 2009-06-15 17:18 millert
48 * Makefile.in: build the .cat page in the current working dir, not
51 2009-06-15 09:10 millert
53 * env.c: Return EINVAL in setenv() if var is NULL or the empty
54 string to match glibc behavior.
56 2009-06-13 16:52 millert
58 * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
61 2009-06-11 16:29 millert
63 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
64 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
67 2009-06-09 10:08 millert
69 * INSTALL: Document --with-libvas and --with-libvas-rpath
71 2009-05-29 09:43 millert
73 * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
74 and key paths may be a directory or a file. However, version 5.0
75 of the SDK only seems to support using a directory. If
76 ldapssl_clientauth_init fails and the cert or key paths look like
77 they could be files, strip off the last path element and try
80 2009-05-29 09:40 millert
82 * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
85 2009-05-26 20:49 millert
87 * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
88 non-Unix group support from Quest, as reworked by me.
90 2009-05-26 20:47 millert
94 2009-05-26 20:46 millert
96 * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
99 2009-05-25 08:02 millert
101 * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
102 fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
103 logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
104 pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
105 sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
106 testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
107 auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
110 2009-05-24 08:33 millert
112 * interfaces.c, lbuf.c: Minor fixes for Minix-3
114 2009-05-22 06:37 millert
116 * set_perms.c: Handle getgroups() returning 0. Also add missing
117 check for HAVE_GETGROUPS.
119 2009-05-19 17:24 millert
121 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
122 version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
123 via AC_INIT in configure.
125 2009-05-18 06:33 millert
127 * set_perms.c: Remove group setting code in setusercontext case, we
128 will do it ourselves later on in runas_setup. Set the gid after
129 initgroups/setgroups is called, since on Mac OS X it seems to
132 2009-05-17 18:19 millert
134 * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
135 vasgroups.c: Initial bits of non-unix group support using Quest
136 Authentication Services
138 2009-05-17 16:52 millert
140 * toke.c, toke.l: Accept %:foo as a non-Unix group
142 2009-05-17 16:22 millert
144 * toke.c, toke.l: Allow user/group to be double quoted in the case
145 of non-Unix groups which contain spaces.
147 2009-05-11 12:47 millert
149 * match.c: Don't allow the user to specify the default runas user
150 if their sudoers entry only allows them to run as a group.
152 2009-05-10 07:59 millert
154 * sudo.c: Must call audit_success before we change uids.
156 2009-05-10 07:52 millert
158 * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
159 set_perm to not exit on failure and use this in the logging
162 2009-05-10 07:33 millert
164 * parse.c: In -l mode, if the user is only allowed to run as a
165 group, display the user's name, not root's before the allowed
168 2009-05-09 21:00 millert
170 * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
171 effect of setting the runas user to root unilaterally.
173 2009-05-08 16:19 millert
175 * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
178 2009-05-08 13:07 millert
180 * pwutil.c: Only cache by the method we fetched for pwd and grp
181 lookups. Previously we cached both by namd and id but this can
182 cause problems for entries that share the same id. Also add more
183 info in the error message in case the insert fails (which should
186 2009-04-30 15:04 millert
188 * sudoers.pod: Add a clarification from Nick Sieger
190 2009-04-25 12:49 millert
192 * env.c: Inline the setting of the environment string.
194 2009-04-24 14:53 millert
196 * env.c: setenv(3) in Linux treats a NUL value as the empty string
197 setenv(3) in BSD doesn't return an error if the name has '=' in
198 it, it just treats the '=' as end of string.
200 2009-04-22 16:32 millert
202 * toke.c, toke.l: Not all systems have d_namlen
204 2009-04-20 13:53 millert
206 * sudoers.pod: Fix up some pod2html issues.
208 2009-04-19 14:09 millert
210 * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
211 from a diff from Quest Software.
213 2009-04-19 09:01 millert
215 * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
218 2009-04-19 08:56 millert
220 * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
223 2009-04-18 19:37 millert
225 * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
226 #includedir, ignore any file containing a dot
228 2009-04-18 19:25 millert
230 * Makefile.in, version.h: Bump version
232 2009-04-18 19:25 millert
234 * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
235 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
236 visudo.c: Implement #includedir directive. Files in an
237 includedir are not edited by visudo unless they contain a syntax
240 2009-04-18 12:06 millert
244 2009-04-18 10:27 millert
246 * WHATSNEW: Forgot umask_override
248 2009-04-18 09:25 millert
250 * ChangeLog, TODO: sync
252 2009-04-16 08:22 millert
254 * visudo.c: Rewind stream if we fdopen sudoers since it may not be
255 at the beginning. Set the keepopen flag on already-open files
256 too so the lexer doesn't close them out from under us.
258 2009-04-16 08:18 millert
260 * visudo.c: Print the proper file name when there is a parse error
263 2009-04-11 07:45 millert
267 2009-04-10 16:59 millert
269 * configure, configure.in: Fix a warning when --without-ldap is
272 2009-04-05 12:25 millert
274 * alias.c, parse.h, visudo.c: Store aliases that we remove during
275 check_aliases in a freelist and free them at the end so we don't
278 2009-03-28 09:30 millert
280 * visudo.c: Check aliases in -c mode too.
282 2009-03-28 09:09 millert
284 * alias.c, parse.h, visudo.c: Make alias_remove return the alias
285 struct instead of freeing it directly. Fixes a use after free in
286 alias_remove_recursive, the only consumer.
288 2009-03-28 09:07 millert
290 * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
291 -> alias_find for consistency.
293 2009-03-27 19:29 millert
295 * visudo.c: When checking for unused aliases, recurse if the alias
296 points to another alias.
298 2009-03-16 12:11 millert
300 * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
301 support will be done later after some refactoring.
303 2009-03-14 12:02 millert
305 * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
307 2009-03-13 21:04 millert
309 * configure, configure.in: Only check for
310 ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
311 compilation with ldapux.
313 2009-03-11 20:03 millert
315 * fileops.c: fix char subscript
317 2009-03-11 19:19 millert
319 * Makefile.in: remove errant carriage returns
321 2009-03-11 19:01 millert
323 * audit.c, env.c: fix K&R compilation
325 2009-03-11 12:12 millert
327 * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
328 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
331 2009-03-10 17:34 millert
333 * config.h.in: Add missing HAVE_BSM_AUDIT
335 2009-03-10 17:21 millert
337 * WHATSNEW: Add 1.7.1 features
339 2009-03-10 17:10 millert
341 * INSTALL: Mention --with-netsvc
343 2009-03-10 17:08 millert
345 * sudoers.ldap.pod: Document netsvc.conf support
347 2009-03-10 16:44 millert
349 * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
350 sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
352 2009-03-08 16:57 millert
354 * configure, config.h.in, configure.in, env.c: Add
355 --enable-env-debug flag to enable environment sanity checks.
357 2009-03-08 11:51 millert
359 * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
361 2009-03-07 17:10 millert
363 * env.c: Only sync environ for putenv, setenv, and unsetenv. We
364 need to make sure that sudo_putenv and sudo_setenv only modify
365 env.envp, not environ.
367 2009-03-02 14:19 millert
369 * env.c: Really fix UNSETENV_VOID
371 2009-03-02 14:18 millert
373 * env.c: Fix unsetenv when UNSETENV_VOID
375 2009-03-02 08:00 millert
377 * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
379 2009-03-02 07:36 millert
381 * ldap.c: tivoli-based ldap does not have ldapssl_err2string
383 2009-03-02 07:30 millert
387 2009-03-01 16:20 millert
389 * config.h.in, configure, configure.in, ldap.c: Add support for
390 Tivoli-based LDAP start TLS as seen in AIX. Untested.
392 2009-03-01 08:52 millert
394 * env.c: Add sanity checks for setenv/unsetenv
396 2009-02-28 20:17 millert
398 * Makefile.in: Include bsm_audit.h in the tarball
400 2009-02-28 20:00 millert
402 * Makefile.in, version.h: bump version for sudo 1.7.1
404 2009-02-28 19:58 millert
406 * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
407 sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
408 calls to setenv/unsetenv and provide our own
409 setenv/unsetenv/putenv that operates on own env pointer. Make
410 sync_env() inline in setenv/unsetenv/putenv functions.
412 2009-02-25 07:33 millert
414 * sudo.c: Make "sudoedit -h" work as expected
416 2009-02-25 07:21 millert
418 * auth/pam.c: Make sure def_prompt is always defined. This is a
419 workaround for pam configs that prompt for a password in the
420 session but don't have an auth line. A better fix is to expand
421 the sudo prompt earlier and set def_prompt to that when
424 2009-02-25 06:17 millert
426 * sudo.pod: Mention that the helper for -A may be graphical.
428 2009-02-25 06:16 millert
430 * TROUBLESHOOTING: Document what happens if there is no tty.
432 2009-02-25 06:05 millert
434 * sudo.c: cosmetic changes
436 2009-02-25 05:47 millert
438 * term.c: Fix term_restore
440 2009-02-24 20:23 millert
442 * sudo.c: Fix "sudo -k" with no other args
444 2009-02-24 08:04 millert
446 * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
447 be specified in conjunction with a command or another option that
448 may require authentication.
450 2009-02-23 09:18 millert
452 * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
453 from Diego E. 'Flameeyes'
455 2009-02-23 09:15 millert
457 * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
459 2009-02-21 17:03 millert
461 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
462 Implement umask_override
464 2009-02-21 16:51 millert
468 2009-02-21 16:49 millert
470 * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
473 2009-02-21 08:43 millert
475 * audit.c: Need to include compat.h
477 2009-02-21 08:37 millert
479 * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
480 sudo.c: Make audit_success and audit_failure generic functions in
481 preparation for integrating linux audit support.
483 2009-02-21 08:06 millert
485 * term.c: remove duplicate include
487 2009-02-20 16:13 millert
489 * bsm_audit.c: Add missing include
491 2009-02-20 15:55 millert
493 * sudo.c: May need to update the runas user after parsing
494 command-based defaults.
496 2009-02-18 10:53 millert
498 * glob.c: Add missing pair of braces introduced with character
501 2009-02-15 15:53 millert
503 * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
504 Rename pwstars to pwfeedback
506 2009-02-10 20:25 millert
508 * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
510 2009-02-10 20:18 millert
512 * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
513 sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
516 2009-02-10 19:58 millert
518 * term.c: This is new code, no DARPA notice.
520 2009-02-10 14:04 millert
522 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
523 simple_glob -> fast_glob
525 2009-02-10 09:39 millert
527 * match.c: g/c unused var
529 2009-02-10 08:09 millert
531 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
532 simple_glob option to use fnmatch() instead of glob(). This is
533 useful when you need to specify patterns that reference network
536 2009-02-10 07:58 millert
538 * tgetpass.c: add term_* proto
540 2009-02-10 07:51 millert
542 * sudoers.pod: mention glob()
544 2009-02-09 07:59 millert
546 * tgetpass.c: Delete any pwstars we wrote after the user hits
547 return. That way there is no record on screen as to the user's
550 2009-02-08 10:27 millert
552 * term.c: Move terminal setting bits from tgetpass.c to term.c
554 2009-02-07 19:50 millert
556 * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
557 tgetpass.c: Add pwstars sudoers option that causes sudo to print
558 a star every time the user presses a key.
560 2009-02-03 10:10 millert
562 * Makefile.in: Fix up F<> brokenness for visudo.man.in and
565 2009-01-27 11:54 millert
567 * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
568 not -1, to indicate no limit. From Mark Janssen.
570 2009-01-17 17:36 millert
572 * toke.c, toke.l: Comments that begin with #- should not be parsed
575 2009-01-08 19:13 millert
577 * sudo.c: Do not try to set the close on exec flag if we didn't
578 actually open sudoers.
580 2008-12-19 12:40 millert
584 2008-12-14 17:40 millert
588 2008-12-09 18:48 millert
590 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
591 enters ^C at the password prompt.
593 2008-12-09 16:13 millert
595 * configure.in, configure: Don't try to build sudo_noexec.so on
596 HP-UX with the bundled compiler as it cannot generate shared
599 2008-12-09 15:55 millert
601 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
604 2008-12-09 08:49 millert
606 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
607 it clear that we are not short-circuiting on last match. When
608 pwcheck is 'all', initialize nopass to TRUE and override it with
609 the first non-TRUE entry.
611 2008-12-08 10:02 millert
613 * parse.c: Do not short circuit pseudo commands when we get a match
614 since, depending on the settings, we may need to examine all
617 2008-12-03 15:58 millert
619 * sudoers.cat, sudoers.man.in: regen
621 2008-12-03 15:57 millert
623 * sudoers.pod: hostnames may also contain wildcards
625 2008-12-03 15:40 millert
627 * Makefile.in: remove stamp-* files and linux core files in clean
630 2008-12-02 12:30 millert
632 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
633 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
635 2008-11-26 15:10 millert
637 * configure, configure.in: correctly enable SIA on Digital UNIX
639 2008-11-25 20:06 millert
643 2008-11-25 20:05 millert
647 2008-11-25 12:01 millert
649 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
650 ttys we may still have /dev/tty available to us.
652 2008-11-24 10:09 millert
654 * sudoers.cat, sudoers.man.in: regen
656 2008-11-24 10:08 millert
658 * sudoers.pod: fix typos; Markus Lude
660 2008-11-24 07:08 millert
664 2008-11-23 19:42 millert
668 2008-11-23 19:41 millert
670 * toke.l: Fix matching of a line that only consists of a comment
673 2008-11-22 13:17 millert
675 * auth/pam.c: MacOS pam will retry conversation function if it
676 fails so just treat ^C as an empty password.
678 2008-11-22 10:12 millert
680 * visudo.c: When checking for alias use, also check defaults
683 2008-11-22 10:01 millert
685 * redblack.c: unused var
687 2008-11-22 09:42 millert
689 * redblack.c: Replace my rbdelete with Emin's version (which
692 2008-11-19 12:01 millert
694 * testsudoers.c: malloc debugging
696 2008-11-19 07:37 millert
698 * visudo.c: malloc options in devel mode for visudo too
700 2008-11-18 10:57 millert
702 * sudo.c: fix compilation on non-C99; from Theo
704 2008-11-18 10:50 millert
706 * visudo.c: fix check_aliases
708 2008-11-18 08:29 millert
710 * alias.c: when destroying an alias, free the correct data pointer
712 2008-11-18 07:54 millert
714 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
716 2008-11-15 13:34 millert
718 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
721 2008-11-15 13:34 millert
723 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
724 'option' for command line options (not flag)
726 2008-11-14 06:18 millert
728 * INSTALL: Add note on configuring HP-UX pam
730 2008-11-11 13:28 millert
732 * check.c, sudo.c: Move tty checks into check_user() so we only do
733 them if we actually need a password.
735 2008-11-11 12:34 millert
737 * sudo.c: Don't error out if no tty or askpass unless we actually
738 need to authenticate.
740 2008-11-10 15:20 millert
744 2008-11-10 08:07 millert
746 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
749 2008-11-09 15:18 millert
751 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
753 2008-11-09 09:15 millert
755 * gram.c, toke.c: regen
757 2008-11-09 09:13 millert
759 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
760 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
761 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
762 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
763 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
764 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
765 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
766 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
767 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
768 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
769 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
772 2008-11-09 08:48 millert
774 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
776 2008-11-08 10:40 millert
778 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
779 far past the end, resulting in a NUL being written immediately
780 after the buffer end.
782 2008-11-08 10:31 millert
784 * UPGRADE, WHATSNEW: add sections on tgetpass changes
786 2008-11-08 10:30 millert
788 * tgetpass.c: Treat EOF w/o newline as an error.
790 2008-11-07 17:42 millert
792 * parse.c: Fix "sudo -v" when NOPASSWD is set.
794 2008-11-07 12:45 millert
796 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
797 longer treat an empty password at the prompt as special. To quit
798 out of sudo you now need to hit ^C at the password prompt.
800 2008-11-06 21:07 millert
802 * sudoers.cat, sudoers.man.in: regen
804 2008-11-06 21:06 millert
806 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
807 will now refuse to run if no tty is present unless the new
808 visiblepw sudoers flag is set.
810 2008-11-05 19:42 millert
812 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
813 RLIM_SAVED_MAX not defined
815 2008-11-05 19:40 millert
817 * aix.c: fix fallback value for RLIM_SAVED_MAX
819 2008-11-05 19:14 millert
821 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
824 2008-11-05 19:08 millert
826 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
827 authenticate() as it may not be correct for the user we are
828 running the command as.
830 2008-11-05 19:05 millert
832 * isblank.c: Add isblank() function for systems without it. Needed
833 for POSIX character class matching in fnmatch.c and glob.c.
835 2008-11-05 11:02 millert
837 * TROUBLESHOOTING: expound on sudo and cd
839 2008-11-04 15:52 millert
843 2008-11-04 15:46 millert
845 * sudoers.cat, sudoers.man.in: regen
847 2008-11-04 15:45 millert
849 * sudoers.pod: mention defauts parse order
851 2008-11-03 13:19 millert
853 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
854 function for systems without it. Needed for POSIX character
855 class matching in fnmatch.c and glob.c.
857 2008-11-03 12:54 millert
859 * Makefile.in: add emul/charclass.h to HDRS
861 2008-11-02 14:08 millert
865 2008-11-02 14:06 millert
867 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
868 update_defaults into defaults.c and call it properly from visudo
871 2008-11-02 09:51 millert
873 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
874 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
877 2008-11-02 09:45 millert
879 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
880 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
881 has non-standard entries.
883 2008-11-02 09:35 millert
887 2008-11-02 09:28 millert
889 * match.c: Short circuit glob() checks if basename(pattern) !=
890 basename(command). Refactor code that checks for a command in a
891 directory and use it in the glob case if the resolved pattern
894 2008-11-01 09:20 millert
896 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
897 setting runas defaults until after runaspw/gr is setup.
899 2008-10-29 13:26 millert
901 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
902 allocating host/domain name since some systems do not include
903 space for the NUL in the size. Also manually NUL-terminate
904 buffer from gethostname() since POSIX is wishy-washy on this.
906 2008-10-26 17:13 millert
908 * sudo.c, sudoers.pod: When setting the umask, use the union of the
909 user's umask and the default value set in sudoers so that we
910 never lower the user's umask when running a command.
912 2008-10-26 16:43 millert
914 * sudo.c: Don't try to read from a zero-length sudoers file.
915 Remove the bogus Solaris work-around for EAGAIN. Since we now
916 use fgetc() it should not be a problem.
918 2008-10-25 09:22 millert
920 * parse.c: In update_defaults() check the return value of
921 user*_matches against ALLOW so we don't inadvertantly match on
924 2008-10-24 09:52 millert
926 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
927 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
928 regen man pages; no more hyphenation
930 2008-10-24 09:49 millert
932 * sudo.c: Don't error out on a zero-length sudoers file. With the
933 advent of #include the user could create a situation where sudo
936 2008-10-23 12:06 millert
938 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
939 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
940 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
941 Add configure tests to handle all the cases.
943 2008-10-08 17:28 millert
945 * sudo.pod: resort ENVIRONMENT
947 2008-10-08 17:09 millert
949 * sudoers.pod: document sudoers_locale
951 2008-10-08 16:56 millert
953 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
954 uses in preference to VISUAL or EDITOR
956 2008-10-08 14:27 millert
958 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
959 sudo-specific characters. Allows character classes to be used in
962 2008-10-03 16:02 millert
964 * lbuf.c: fix typo in non-C89 function declaration
966 2008-10-03 15:56 millert
968 * sudoers.pod: Mention POSIX characters classes now that out
969 fnmatch() and glob() support them.
971 2008-10-03 15:55 millert
973 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
974 UTF8) with [A-Za-z] which is locale agnostic.
976 2008-10-03 10:02 millert
978 * parse.h: use __signed char if we are going to assign a negative
979 value since on Power, char is unsigned by default
981 2008-10-03 09:59 millert
983 * configure, configure.in, config.h.in: Add tests for __signed char
986 2008-10-03 09:19 millert
988 * aix.c: Fix AIX limit setting. getuserattr() returns values in
989 disk blocks rather than bytes. The default hard stack size in
990 newer AIX is RLIM_SAVED_MAX. From Dale King.
992 2008-09-26 17:13 millert
994 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
995 to included glob(3) and fnmatch(3).
997 2008-09-16 08:28 millert
999 * emul/fnmatch.h: Remove UCB advertising clause and some
1000 compatibility defines.
1002 2008-09-14 16:07 millert
1004 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1005 re-invoking itself or sudo. This allows one to set EDITOR to
1006 sudoedit without getting into an infinite loop of sudoedit
1007 running itself until the path gets too big.
1009 2008-09-13 20:45 millert
1011 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1012 sudoers_locale Defaults option to override the default sudoers
1015 2008-09-13 14:09 millert
1017 * sudo.c: Set locale to system default except for during sudoers
1020 2008-09-12 09:34 millert
1022 * match.c: Redo change in 1.34 to use pointer arithmetic.
1024 2008-09-11 07:06 millert
1026 * match.c: Fix a dereference (read) of a freed pointer. Reported
1027 by Patrick Williams.
1029 2008-08-23 19:09 millert
1031 * sudo.c: Set locale to "C" to avoid interpretation issues with
1032 character ranges in sudoers. May want to make the locale a
1033 sudoers option in the future.
1035 2008-08-20 07:45 millert
1037 * config.h.in: we no longer use setproctitle
1039 2008-08-20 07:41 millert
1041 * sudo.h: remove #if 1
1043 2008-08-20 07:40 millert
1045 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1048 2008-07-12 08:53 millert
1050 * gram.c: regen with yacc skeleton bug fixed
1052 2008-07-12 08:48 millert
1054 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1056 2008-07-02 06:27 millert
1058 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1059 passwd entry used for running commands as a uid not listed in the
1060 passwd database. Fixes an issue with some PAM modules.
1062 2008-07-01 07:57 millert
1064 * sudo.c: Error out in -i mode if the user has no shell. This can
1065 happen when running commands as a uid with no password entry.
1067 2008-06-26 07:49 millert
1069 * toke.c, toke.l: Better fix for line continuation inside double
1070 quotes. Now accepts whitespace between the backslash and the
1071 newline like the main lexer.
1073 2008-06-25 14:31 millert
1075 * toke.c, toke.l: Fix line continuation in strings. It was only
1076 being honored if preceded by whitespace.
1078 2008-06-22 16:19 millert
1080 * config.h.in, configure, configure.in, logging.c: Replace the
1081 double fork with a fork + daemonize.
1083 2008-06-21 14:59 millert
1085 * env.c, sudo.c: The -i flag should imply env_reset. This got
1086 broken in sudo 1.6.9.
1088 2008-06-20 20:34 millert
1090 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1091 is waited for. Instead of having a SIGCHLD handler, use the
1092 double fork trick to orphan the child that opens the pipe to
1093 sendmail. Fixes a problem running su on some Linux distros.
1095 2008-06-20 17:16 millert
1097 * configure, configure.in: Fix configure test for dirfd() on Linux
1098 where DIR is opaque.
1100 2008-06-17 17:42 millert
1102 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1103 QNX still has this problem we'll need to revisit this again.
1105 2008-06-10 21:13 millert
1107 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1108 the mailer. If we only block the signal it may be delivered
1109 later when we unblock. Also, there is no need to block SIGCHLD
1110 since we no longer do the double fork. The normal SIGCHLD
1111 handler is sufficient.
1113 2008-06-08 17:37 millert
1115 * configure, configure.in: Add description for NO_PAM_SESSION, from
1118 2008-06-06 09:36 millert
1120 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1122 2008-05-18 13:54 millert
1124 * configure, configure.in: Redo the test for dgettext() in a way
1125 that hopefully will work around the libintl_dgettext() undefined
1128 2008-05-11 09:21 millert
1130 * schema.ActiveDirectory: change filename in comment
1132 2008-05-10 09:18 millert
1134 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1135 sudoers.ldap.pod: Reference schema.ActiveDirectory
1137 2008-05-09 14:49 millert
1139 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1141 2008-05-09 14:48 millert
1143 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1145 2008-05-09 14:01 millert
1147 * schema.ActiveDirectory: Active Directory schema by Chantal
1148 Paradis and Eric Paquet
1150 2008-05-08 17:54 millert
1152 * parse.c: remove an XXX that was fixed
1154 2008-05-08 12:53 millert
1158 2008-05-08 12:49 millert
1160 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1161 mode. This fixes a problem where the tag value printed was
1162 influenced by defaults set in the first pass through the parser.
1164 2008-05-03 21:29 millert
1166 * Makefile.in, sudo.psf: No point in packaging the TODO file
1168 2008-05-03 21:24 millert
1172 2008-05-02 20:53 millert
1174 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1175 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1176 Defaults option that is similar to /etc/environment on some
1179 2008-05-02 16:38 millert
1181 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1182 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1183 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1186 2008-05-02 16:37 millert
1188 * UPGRADE: initial valgrind pass done
1190 2008-04-23 08:30 millert
1192 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1195 2008-04-11 10:03 millert
1197 * ldap.c: define LDAPS_PORT if the system headers do not
1199 2008-04-10 14:54 millert
1201 * gram.c, gram.y: Fix another memory leak in init_parser().
1203 2008-04-10 12:51 millert
1205 * configure, configure.in: There was a missing space before the
1206 ldap libs in SUDO_LIBS for some configurations.
1208 2008-04-10 11:28 millert
1210 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1211 leaks pointed out by valgrind.
1213 2008-04-07 14:39 millert
1215 * sudo.c: fix "sudo -s" broken by mode/flags breakout
1217 2008-04-07 14:26 millert
1219 * configure, configure.in: remove duplicate check for dgettext
1221 2008-04-05 15:54 millert
1223 * aix.c: Fall back to default stanza if no user-specific limit is
1226 2008-04-02 15:56 millert
1228 * snprintf.c: include stdint.h if present
1230 2008-04-02 15:28 millert
1232 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1234 2008-04-01 19:18 millert
1236 * sudoers.ldap.pod: fix cut and pasto
1238 2008-03-31 11:24 millert
1240 * pwutil.c: Add #ifdef PURITY
1242 2008-03-30 17:36 millert
1244 * auth/bsdauth.c: remove useless cast
1246 2008-03-27 19:07 millert
1250 2008-03-27 19:04 millert
1254 2008-03-27 19:01 millert
1256 * sudo.h: Split MODE_* defines into primary and flags.
1258 2008-03-26 13:11 millert
1260 * aix.c: It turns out the logic for getting AIX limits is more
1261 convoluted than I realized and differs depending on whether the
1262 soft and/or hard limits are defined.
1264 2008-03-23 10:18 millert
1266 * Makefile.in, configure, configure.in: Back out AIX-specific
1267 change to set the sudo_noexec path to the .a file, we do really
1268 want to use the .so file. Since libtool doesn't do that
1269 correctly, just install the .so file ourselves in the Makefile.
1271 2008-03-23 10:12 millert
1273 * install-sh: If the file given to install is a path, only use the
1274 basename of the file when building the destination path.
1276 2008-03-18 16:08 millert
1278 * sudo.c: parse_args() cleanup: Sort command line options in the
1279 getopt() switch The -U option requires a parameter Normalize a
1280 few ISSET calls Split mode into mode and flags and retire the
1281 now-obsolete excl variable
1283 2008-03-18 16:04 millert
1285 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1286 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1288 2008-03-18 15:59 millert
1290 * sudo.c: Move version printing, etc. into a separate function.
1292 2008-03-18 15:57 millert
1294 * sudo.c: Don't try to cleanup nsswitch if it has not been
1297 2008-03-17 11:09 millert
1299 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1300 a problem executing the mailer.
1302 2008-03-14 08:11 millert
1304 * configure.in, configure: AIX shared libs end in .a, not .so.
1306 2008-03-13 07:34 millert
1308 * env.c: Preserve HOME by default too. Matches documentation and
1311 2008-03-12 19:42 millert
1313 * sudo.c: Use getopt() to parse the command line. We need to be
1314 able to intersperse env variables and options yet still honor
1315 "--"" which complicates things slightly.
1317 2008-03-06 14:46 millert
1321 2008-03-06 14:43 millert
1323 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1325 2008-03-06 14:32 millert
1327 * config.guess, config.sub: update from libtool-1.5.26 distribution
1329 2008-03-06 13:18 millert
1331 * aix.c, sudo.h: attempt to fix compilation errors on AIX
1333 2008-03-06 13:08 millert
1335 * Makefile.in: fix typo in last commit
1337 2008-03-06 13:07 millert
1339 * Makefile.in: Add WHATSNEW file to the distribution
1341 2008-03-06 12:43 millert
1343 * visudo.c: use warningx instead of fprintf(stderr, ...)
1345 2008-03-06 12:31 millert
1347 * list.c: add DEBUG to list2tq
1349 2008-03-06 12:28 millert
1351 * ChangeLog, TODO: sync
1353 2008-03-06 12:21 millert
1355 * WHATSNEW: mention mailfrom
1357 2008-03-06 12:19 millert
1359 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1360 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1361 using a combination of getuserattr() and setrlimit(). Currently
1364 2008-03-05 16:52 millert
1366 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1367 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1368 sets the value of the From: field in the warning/error mail. If
1369 unset the login name of the invoking user is used.
1371 2008-03-05 16:18 millert
1373 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1376 2008-03-05 15:19 millert
1378 * gram.c, gram.y: When adding a default, only call list2tq() once
1379 to do the list to tq conversion. It is not legal to call list2tq
1380 multiple times on the same list since list2tq consumes and
1381 modifies the list argument.
1383 2008-03-05 09:38 millert
1385 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1388 2008-03-05 09:36 millert
1390 * WHATSNEW: mention askpass
1392 2008-03-04 17:20 millert
1394 * sudo.c: Error out if both -A and -S are specified Error out if -A
1395 is specified but no askpass is configured
1397 2008-03-04 17:16 millert
1399 * configure, configure.in: we are not going to ship a sudo-specific
1402 2008-03-03 14:30 millert
1404 * sudo.h: fix definition of TGP_ASKPASS
1406 2008-03-03 13:54 millert
1408 * def_data.c, def_data.in: make askpass boolean-capable
1410 2008-03-03 13:53 millert
1412 * INSTALL: document --with-askpass
1414 2008-03-02 19:27 millert
1416 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1417 sudoers.ldap.cat, visudo.cat: regen
1419 2008-03-02 17:31 millert
1421 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1423 2008-03-02 09:31 millert
1425 * check.c, configure, configure.in, def_data.c, def_data.h,
1426 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1427 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1428 running a helper program to read the password when no tty is
1429 present (or when specified with the -A flag). TODO: docs.
1431 2008-03-02 08:38 millert
1433 * def_data.c, def_data.in: add missing printf format to SELinux
1434 role and type strings
1436 2008-02-27 09:26 millert
1438 * INSTALL, configure, configure.in: Disable use of
1439 gss_krb5_ccache_name() by default and add
1440 --enable-gss-krb5-ccache-name configure option to enable it. It
1441 seems that gss_krb5_ccache_name() doesn't work properly with some
1442 combinations of Heimdal and OpenLDAP.
1444 2008-02-22 15:33 millert
1446 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1447 add a call to setkeycreatecon() (though this is probably
1448 insufficient). From Dan Walsh.
1450 2008-02-22 15:19 millert
1452 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1453 conversation function may be called for non-password reading
1454 purposes so we must be careful not to use def_prompt in cases
1455 where it may not be set.
1457 2008-02-20 12:00 millert
1459 * selinux.c: Don't free the new tty context, we need to keep it
1460 around when we restore the tty context after the command
1463 2008-02-19 16:04 millert
1465 * selinux.c: s/newrole/sudo/
1467 2008-02-19 13:21 millert
1469 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1470 if we have login.conf support
1472 2008-02-18 11:05 millert
1474 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1475 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1478 2008-02-18 10:53 millert
1480 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1481 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1482 lines partaining to login.conf, BSD auth and SELinux and only
1483 enable them if pertinent.
1485 2008-02-18 10:42 millert
1487 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1488 Remove the =cut on the first line (above the copyright notice) to
1489 quiet pod2man. Also remove the hackery in the FILES section and
1490 just deal with the fact that there will a newline between each
1493 2008-02-17 08:19 millert
1495 * Makefile.in: run sudo.man.pl when generating sudo.man.in
1497 2008-02-17 08:11 millert
1499 * configure, configure.in, sudo.man.pl: comment out SELinux manual
1500 bits unless --with-selinux was specified
1502 2008-02-17 08:04 millert
1504 * sudoers.pod: document role and type defaults for SELinux
1506 2008-02-16 20:26 millert
1508 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1509 Document "sudo -ll" and make "sudo -l -l" be equivalent.
1511 2008-02-15 15:23 millert
1513 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1514 Fixes compilation problems on Debian GNU/kFreeBSD.
1516 2008-02-13 17:17 millert
1518 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1519 rewrite of verify_krb_v5_tgt()
1521 2008-02-13 07:28 millert
1523 * logging.c, logging.h, sudo.c: Remove dependence on
1524 VALIDATE_NOT_OK in logging functions. Split log_auth() into
1525 log_allowed() and log_denial() Replace mail_auth() with
1526 should_mail() and a call to send_mail()
1528 2008-02-10 18:06 millert
1530 * ldap.c: Add debugging so we can tell if the krb5 ccache is
1533 2008-02-10 17:34 millert
1535 * INSTALL: mention --with-selinux
1537 2008-02-09 09:48 millert
1541 2008-02-09 09:43 millert
1543 * selinux.c: add Sudo tag
1545 2008-02-09 09:30 millert
1547 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1548 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1549 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1550 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1551 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1552 toke.l: Add support for SELinux RBAC. Sudoers entries may
1553 specify a role and type. There are also role and type defaults
1554 that may be used. To make sure a transition occurs, when using
1555 RBAC commands are executed via the new sesh binary. Based on
1556 initial changes from Dan Walsh.
1558 2008-02-08 08:18 millert
1560 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1561 list (sudo -ll) support for printing verbose LDAP and sudoers
1562 file entries. Still need to update manual.
1564 2008-02-03 10:43 millert
1566 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1567 output for file and ldap based sudoers and use lbufs for both.
1568 The ldap output does not currently include options that cannot be
1569 represented as tags. This will be remedied in a long list output
1572 2008-01-27 16:37 millert
1574 * set_perms.c: Use a specific error message for errno == EAGAIN
1575 when setuid() et al fails. On Linux systems setuid() will fail
1576 with errno set to EAGAIN if changing to the new uid would result
1577 in a resource limit violation.
1579 2008-01-27 16:34 millert
1581 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1582 family of syscalls causes the nroc resource limit to be checked.
1583 The limits will be reset by pam_limits.so when PAM is used. In
1584 the non-PAM case the nproc limit will remain unlimited but there
1585 doesn't seem to be a way around that other than having sudo parse
1586 /etc/security/limits.conf directly.
1588 2008-01-27 16:31 millert
1590 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1593 2008-01-23 06:33 millert
1595 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1596 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1597 from going into config.h. Avoid single quotes in variable
1598 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1599 of bash they will end up literally in the resulting define.
1601 2008-01-21 13:22 millert
1603 * README.LDAP: mention --with-nsswitch=no
1605 2008-01-21 11:43 millert
1607 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1610 2008-01-21 11:07 millert
1612 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1613 if we can find it. Needed for the ldapssl_set_strength defines
1616 2008-01-21 10:02 millert
1618 * TODO, sudoers.ldap.pod: sync
1620 2008-01-21 10:01 millert
1622 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1623 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1626 2008-01-21 10:00 millert
1628 * Makefile.in: Use 78n line length when formatting cat pages.
1630 2008-01-21 09:50 millert
1632 * README.LDAP: Remove redundant info that is now in
1635 2008-01-20 16:18 millert
1637 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1638 Reorganize the first section a bit. Substitute the proper path
1641 2008-01-20 10:17 millert
1643 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1644 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1645 Move schema into EXAMPLES
1647 2008-01-20 10:15 millert
1649 * configure.in, configure: Substitute values for ldap.conf,
1650 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1652 2008-01-19 20:35 millert
1654 * configure, configure.in: substitute for sudoers.ldap.man
1656 2008-01-19 20:34 millert
1658 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1661 2008-01-19 20:25 millert
1663 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1664 some of the missing pieces. Still needs some reorganization and
1667 2008-01-19 15:06 millert
1669 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1670 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1671 Currently, much of the information is adapted from README.LDAP.
1673 2008-01-18 17:32 millert
1675 * pwutil.c: When copying gr_mem we must guarantee that the storage
1676 space for gr_mem is properly aligned. The simplest way to do
1677 this is to simply store gr_mem directly after struct group. This
1678 is not a problem for gr_passwd or gr_name as they are simple
1681 2008-01-18 16:47 millert
1683 * ldap.c: Fix a typo/thinko in one of the calls to
1684 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1686 2008-01-17 15:44 millert
1688 * config.h.in, configure, configure.in, ldap.c: include
1689 <mps/ldap_ssl.h> in ldap.c if available
1691 2008-01-16 18:20 millert
1693 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1696 2008-01-16 13:03 millert
1698 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1699 echo) to guarantee that any pending output is discarded
1701 2008-01-15 17:18 millert
1703 * sudoers: no longer need to specify SETENV when user has sudo ALL
1705 2008-01-15 09:40 millert
1707 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1708 group option, renaming old -g to -G Add set_runasgr() and
1709 set_runaspw() and use them
1711 2008-01-15 09:23 millert
1713 * sudo.h, sudo.c: Make set_runaspw static void
1715 2008-01-15 09:17 millert
1717 * testsudoers.c, visudo.c: g/c set_runaspw stub
1719 2008-01-15 07:28 millert
1721 * configure, configure.in: Don't add -llber twice.
1723 2008-01-14 06:40 millert
1727 2008-01-13 15:39 millert
1731 2008-01-13 14:57 millert
1733 * configure, configure.in: Fix check that determines whether -llber
1736 2008-01-13 14:22 millert
1738 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1739 netscape-based LDAP, use ldapssl_set_strength() to implement the
1740 checkpeer ldap.conf option.
1742 2008-01-13 09:49 millert
1744 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1745 to use the cred cache, which is what krb5_verify_user() does.
1746 Better cleanup on failure.
1748 2008-01-12 12:40 millert
1750 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1751 krb5_verify_user() does.
1753 2008-01-09 14:58 millert
1755 * gram.c: The U suffix on constants is an ANSI feature
1757 2008-01-09 12:08 millert
1759 * configure.in, configure: Add check for ber_set_option() in -llber
1761 2008-01-06 19:02 millert
1763 * README.LDAP: default if no nsswitch.conf is files only
1765 2008-01-06 17:28 millert
1767 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1769 2008-01-06 12:32 millert
1771 * README.LDAP: timelimit and bind_timelimit
1773 2008-01-06 08:54 millert
1777 2008-01-06 07:56 millert
1779 * ldap.c: Move ldap.secret reading into a separate function.
1781 2008-01-05 19:09 millert
1783 * check.c: user_runas -> runas_pw
1785 2008-01-05 18:59 millert
1789 2008-01-05 18:59 millert
1791 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1792 the password prompt. Based on a patch from Patrick Schoenfeld.
1794 2008-01-05 18:25 millert
1796 * ldap.c: Check strlcpy() return values.
1798 2008-01-05 18:12 millert
1800 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1802 2008-01-05 16:35 millert
1804 * README.LDAP: Make it clear that host and uri can take multiple
1805 parameters. URI is now supported for more than just openldap
1806 nsswitch.conf does't accept "compat"
1808 2008-01-05 16:27 millert
1810 * sudo.c: comment cleanup and update (c) year
1812 2008-01-05 16:25 millert
1814 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1815 parse.c to sudo_nss.c. This should make it possible to build an
1816 LDAP-only sudo binary.
1818 2008-01-05 13:27 millert
1820 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1821 multiple sudoers sources by passing in the previous return value
1822 to the next in the chain
1824 2008-01-05 13:26 millert
1826 * gram.y: Free up parser data structures in sudo_file_close().
1828 2008-01-05 08:13 millert
1830 * gram.c, parse.c: Free up parser data structures in
1833 2008-01-05 07:59 millert
1835 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1836 ldap_create() instead of deprecated ldap_init() Use
1837 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1839 2008-01-05 07:56 millert
1841 * config.h.in, configure, configure.in: Add check for
1842 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1844 2008-01-04 09:56 millert
1846 * configure.in, configure, config.h.in: add check for ldap_create
1848 2008-01-03 16:11 millert
1850 * config.h.in, configure, configure.in, ldap.c: Add
1851 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1852 dn using the mechanism appropriate for the LDAP SDK in use. Use
1853 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1854 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1857 2008-01-03 16:02 millert
1859 * lbuf.c: include unistd.h
1861 2008-01-03 11:05 millert
1863 * config.h.in, configure.in: fix typo in mtim_getnsec
1865 2008-01-02 15:29 millert
1867 * config.h.in, configure.in, configure: add check for st__tim in
1868 struct stat as used by SCO
1870 2008-01-02 11:05 millert
1872 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1874 2008-01-02 10:09 millert
1876 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1878 2008-01-01 19:04 millert
1880 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1881 ldap_str2dn() and ldap_rdn2str().
1883 2008-01-01 18:37 millert
1885 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1886 of the deprecated ldap_get_values()/ldap_value_free().
1888 2008-01-01 17:07 millert
1890 * TODO, ChangeLog: sync
1892 2008-01-01 17:06 millert
1894 * gettime.c, sudo.c: Remove some already fixed XXXs
1896 2008-01-01 17:03 millert
1898 * ldap.c: Same return value as non-existent sudoers if LDAP was
1901 2008-01-01 16:52 millert
1903 * sudo.pod: mention /etc/environment
1905 2008-01-01 16:42 millert
1907 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1910 2008-01-01 16:42 millert
1912 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1915 2008-01-01 16:25 millert
1917 * ldap.c: When building up a query don't list groups in the aux
1918 group vector that are the same as the passwd file group. On most
1919 systems the first gid in the group vector is the same as the
1922 2008-01-01 14:01 millert
1924 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1925 to disable user ldaprc and system defaults that could affect how
1928 2008-01-01 13:21 millert
1930 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1931 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1932 --with-nsswitch to allow users to specify nsswitch.conf path or
1933 disable it. If --with-nsswitch=no but --with-ldap, order is
1934 LDAP, then sudoers. Fix --with-ldap-conf-file and
1935 --with-ldap-secret-file
1937 2008-01-01 13:12 millert
1939 * parse.c: Honor def_ignore_local_sudoers
1941 2007-12-31 16:44 millert
1943 * ldap.c: no longer need to check def_ignore_local_sudoers here
1945 2007-12-31 16:36 millert
1947 * parse.c: Refactor group vector resetting into a function and also
1948 call it from display_cmnd. Stop after the first sucessful match
1949 in display_cmnd. Print a newline between each display_privs
1952 2007-12-31 16:23 millert
1954 * parse.c: fix double free introduced in rev 1.218
1956 2007-12-31 16:10 millert
1958 * ldap.c: belt and suspenders; zero out result after freeing it
1960 2007-12-31 15:04 millert
1962 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1963 reading into a separate function, sudo_parseln(), which removes
1964 comments, leading/trailing whitespace and newlines. May want to
1965 rethink the use of sudo_parseln() for /etc/ldap.secret
1967 2007-12-31 14:26 millert
1969 * parse.c, sudo.c: Make the inability to read the sudoers file a
1970 non-fatal error if there are other sudoers sources available.
1971 sudoers_file_lookup now returns "not OK" if sudoers was not
1974 2007-12-31 14:24 millert
1976 * ldap.c: make it clear that the global options are from LDAP
1978 2007-12-31 14:13 millert
1980 * logging.c: allocate proper amount of space for error string
1982 2007-12-31 10:24 millert
1984 * sudo_nss.c, sudo_nss.h: actual sudo nss code
1986 2007-12-31 10:08 millert
1988 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1991 2007-12-31 07:54 millert
1993 * defaults.c, parse.c, testsudoers.c, visudo.c: move
1994 update_defaults() to parse.c
1996 2007-12-31 07:39 millert
1998 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1999 Use nsswitch to hide some sudoers vs. ldap implementation details
2000 and reduce the number of #ifdef LDAP TODO: fix display routines
2003 2007-12-28 11:20 millert
2005 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2006 First cut at nsswitch.conf support. Further reorganizaton and
2007 related changes are forthcoming.
2009 2007-12-21 16:53 millert
2011 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2012 and /etc/environment file. Still needs to be documented and
2013 should probably only applies to OSes that have it (AIX and Linux,
2016 2007-12-21 16:20 millert
2018 * ldap.c: include limits.h
2020 2007-12-20 10:02 millert
2022 * WHATSNEW: reword LDAP SASL
2024 2007-12-19 16:40 millert
2028 2007-12-19 16:39 millert
2030 * README.LDAP: Add an example sudoRole, clarify netscape vs.
2033 2007-12-19 14:42 millert
2035 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2037 2007-12-19 14:28 millert
2039 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2040 for ldaps support instead of trying to do it manually with
2041 ldap_init() + ldapssl_install_routines(). Use tls_cert and
2042 tls_key for cert7.db and key3.db respectively. Don't print
2043 debugging info for options that are not set. Add warning if
2044 start_tls specified when not supported.
2046 2007-12-19 14:25 millert
2048 * ldap.c: fix compilation on solaris
2050 2007-12-19 14:23 millert
2052 * Makefile.in: add missing .h and .c files for missing lib objs
2054 2007-12-18 09:54 millert
2056 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2058 2007-12-17 20:10 millert
2060 * ldap.c: fix compilation on Solaris
2062 2007-12-17 10:14 millert
2064 * configure, configure.in: fix typo
2066 2007-12-17 08:08 millert
2068 * README.LDAP: try to clear up which variables are for OpenLDAP and
2069 which are for netscape-derived SDKs
2071 2007-12-17 07:31 millert
2073 * config.h.in, configure, configure.in, ldap.c: Add support for
2074 "ssl on" in both netscape and openldap flavors. Only the
2075 OpenLDAP flavor has been tested.
2077 2007-12-17 07:28 millert
2079 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2080 log_error() instead of calling sudo_ldap_close() directly.
2081 ldap_conn can now be static to sudo.c
2083 2007-12-16 20:02 millert
2085 * sudo.c: ld -> ldap_conn
2087 2007-12-16 14:42 millert
2089 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2091 2007-12-16 14:08 millert
2093 * ldap.c: Distinguish between LDAP conf settings that are
2094 connection-specific (which take an ld pointer) and those that are
2095 default settings (which do not).
2097 2007-12-14 16:46 millert
2099 * ldap.c: Improved warnings on error.
2101 2007-12-14 15:59 millert
2103 * ldap.c: Make ldap config table driven and set the config *after*
2104 we open the connection.
2106 2007-12-13 16:41 millert
2108 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2110 2007-12-13 09:13 millert
2112 * configure, configure.in: some operating systems need to link with
2113 -lkrb5support when using krb5
2115 2007-12-10 17:12 millert
2117 * WHATSNEW: minor update
2119 2007-12-10 10:56 millert
2121 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2123 2007-12-07 19:17 millert
2125 * TODO, ChangeLog: sync
2127 2007-12-07 19:09 millert
2129 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2132 2007-12-03 11:36 millert
2134 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2135 can now take an optional command.
2137 2007-12-02 12:13 millert
2139 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2140 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2141 that will cause the prompt to be overridden in all cases. This
2142 flag is also set when the user specifies the -p flag.
2144 2007-12-01 19:51 millert
2146 * sudo.c: Move setting of login class until after sudoers has been
2147 parsed. Set NewArgv[0] for -i after runas_pw has been set.
2149 2007-12-01 19:34 millert
2151 * configure, configure.in: Move the dgettext check.
2153 2007-12-01 11:22 millert
2155 * config.h.in, configure, configure.in, auth/pam.c: Add basic
2156 support for looking up the string "Password: " in the PAM
2157 localized text db. This allows us to determine whether the PAM
2158 prompt is the default "Password: " one even if it has been
2161 TODO: concatenate non-std PAM prompts and user-specified sudo
2164 2007-11-27 18:40 millert
2166 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2167 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2168 home-grown attempt that was insufficient.
2170 2007-11-27 12:13 millert
2172 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2175 2007-11-25 19:26 millert
2177 * set_perms.c: Don't assume runas_pw is set; it may not be in the
2180 2007-11-25 08:07 millert
2182 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2183 restore group vector for PERM_ROOT if we previously changed it.
2184 Stash the runas group vector so we don't have to call initgroups
2185 more than once. Also add no-op check to check_perms.
2187 2007-11-21 15:11 millert
2189 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2190 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2191 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2192 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2193 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2194 visudo.cat, visudo.man.in: Add support for runas groups. This
2195 allows the user to run a command with a different effective
2196 group. If the -g option is specified without -u the command will
2197 be run as the current user (only the group will change). the -g
2198 and -u options may be used together. TODO: implement runas group
2199 for ldap improve runas group documentation add
2202 2007-11-21 15:02 millert
2204 * configure, configure.in: fix setting of mandir
2206 2007-11-21 14:26 millert
2208 * sudo.pod, sudoers.pod: document that ALL implies SETENV
2210 2007-11-21 13:50 millert
2212 * ldap.c: s/setenv_ok/setenv_implied/g
2214 2007-11-21 13:44 millert
2216 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2218 2007-11-21 13:26 millert
2220 * ldap.c: use strcmp, not strcasecmp when comparing ALL
2222 2007-11-21 11:41 millert
2224 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2225 file-based sudoers this does affect all the commands in the
2228 2007-11-21 11:05 millert
2230 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2231 SETENV tag but, unlike an explicit tag, it is not passed on to
2232 other commands in the list.
2234 2007-11-21 11:02 millert
2236 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2237 Also use sudo_getpwuid() instead of getpwuid().
2239 2007-11-15 11:16 millert
2241 * sudoers: Expand on the dangers of not using visudo to edit
2244 2007-11-08 07:24 millert
2246 * parse.c: Don't quote *?[]! on output since the lexer does not
2247 strip off the backslash when reading those in.
2249 2007-11-07 13:16 millert
2251 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2252 compatibility issues.
2254 2007-11-04 08:33 millert
2256 * logging.c: Refactor log line generation in to new_logline().
2258 2007-10-25 09:23 millert
2260 * TROUBLESHOOTING: fix typo
2262 2007-10-24 12:41 millert
2264 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2265 match.c: Add configure check for struct in6_addr instead of
2266 relying on AF_INET6 since some systems define AF_INET6 but do not
2267 include IPv6 support.
2269 2007-10-21 09:29 millert
2271 * configure, configure.in: Fix block to add -lutil for FreeBSD and
2272 NetBSD when logincap is in use.
2274 2007-10-19 22:28 millert
2276 * configure, configure.in: POSIX states that struct timespec be
2277 declared in time.h so check there regardless of the value of
2280 2007-10-17 11:37 millert
2282 * tgetpass.c: Instead of defining a macro to call the appropriate
2283 method for turning on/off echo, just define tc[gs]etattr() and
2284 the related defines that use the correct terminal ioctls if
2285 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2288 2007-10-08 20:18 millert
2290 * Makefile.in: g/c @ALLOCA@
2292 2007-10-08 20:07 millert
2296 2007-10-08 20:04 millert
2298 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2299 --disable-pam-session configure option to disable calling
2300 pam_{open,close}_session. May work around bugs in some PAM
2303 2007-10-08 12:00 millert
2305 * tgetpass.c: quiet gcc warnings
2307 2007-10-08 08:41 millert
2309 * tgetpass.c: Avoid printing the prompt if we are already
2310 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2311 In this case, the call to tcsetattr() will cause SIGTTOU to be
2314 2007-09-15 16:07 millert
2316 * def_data.c, def_data.h, def_data.in: Reorder things such that the
2317 definition of env_reset come right before the env variable lists.
2319 2007-09-15 07:50 millert
2321 * parse.h: Shrink type and seqno in struct alias from int to
2324 2007-09-15 07:24 millert
2326 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2327 aliases for loop detection. If we find an alias with the seqno
2328 already set to the current (global) value we know we've visited
2329 it before so ignore it.
2331 2007-09-13 19:05 millert
2333 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2334 add user_ttypath which holds the full path to the tty or is NULL
2335 if no tty was present.
2337 2007-09-13 18:42 millert
2339 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2340 lower that results in a segv.
2342 2007-09-11 15:43 millert
2346 2007-09-11 15:42 millert
2348 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2349 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2351 2007-09-10 17:33 millert
2353 * alloc.c: remove some useless casts
2355 2007-09-10 17:32 millert
2357 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2358 inttypes.h predates the final C99 spec and the standard specifies
2359 that it shall include stdint.h anyway
2361 2007-09-06 12:39 millert
2363 * Makefile.in, alloca.c, configure.in: Since we ship with a
2364 pre-generated parser there is no need to ship a bogus alloca
2367 2007-09-06 12:22 millert
2371 2007-09-06 12:19 millert
2373 * configure.in: remove initial setting of CHECKSIA, we require that
2374 it be unset if not used
2376 2007-09-06 11:55 millert
2378 * Makefile.in: add list.c to SRCS
2380 2007-09-06 07:18 millert
2384 2007-09-06 07:17 millert
2386 * configure.in: only do SIA checks on Digital Unix
2388 2007-09-05 18:50 millert
2390 * sudoers.cat, sudoers.man.in: regen
2392 2007-09-05 18:48 millert
2394 * ChangeLog, TODO: sync
2396 2007-09-05 18:39 millert
2398 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2399 needed for modern kerb5.
2401 2007-09-05 18:16 millert
2405 2007-09-05 18:16 millert
2407 * configure.in, aclocal.m4: New method for setting the default
2408 authentication type and avoiding conflicts in auth types.
2410 2007-09-05 14:45 millert
2412 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2413 an associated runaslist so no need to keep track of the most
2414 recent non-NULL one.
2416 2007-09-04 18:51 millert
2418 * ldap.c: back out partial ldaps support mistakenly committed
2420 2007-09-04 10:57 millert
2422 * ldap.c: Add support for unix groups and netgroups in sudoRunas
2424 2007-09-03 16:28 millert
2426 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2429 2007-09-02 17:05 millert
2433 2007-09-02 17:05 millert
2435 * INSTALL: update --passprompt escape info
2437 2007-09-02 17:03 millert
2439 * configure.in: remove now-bogus comment and update copyright date
2441 2007-09-02 16:35 millert
2443 * configure.in: Fix up use of with_passwd
2445 2007-09-02 16:25 millert
2447 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2448 Update to autoconf-2.61 andf libtool-1.5.24
2450 2007-09-02 16:17 millert
2452 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2455 2007-09-01 17:39 millert
2459 2007-09-01 17:39 millert
2461 * gram.y: move tags and runaslist propagation to be earlier
2463 2007-09-01 09:34 millert
2465 * visudo.c: If -f flag given use the permissions of the original
2468 2007-09-01 08:45 millert
2470 * gram.y: prevent a double free() when re-initing the parser
2472 2007-08-31 19:30 millert
2476 2007-08-31 19:30 millert
2478 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2479 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2480 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2481 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2482 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2483 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2484 Remove support for compilers that don't support void *
2486 2007-08-31 19:14 millert
2490 2007-08-31 19:13 millert
2492 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2493 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2494 manipulation macros to list.h and create C versions of the more
2495 complex ones in list.c. The names have been down-cased so they
2496 appear more like normal functions.
2498 2007-08-31 17:21 millert
2500 * Makefile.in: Fix cmp command when regenerating parser. Make
2501 gram.o the first dependency for all programs so gram.h will be
2502 generated before anything that needs it.
2504 2007-08-31 13:56 millert
2506 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2509 2007-08-30 21:21 millert
2511 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2512 permission and short-circuit on the first non-UNSPEC hit we get
2513 for the command. This means that instead of cycling through the
2514 all the parsed sudoers entries we start at the end and work
2515 backwards and quit after the first positive or negative match.
2517 2007-08-30 21:13 millert
2521 2007-08-30 21:12 millert
2523 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2524 Change list head macros to take a pointer, not a struct.
2526 2007-08-30 20:46 millert
2530 2007-08-30 20:46 millert
2532 * gram.y: Propagate the runasspec from one command to the next in a
2535 2007-08-30 16:15 millert
2537 * match.c: Replace has_meta() with a macro that calls strpbrk().
2539 2007-08-30 16:04 millert
2543 2007-08-30 13:26 millert
2545 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2546 testsudoers.c, visudo.c: Use a list head struct when storing the
2547 semi-circular lists and convert to tail queues in the process.
2548 This will allow us to reverse foreach loops more easily and it
2549 makes it clearer which functions expect a list as opposed to a
2552 Add macros for manipulating lists. Some of these should become
2555 When freeing up a list, just pop off the last item in the queue
2556 instead of going from head to tail. This is simpler since we
2557 don't have to stash a pointer to the next member, we always just
2558 use the last one in the queue until the queue is empty.
2560 Rename match functions that take a list to have list in the name.
2561 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2563 2007-08-30 13:12 millert
2565 * parse.c: Fix pasto, append "!" not negated (which is an int) for
2568 2007-08-30 12:45 millert
2570 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2571 dependency is enough. Only move y.tab.h to gram.h if it is
2572 different; avoids needless rebuilding.
2574 2007-08-27 15:51 millert
2576 * sudoers.pod: Defaults lines may be associated with lists of
2577 users, hosts, commands and runas users, not just single entries.
2579 2007-08-26 17:42 millert
2581 * Makefile.in: Revert the "cmp" portion of the last diff, it
2584 2007-08-26 17:10 millert
2586 * Makefile.in: Remove *.lo for clean: When generating the parser,
2587 only move the generated files into place if they differ from the
2590 2007-08-24 22:47 millert
2592 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2593 (readable) one and add an extra check when it matches to make
2594 sure we have a valid address.
2596 2007-08-24 22:36 millert
2598 * match.c: Fix thinko introduced when merging IPV6 support.
2600 2007-08-24 14:23 millert
2602 * HISTORY, LICENSE: regen
2604 2007-08-24 14:23 millert
2606 * license.pod: add 2007
2608 2007-08-24 14:19 millert
2610 * UPGRADE: mention #uid vs. comment pitfall
2612 2007-08-24 09:50 millert
2614 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2615 problem with the latest autoconf. From Stepan Kasal.
2617 2007-08-23 20:28 millert
2619 * parse.h: Back out he XOR swap trick, it is slower than a temp
2620 variable on modern CPUs.
2622 2007-08-23 20:14 millert
2626 2007-08-23 20:14 millert
2628 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2629 and use the XOR swap trick to swap the prev pointers during
2632 2007-08-23 15:31 millert
2634 * parse.h: remove useless statement
2636 2007-08-23 07:47 millert
2638 * toke.c, toke.l: Refactor #include parsing into a separate
2639 function and return unparsed chars (such as newline or comment)
2642 2007-08-22 18:56 millert
2644 * WHATSNEW: mention better uid support
2646 2007-08-22 18:55 millert
2648 * sudoers.pod: Users may now consist of a uid.
2650 2007-08-22 18:39 millert
2652 * gram.c, gram.h, toke.c: regen
2654 2007-08-22 18:32 millert
2656 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2657 characters that would require quoting in sudoers.
2659 2007-08-22 18:31 millert
2661 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2662 characters which should be quoted with a backslash when
2665 2007-08-22 18:28 millert
2667 * toke.l: Require that the first character after a comment not be a
2668 digit or a dash. This allows us to remove the GOTRUNAS state and
2669 treat uid/gids similar to other words. It also means that we can
2670 now specify uids in User_Lists and a User_Spec may now contain a
2673 2007-08-22 18:23 millert
2675 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2676 make the runas portion of the grammar more natural.
2678 2007-08-22 06:35 millert
2680 * Makefile.in, README, BUGS: The BUGS file is history
2682 2007-08-21 09:19 millert
2684 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2685 character after the pound sign isn't a digit or a dash.
2687 2007-08-20 20:43 millert
2689 * WHATSNEW: Glob support was back-ported to 1.6.9
2691 2007-08-20 19:59 millert
2693 * Makefile.in: remove sudo_usage.h in distclean
2695 2007-08-20 19:24 millert
2697 * parse.c: If a Defaults value contains a blank, double-quote the
2700 2007-08-20 19:19 millert
2702 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2703 that span multiple lines using the line continuation char.
2704 Previously, the entire thing, including the continuation char,
2705 newline, and spaces was stored as-is.
2707 2007-08-20 10:46 millert
2709 * sudo.c: Be consistent when using single quotes and backticks.
2711 2007-08-19 16:48 millert
2713 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2714 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2715 dynamically allocated strings and word-wrapped output. Currently
2716 used for sudo's usage() and sudo -l output. Sudo usage strings
2717 are now in sudo_usage.h which is generated at configure time.
2719 2007-08-18 08:22 millert
2721 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2722 actual tty width instead of assuming 80.
2724 2007-08-17 18:32 millert
2726 * history.pod: some more info
2728 2007-08-17 17:28 millert
2730 * history.pod: Mentioned Chris Jepeway's parser and also the new
2731 one that is in sudo 1.7.
2733 2007-08-16 09:38 millert
2735 * sudo.pod, visudo.pod: For the options list, add flag args where
2736 appropriate and increase the indent level so there is room for
2739 2007-08-15 13:49 millert
2741 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2742 some bogosity in the line wrapping.
2744 2007-08-15 11:21 millert
2746 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2747 visudo.man.in, visudo.cat: regen
2749 2007-08-15 11:20 millert
2751 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2752 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2753 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2754 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2755 is a versino of systrace that uses a lookaside buffer (or we have
2756 a better mechanism to use).
2758 2007-08-15 09:22 millert
2760 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2761 instead of gethostbyname() if it is available
2763 2007-08-14 15:27 millert
2765 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2768 2007-08-14 11:19 millert
2770 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2772 2007-08-14 10:04 millert
2774 * sudo.c: If we can open sudoers but fail to read the first byte,
2775 close the file stream before trying again.
2777 2007-08-13 12:34 millert
2779 * gram.c, toke.c: regen
2781 2007-08-13 12:29 millert
2783 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2784 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2786 2007-08-13 12:23 millert
2788 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2791 2007-08-12 18:55 millert
2793 * configure, configure.in: fix sudo_noexec extension which got
2794 broken in the libtool update
2796 2007-08-10 10:41 millert
2798 * Makefile.in: explicitly specify -Tascii to nroff
2800 2007-08-08 16:07 millert
2802 * logging.c: remove an ANSI-ism that crept in
2804 2007-08-06 20:37 millert
2806 * sudo.pod: Adjust list indents Prevent -- from being turned into
2807 an em dash Use a list for the environment instead of a literal
2810 2007-08-06 20:36 millert
2812 * visudo.pod: Use a list for the environment instead of an indented
2815 2007-08-06 20:33 millert
2817 * sudoers.pod: Adjust list indentation
2819 2007-08-06 20:31 millert
2821 * license.pod: add =head3
2823 2007-08-06 10:24 millert
2825 * sudo.pod: mention that when specifying a uid for the -u option
2826 the shell may require that the # be escaped
2828 2007-08-01 22:08 millert
2830 * match.c: Fix off by one in group matching.
2832 2007-07-31 14:04 millert
2834 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2837 2007-07-30 10:45 millert
2839 * configure, configure.in: Add missing define of
2840 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2842 2007-07-30 09:29 millert
2844 * aclocal.m4, configure.in, configure: Fix link tests such that new
2845 gcc doesn't optimize away the test.
2847 2007-07-29 19:21 millert
2849 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2851 2007-07-29 19:09 millert
2853 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2856 2007-07-29 18:32 millert
2858 * env.c: Add back allocation of the env struct in rebuild_env but
2859 save a copy of the old pointer and free it before returning.
2861 2007-07-29 16:09 millert
2863 * env.c: Don't init the private environment in rebuild_env() since
2864 it may have already been done implicitly
2865 sudo_setenv/sudo_unsetenv.
2867 Multiply length by sizeof(char *) in memcpy/memmove when copying
2868 the environment so we copy the full thing.
2870 Add missing set of parens so we deref the right pointer in
2871 sudo_unsetenv when searching for a matching variable.
2873 2007-07-26 16:35 millert
2875 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2878 2007-07-26 10:04 millert
2880 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2882 2007-07-26 07:28 millert
2884 * sudoers.pod: Sort sudoers options; based on a diff from Igor
2887 2007-07-25 16:19 millert
2889 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2890 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2891 The Makefile rules for the .man.in file will add @mansectsu@ and
2892 @mansectform@ back in after pod2man is done anyway.
2894 2007-07-22 19:09 millert
2896 * LICENSE, Makefile.in, license.pod: Move license info to pod
2899 2007-07-22 18:43 millert
2901 * configure, configure.in, sudoers.pod: Substitute value of
2902 path_info into sudoers man page.
2904 2007-07-22 16:40 millert
2906 * WHATSNEW: remove features that were back-ported to 1.6.9
2908 2007-07-22 15:20 millert
2910 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2911 usage. From Igor Sobrado.
2913 2007-07-22 15:19 millert
2915 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2916 ldap_sasl_interactive_bind_s() but don't have
2917 gss_krb5_ccache_name().
2919 2007-07-22 08:23 millert
2921 * ChangeLog: rebuild without branch info
2923 2007-07-22 08:23 millert
2925 * Makefile.in: Add ChangeLog target
2927 2007-07-22 08:14 millert
2929 * auth/pam.c: Run cleanup code if the user hits ^C at the password
2932 2007-07-22 08:13 millert
2934 * auth/pam.c: Some versions of pam_lastlog have a bug that will
2935 cause a crash if PAM_TTY is not set so if there is no tty, set
2936 PAM_TTY to the empty string.
2938 2007-07-20 09:32 millert
2940 * Makefile.in: ChageLog not Changelog
2942 2007-07-20 09:31 millert
2946 2007-07-20 09:29 millert
2948 * Makefile.in: CHANGE -> Changelog
2950 2007-07-19 20:23 millert
2954 2007-07-19 19:53 millert
2956 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2957 for gss_krb5_ccache_name() and the gssapi headers.
2959 2007-07-18 12:57 millert
2961 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2962 return environment pointer, they set environ directly.
2964 No longer need to pass around an envp pointer since we just
2965 operate on environ now.
2967 Add dosync argument to insert_env() that indicates whether it
2968 should reset environ when realloc()ing env.envp.
2970 Use an initial size of 128 for the environment.
2972 2007-07-18 12:41 millert
2974 * env.c: Split sudo_setenv() into an external version and a version
2975 only for use by rebuild_env().
2977 2007-07-16 19:40 millert
2979 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2980 setting KRB5CCNAME. Also use sudo_unsetenv() in the
2981 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2982 original environment. TODO: configure setup for
2983 gss_krb5_ccache_name()
2985 2007-07-16 18:44 millert
2987 * README.LDAP: add krb5_ccname
2989 2007-07-16 18:44 millert
2991 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2993 2007-07-16 18:39 millert
2995 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2996 syncing code into sync_env().
2998 2007-07-16 07:27 millert
3000 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3003 2007-07-15 15:44 millert
3005 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3006 If specified, it will override the default value of KRB5CCNAME
3007 in the environment for the duration of the call to
3008 ldap_sasl_interactive_bind_s().
3010 2007-07-15 15:41 millert
3012 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3013 most format_env() + insert_env() combinations. insert_env() no
3014 longer takes a struct environment *
3016 2007-07-15 12:47 millert
3018 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3020 2007-07-15 09:23 millert
3022 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3023 support for SASL auth when connecting to an LDAP server. Adapted
3024 from a diff by Tom McLaughlin.
3026 2007-07-14 16:32 millert
3028 * configure, configure.in: Only enable AIX or BSD auth if no other
3029 exclusive auth method has been chosen. Allows people to e.g.,
3030 use PAM on AIX without adding --without-aixauth. A better
3031 solution is needed to deal with default authentication since if a
3032 non-exclusive method is chosen we will still get an error.
3034 2007-07-11 11:23 millert
3036 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3037 history.pod (which is also used for web pages)
3039 2007-07-09 19:40 millert
3041 * sudo.man.in, sudoers.man.in: regen
3043 2007-07-09 19:25 millert
3045 * sudo.pod: Better explanation of environment handling in the sudo
3048 2007-07-09 15:13 millert
3050 * env.c, sudo.c: Defer setting user-specified env vars until after
3053 2007-07-09 13:25 millert
3055 * env.c: honor def_default_path for PATH set on the command line
3057 2007-07-09 13:22 millert
3059 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3060 environment variables on the command line as long as they are
3061 allowed by env_keep and env_check. Ie: apply the same
3062 restrictions as normal environment variables. TODO: deal with
3065 2007-07-08 14:44 millert
3067 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3068 original envp to sudo_edit(). Don't allow -E or env var setting
3069 in sudoedit mode. More accurate usage() when called as sudoedit.
3071 2007-07-08 14:41 millert
3073 * ldap.c: warn -> warning
3075 2007-07-08 14:11 millert
3077 * sudo.pod: add -c option to sudoedit synopsis
3079 2007-07-08 10:27 millert
3081 * TODO: udpate to reality
3083 2007-07-08 09:43 millert
3085 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3086 the return value from {user,host,runas,cmnd}_matches(). Rename
3087 *matches variables -> *match. Purely cosmetic.
3089 2007-07-08 09:30 millert
3091 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3092 No change in behavior.
3094 2007-07-08 09:17 millert
3096 * sudoers: add SETENV tag
3098 2007-07-06 15:51 millert
3100 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3101 even if user didn't match since Defaults options may still apply.
3103 2007-07-06 14:51 millert
3105 * check.c, sudo.c: Do not update timestamp if user not validated by
3108 2007-07-06 10:14 millert
3110 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3111 and restore to the user's original in PERM_ROOT
3113 2007-07-06 10:04 millert
3115 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3116 now no different than PERM_ROOT so remove PERM_FULL_ROOT
3118 2007-07-06 09:49 millert
3120 * check.c: don't check timestamp mtime if we are just going to
3123 2007-07-06 09:33 millert
3125 * sudoers.pod: Move sudoers defaults parameters into their own
3128 2007-07-05 20:21 millert
3130 * testsudoers.c: Reduce a level of indent by a few placed continue
3133 2007-07-05 20:20 millert
3135 * parse.c: Make matching but negated commands/hosts/runas entries
3136 override a previous match as expected. Also reduce some levels
3137 of indent by a few placed continue statements.
3139 2007-07-05 16:34 millert
3141 * parse.c: Print default runas in "sudo -l" if sudoers don't
3144 2007-07-05 15:46 millert
3146 * match.c: Less hacky way of testing whether the domain was set.
3148 2007-07-04 15:50 millert
3150 * INSTALL: Mention pam-devel and openldap-devel for Linux
3152 2007-07-03 19:38 millert
3154 * README.LDAP: or vs. are
3156 2007-07-01 16:55 millert
3158 * sudo.c: fix typo in Solaris project support
3160 2007-07-01 09:40 millert
3164 2007-07-01 09:07 millert
3166 * sudo.c: Make -- on the command line match the manual page. The
3167 implied shell case has been simplified as a result.
3169 2007-06-28 10:44 millert
3171 * sudoers2ldif: add simplistic support for sudoRunas; note that if
3172 a sudoers entry contains multiple Runas users, all will apply to
3175 2007-06-28 10:42 millert
3177 * sudoers2ldif: honor SETENV and NOSETENV tags
3179 2007-06-24 09:25 millert
3181 * mon_systrace.c: Redo setting of user_args. We now build up a
3182 private copy of argv first and then replace the NULs with spaces.
3184 2007-06-24 09:19 millert
3186 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3189 2007-06-24 07:39 millert
3191 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3193 2007-06-23 20:00 millert
3195 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3196 visudo.man.in: regen
3198 2007-06-23 19:58 millert
3200 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3201 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3202 sudoers.pod, toke.c, toke.l: Add support for setting environment
3203 variables on the command line. This is only allowed if the
3204 setenv sudoers options is enabled or if the command is prefixed
3205 with the SETENV tag.
3207 2007-06-23 19:57 millert
3209 * README.LDAP: replace Aaron's email address with the sudo-workers
3212 2007-06-23 19:55 millert
3216 2007-06-21 20:35 millert
3218 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3219 schema out into separate files.
3221 2007-06-21 18:28 millert
3223 * auth/aix_auth.c: free message if set by authenticate()
3225 2007-06-21 13:03 millert
3227 * match.c: deal with NULL gr_mem
3229 2007-06-20 15:04 millert
3231 * config.h.in: regen
3233 2007-06-20 15:04 millert
3235 * configure.in: add template for HAVE_PROJECT_H
3237 2007-06-20 07:06 millert
3239 * closefrom.c: include fcntl.h
3241 2007-06-19 19:37 millert
3243 * INSTALL: mention --with-project
3245 2007-06-19 18:24 millert
3247 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3248 support. From Michael Brantley.
3250 2007-06-19 17:27 millert
3252 * sudoers.pod: fix typo
3254 2007-06-19 17:22 millert
3258 2007-06-19 17:21 millert
3260 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3262 2007-06-19 17:00 millert
3264 * memrchr.c: Remove dependecy on NULL
3266 2007-06-19 15:37 millert
3270 2007-06-19 15:37 millert
3272 * aclocal.m4, configure.in: Can't use the regular autoconf
3273 fnmatch() check since we need FNM_CASEFOLD so go back to our
3276 2007-06-19 12:52 millert
3278 * env.c: Fix preserving of variables in env_keep.
3280 2007-06-19 07:10 millert
3282 * env.c: add XAUTHORIZATION
3284 2007-06-18 20:41 millert
3286 * UPGRADE: expand upon env resetting and mention that it began in
3289 2007-06-18 20:33 millert
3291 * sudoers.pod: Update descriptions of env_keep and env_check to
3292 match current reality.
3294 2007-06-18 17:33 millert
3296 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3297 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3298 intial_keepenv_table.
3300 2007-06-18 17:23 millert
3302 * env.c, logging.c: Treat USERNAME environemnt variable like
3305 2007-06-18 17:21 millert
3307 * env.c: Don't need to populate keepenv table with the contents of
3310 2007-06-18 08:57 millert
3312 * sudo.c: Don't force sudo into the C locale.
3314 2007-06-18 08:56 millert
3316 * env.c: Make env_check apply when env_reset it true. Environment
3317 variables are passed through unless they contain '/' or '%'.
3318 There is no need to have a variable in both env_check and
3321 2007-06-16 07:31 millert
3323 * visudo.c: Remove an duplicate lock_file() call and add a comment.
3325 2007-06-15 21:16 millert
3327 * UPGRADE: Add sudo 1.6.9 upgrade note.
3329 2007-06-14 12:23 millert
3331 * interfaces.c: Solaris will return EINVAL if the buffer used in
3332 SIOCGIFCONF is too small. From Klaus Wagner.
3334 2007-06-14 12:03 millert
3336 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3337 logging.c, sudo.h: Redo the long syslog line splitting based on a
3338 patch from Eygene Ryabinkin. Include memrchr() for systems
3341 2007-06-14 07:09 millert
3343 * configure.in: Since we need to be able to convert timespec to
3344 timeval for utimes() the last 3 digits in the tv_nsec are not
3345 significant. This makes the sudoedit file date comparison work
3348 2007-06-13 13:41 millert
3350 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3351 deal with adding things to AUTH_OBJS. This deals with exclusive
3352 authentication methods in a simple way.
3354 2007-06-12 13:08 millert
3356 * LICENSE: mkstemp.c is BSD code too.
3358 2007-06-12 09:21 millert
3360 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3362 2007-06-11 18:27 millert
3364 * sudo.c: cleanenv() is no more.
3366 2007-06-10 18:37 millert
3368 * ChangeLog: Display branch info in Changelog
3370 2007-06-10 18:18 millert
3372 * utimes.c: Include config.h early so we have it for
3375 2007-06-10 18:00 millert
3377 * ChangeLog: Fix Changelog generation and update.
3379 2007-06-09 07:26 millert
3381 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3383 Move old-style fd closing into closefrom_fallback() and call that
3384 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3386 2007-06-09 07:24 millert
3388 * config.h.in, configure.in, auth/kerb5.c: o use
3389 krb5_verify_user() if available instead of doing it by hand
3390 o use krb5_init_secure_context() if we have it
3391 o pass an encryption type of 0 to krb5_kt_read_service_key()
3393 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3395 2007-06-09 07:20 millert
3397 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3400 2007-06-09 07:17 millert
3402 * configure.in: Fix closefrom() substitution in the Makefile
3404 2007-06-09 07:15 millert
3406 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3408 2007-06-07 07:52 millert
3410 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3412 2007-06-07 07:22 millert
3414 * auth/kerb5.c: If we cannot get a valid service key using the
3415 default keytab it is a fatal error. Fixes a bug where sudo could
3416 be tricked into allowing access when it should not by a fake KDC.
3417 From Thor Lancelot Simon.
3419 2007-05-12 08:56 millert
3421 * aclocal.m4, configure, configure.in: Update long long checks to
3422 use AC_CHECK_TYPES and to cache values.
3424 2007-05-12 08:07 millert
3426 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3427 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3428 that assumes replacing with GNU fnmatch.
3430 2007-05-11 17:05 millert
3432 * configure, configure.in: Add closefrom() to LIB_OBJS not
3433 SUDO_OBJS if it is missing since we need it for visudo now too.
3435 2007-04-24 14:44 millert
3437 * sudoers.pod: Attempt to clarify the bit talking about network
3438 numbers w/o netmasks.
3440 2007-04-24 14:25 millert
3442 * sudo.pod: Clarify timestamp dir ownership sentence.
3444 2007-04-20 12:40 millert
3446 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3447 __LIBPAM_VERSION. From Dmitry V. Levin.
3449 2007-04-16 12:13 millert
3451 * sudo.c: -i is also one of the mutually exclusive options to list
3452 it in the warning message. Noted by Chris Pepper.
3454 2007-04-12 11:18 millert
3456 * visudo.pod: The sudoers variable is env_editor, not enveditor.
3457 From Jean-Francois Saucier.
3459 2007-03-29 13:30 millert
3461 * redblack.c: I tracked down the original author so credit him and
3462 include his license info.
3464 2007-02-06 13:25 millert
3466 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3467 sudoers.pod: Fix typos; from Jason McIntyre.
3469 2007-02-06 13:23 millert
3471 * logging.c: Restore signal mask before calling reapchild(). Fixes
3472 a possible race condition that could prevent sudo from properly
3473 waiting for the child.
3475 2007-01-31 10:02 millert
3477 * pwutil.c: Don't declare pw_free() if we are not going to use it.
3479 2007-01-31 10:00 millert
3481 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3482 and LDR_PRELOAD64. The 64-bit version is not currently
3483 supported. Remove zero_env() prototype as it no longer exists.
3485 2006-12-11 13:21 millert
3487 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3490 2006-09-29 10:53 millert
3492 * auth/pam.c: If the user enters ^C at the password prompt, abort
3493 instead of trying to authenticate with an empty password (which
3494 causes an annoying delay).
3496 2006-08-17 11:26 millert
3498 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3499 F_CLOSEM support to closefrom(); adapted from a diff by Darren
3502 2006-08-17 11:25 millert
3504 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3507 2006-08-04 11:34 millert
3509 * config.sub, config.guess: Update to latest versions from
3510 cvs.savannah.gnu.org
3512 2006-07-31 13:51 millert
3514 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3515 sudo_end{pw,grp}ent() so we can close the passwd/group files
3518 2006-07-31 13:50 millert
3520 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3521 flavor of set_perms() for systems without setreuid() or
3522 setresuid() that have a working seteuid(). Tested on Darwin.
3524 2006-07-30 15:56 millert
3526 * mon_systrace.c: systrace_read() returns ssize_t
3528 2006-07-30 15:53 millert
3530 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3533 2006-07-28 13:12 millert
3535 * HISTORY: Fix typo; Matt Ackeret
3537 2006-07-17 08:25 millert
3539 * sudo.c: Print sudoers path in -V mode for root.
3541 2006-06-15 14:44 millert
3543 * ldap.c: Do a sub tree search instead of a base search (one level
3544 in the tree only) for sudo right objects. This allows system
3545 administrators to categorize the rights in a tree to make them
3548 2005-12-28 13:52 millert
3550 * sudo.pod: fix typo
3552 2005-12-04 12:16 millert
3554 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3555 timelimit and bind_timelimit support; adapted from gentoo.
3557 2005-11-23 18:57 millert
3559 * ldap.c: Support comments that start in the middle of a line
3561 2005-11-23 18:56 millert
3563 * configure.in, configure: Define LDAP_DEPRECATED until we start
3564 using ldap_get_values_len()
3566 2005-11-18 09:55 millert
3568 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3570 2005-11-17 20:39 millert
3572 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3573 takes an int as an arg so it can be used as a signal handler too.
3575 2005-11-17 20:38 millert
3577 * sudo.c: Make a copy of the shell field in the passwd struct for
3578 NewArgv to avoid a use after free situation after sudo_endpwent()
3581 2005-11-16 20:36 millert
3583 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3584 mkstemp() for those poor souls without it.
3586 2005-11-15 09:25 millert
3588 * env.c: Add PERL5DB to list of environment variables to remove.
3590 2005-11-13 15:49 millert
3592 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3593 function twice with a state cookie use separate check/log
3596 Check more ioctl() calls for failure.
3598 systrace_{read,write} now return the number of bytes read/written
3601 2005-11-13 14:51 millert
3603 * env.c: Add more environment variables to remove; from gentoo
3604 linux Add some comments about what bad env variables go to what
3607 2005-11-11 17:23 millert
3609 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3610 the exec since they free up our cached copy of the passwd
3611 structs, including sudo_user and sudo_runas. Fixes a
3614 2005-11-11 17:19 millert
3616 * visudo.c: Close all fd's before executing editor.
3618 2005-11-11 17:17 millert
3620 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3623 2005-11-11 11:22 millert
3625 * check.c: Fix fd leak when lecture file option is enabled. From
3628 2005-11-07 11:02 millert
3630 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3631 environment variables to remove. From Charles Morris
3633 2005-11-01 13:24 millert
3635 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3637 2005-10-27 20:35 millert
3639 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3641 2005-08-14 20:32 millert
3643 * sudoers.pod: Fix typo; Toby Peterson
3645 2005-08-02 09:57 millert
3647 * tsgetgrpw.c: Make return buffers static so they don't get
3650 2005-07-27 21:14 millert
3652 * auth/securid5.c: Fix securid5 authentication, was not checking
3653 for ACM_OK. Also add default cases for the two switch()es.
3654 Problem noted by ccon at worldbank
3656 2005-06-26 20:10 millert
3658 * ldap.c: Remove ncat() in favor of just counting bytes and
3659 pre-allocating what is needed.
3661 2005-06-26 19:44 millert
3663 * ldap.c: Fix up some comments Add missing fclose() for the
3666 2005-06-26 19:38 millert
3668 * ldap.c: align struct ldap_config
3670 2005-06-26 19:37 millert
3672 * ldap.c: use LINE_MAX for max conf file line size
3674 2005-06-26 18:36 millert
3676 * pathnames.h.in: add _PATH_LDAP_SECRET
3678 2005-06-26 18:36 millert
3680 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3682 2005-06-25 18:03 millert
3684 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3687 2005-06-25 17:46 millert
3689 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3690 variable by default.
3692 2005-06-25 16:39 millert
3694 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3695 is safe for LD_PRELOAD
3697 2005-06-25 16:15 millert
3699 * acsite.m4, configure: set need_version=no for all cases; this is
3702 2005-06-25 14:45 millert
3706 2005-06-25 14:33 millert
3708 * configure, configure.in: Add dragonfly
3710 2005-06-25 14:29 millert
3712 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3714 2005-06-25 14:21 millert
3718 2005-06-25 14:20 millert
3720 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3721 ltoptions.m4 ltsugar.m4 ltversion.m4
3723 2005-06-25 14:08 millert
3725 * config.guess, config.sub, ltmain.sh: merge in local changes:
3726 config.guess: o better openbsd support config.sub: o hiuxmpp
3727 support ltmain.sh o remove requirement that libs must begin with
3728 "lib" o don't print a bunch of crap about library installs o
3731 2005-06-25 14:05 millert
3733 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3735 2005-06-25 14:04 millert
3737 * configure.in: Update with autoupdate and make minor changes for
3740 2005-06-22 23:19 millert
3742 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3744 2005-06-22 23:04 millert
3746 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3747 emul/timespec.h: Move declatation of struct timespec to its own
3748 include files for systems without it since it needs time_t
3751 2005-06-22 22:57 millert
3753 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3755 2005-05-27 01:59 millert
3757 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3758 give pam_limits a chance to run. Idea from Karel Zak.
3760 2005-04-24 19:24 millert
3762 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3763 to silence warnings on Solaris
3765 2005-04-24 19:22 millert
3767 * parse.c: include grp.h to silence a warning on Solaris
3769 2005-04-23 15:10 millert
3771 * parse.c: Fix printing of += and -= defaults.
3773 2005-04-17 01:21 millert
3775 * mon_systrace.c: Sanity check number of syscall args with argsize.
3776 Not really needed but a little paranoia never hurts.
3778 2005-04-17 01:18 millert
3780 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3781 void * Use int, not size_t/ssize_t for systrace lengths (since it
3784 2005-04-16 03:14 millert
3786 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3787 collsion w/ error Check rval of decode_args() and update_env()
3788 Remove improper setting of validated variable
3790 2005-04-11 21:37 millert
3792 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3793 file if def_ignore_sudoers is not set and call LDAP versions from
3794 display_privs() and display_cmnd() instead of directly from
3795 main(). Because of this we need to defer closing the ldap
3796 connection until after -l processing has ocurred and we must pass
3797 in the ldap pointer to display_privs() and display_cmnd().
3799 2005-04-11 21:33 millert
3801 * ldap.c: Reorganize LDAP code to better match normal sudoers
3802 parsing. Instead of storing strings for later printing in -l
3803 mode we do another query since the authenticating user and the
3804 user being listed may not be the same (the new -U flag). Also
3805 add support for "sudo -l command".
3807 There is still a fair bit if duplicated code that can probably be
3810 2005-04-11 00:37 millert
3812 * ldap.c: Replace pass variable with do_netgr for better
3815 2005-04-10 23:49 millert
3817 * ldap.c: use DPRINTF macro
3819 2005-04-10 23:18 millert
3821 * ldap.c: estrdup, not strdup
3823 2005-04-10 17:44 millert
3825 * parse.c: Add macro to test if the tag changed to improve
3828 2005-04-10 17:40 millert
3830 * parse.c: Avoid printing defaults header if there are no defaults
3833 2005-04-10 15:29 millert
3835 * glob.c: Fix a warning on systems without strlcpy().
3837 2005-04-10 13:32 millert
3839 * pwutil.c: Use macros where possible for sudo_grdup() like
3842 2005-04-08 17:04 millert
3844 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3845 add in tv_usec / 1000000.
3847 2005-03-29 23:38 millert
3849 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3850 should be 1, not 0 for Heimdal. From Alex Plotnick.
3852 2005-03-29 09:29 millert
3854 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3855 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3856 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3857 Add efree() for consistency with emalloc() et al. Allows us to
3858 rely on C89 behavior (free(NULL) is valid) even on K&R.
3860 2005-03-28 22:33 millert
3862 * parse.c, sudo.c: Move initgroups() for -U option into
3863 display_privs() so group matching in sudoers works correctly.
3865 2005-03-26 21:34 millert
3867 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3868 with sudo_ldap_close.
3870 2005-03-26 20:01 millert
3872 * parse.c: Add missing space in Defaults printing
3874 2005-03-25 12:36 millert
3876 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3877 size computaton and string copies.
3879 2005-03-18 22:08 millert
3881 * pwutil.c: Zero old pw_passwd before replacing with version from
3884 2005-03-18 22:07 millert
3886 * configure, configure.in: Only attempt shadow password detection
3887 if PAM is not being used Add shadow_* variables to make shadow
3888 password detection more generic.
3890 2005-03-18 21:46 millert
3892 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3895 2005-03-12 19:27 millert
3897 * sudoers.pod: use a non-breaking space to avoid a double space
3900 2005-03-12 19:26 millert
3902 * sudo.pod: commna, not colon after e.g.
3904 2005-03-12 18:43 millert
3906 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3907 at least uses __execve() internally.
3909 2005-03-12 12:29 millert
3911 * indent.pro: Match reality a bit more.
3913 2005-03-12 12:27 millert
3915 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3917 2005-03-11 23:42 millert
3919 * pwutil.c: Store shadow password after making a local copy of
3920 struct passwd in case normal and shadow routines use the same
3921 internal buffer in libc.
3923 2005-03-10 20:57 millert
3925 * alloc.c, logging.c: Make varargs usage consistent with the rest
3928 2005-03-10 10:09 millert
3930 * sudo_noexec.c: Wrap more of the exec family since on Linux the
3931 others do not appear to go through the normal execve() path.
3933 2005-03-10 09:57 millert
3935 * visudo.c: make print_unused static like proto says
3937 2005-03-10 09:55 millert
3939 * glob.c: silence a warning on K&R systems
3941 2005-03-10 09:51 millert
3943 * parse.c, alias.c, error.c: make this build in K&R land
3945 2005-03-07 22:21 millert
3949 2005-03-05 22:46 millert
3951 * ldap.c: return(foo) not return foo optimize _atobool() slightly
3953 2005-03-05 22:40 millert
3955 * ldap.c: Use TRUE/FALSE
3957 2005-03-05 22:31 millert
3959 * ldap.c: Reformat to match the rest of sudo's code.
3961 2005-03-05 19:33 millert
3963 * sudo.pod: I am the primary author
3965 2005-02-22 22:28 millert
3967 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3968 confused too many people and really isn't needed in a
3969 configure-oriented world.
3971 2005-02-22 22:28 millert
3973 * INSTALL: alternate -> alternative
3975 2005-02-22 22:26 millert
3977 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3978 have issues with TCSAFLUSH.
3980 2005-02-22 22:16 millert
3982 * toke.l: Allow leading blanks before Defaults and Foo_Alias
3985 2005-02-22 22:14 millert
3987 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3989 2005-02-20 13:00 millert
3991 * sudoers.pod: env_keep overrides set_logname
3993 2005-02-20 12:57 millert
3995 * env.c: Fix disabling set_logname and make env_keep override
3998 2005-02-20 12:28 millert
4000 * compat.h, config.h.in, configure, configure.in: No longer need
4003 2005-02-20 11:48 millert
4005 * env.c, sudo.c: Just clean the environment once. This assumes
4006 that any further setenv/putenv will be able to handle the fact
4007 that we replaced environ with our own malloc'd copy but all the
4008 implementations I've checked do.
4010 2005-02-15 23:16 millert
4012 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4013 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4016 2005-02-13 00:33 millert
4018 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4019 and prev_user into init_vars() since user_shell at least is
4022 2005-02-12 18:51 millert
4024 * Makefile.in: fix devel builds
4026 2005-02-12 18:46 millert
4028 * check.c, sudo.c: Fix some printf format mismatches on error.
4030 2005-02-12 18:33 millert
4032 * configure, gram.c, toke.c: regen
4034 2005-02-12 17:56 millert
4036 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4037 alloc.c, check.c, closefrom.c, compat.h, configure.in,
4038 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4039 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4040 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4041 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4042 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4043 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4044 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4045 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4046 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4047 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4048 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4049 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4050 emul/utime.h: Update copyright years.
4052 2005-02-12 16:46 millert
4054 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4057 2005-02-12 16:16 millert
4059 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4062 2005-02-11 18:06 millert
4064 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4065 to warn about printf-like format mismatches
4067 2005-02-10 00:16 millert
4069 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4070 generated from cvs logs
4072 2005-02-10 00:03 millert
4074 * set_perms.c: Use warning/error instead of perror/fatal.
4076 2005-02-09 23:13 millert
4078 * config.guess: Update OpenBSD section
4080 2005-02-09 23:10 millert
4082 * UPGRADE: Add upgrading noted for 1.7
4084 2005-02-09 23:00 millert
4086 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4087 environment, just prune out entries based on the env_delete and
4088 env_check lists. Base building up the new environment on the
4089 current environment and the variables we removed initially.
4091 2005-02-09 22:23 millert
4093 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4094 if locales are supported, just to be safe.
4096 2005-02-09 22:19 millert
4098 * toke.c, toke.l: Cast argument to ctype functions to unsigned
4101 2005-02-07 22:56 millert
4103 * env.c: correct value for DID_USER
4105 2005-02-07 22:55 millert
4107 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4108 <compat.h> not "compat.h"
4110 2005-02-07 22:51 millert
4112 * defaults.c: Reset the environment by default.
4114 2005-02-07 22:50 millert
4116 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4117 malloc an new vector if execve() fails.
4119 2005-02-06 23:16 millert
4121 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4122 execve(2) and wrap the command in sh if we get ENOEXEC.
4124 2005-02-05 23:01 millert
4126 * sudo_noexec.c: Only include time.h on systems that lack struct
4127 timespec which gets defind in compat.h (using time_t).
4129 2005-02-05 22:59 millert
4131 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4132 w/o struct timespec.
4134 2005-02-05 22:56 millert
4136 * configure, compat.h, config.h.in, configure.in: use bcopy on
4139 2005-02-05 22:31 millert
4141 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4142 so limit its use to gcc >= 2.8.
4144 2005-02-05 21:21 millert
4146 * Makefile.in: Add explicit rule to build sudo_noexec.lo
4148 2005-02-05 17:56 millert
4150 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4151 pointed out a bunch of missed dependencies.
4153 2005-02-05 13:18 millert
4155 * TROUBLESHOOTING: Help for PAM when account section is missing
4157 2005-02-05 13:01 millert
4159 * auth/pam.c: Give user a clue when there is a missing "account"
4160 section in the PAM config.
4162 2005-02-05 10:22 millert
4164 * auth/pam.c: Better error handling.
4166 2005-02-05 09:57 millert
4168 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4169 CPPFLAGS so it takes effect as early as possible. Silences a
4170 warning about isblank() on linux.
4172 2005-02-04 21:49 millert
4174 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4175 number of args to be passed to log_error().
4177 2005-01-31 23:03 millert
4179 * pwutil.c: Don't try to destroy a tree we didn't create.
4181 2005-01-27 10:42 millert
4183 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4184 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4185 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4186 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4187 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4188 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4189 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4190 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4191 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4192 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4193 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4194 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4197 2005-01-21 10:34 millert
4199 * configure, configure.in: Fix error message when mixing invalid
4202 2005-01-21 10:32 millert
4204 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4205 default if the OS supports them.
4207 2005-01-21 10:29 millert
4209 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4211 2005-01-21 10:29 millert
4213 * configure.in: Better checking for conflicting authentication
4214 methods Display the authentication methods used at the end of
4215 configure Rename --with-authenticate -> --with-aixauth Use
4216 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4217 default on systems that support them unless disabled. Add
4218 OSMAJOR variable that replaces old OSREV; now OSREV has full
4221 2005-01-17 19:40 millert
4223 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4225 2005-01-14 13:35 millert
4227 * configure.in: Replace: test -n "$FOO" || FOO="bar"
4229 With: : ${FOO='bar'}
4231 2005-01-09 18:58 millert
4233 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4234 only call private passwd/group routines when using a nonstandard
4237 2005-01-06 10:34 millert
4241 2005-01-05 22:16 millert
4243 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4244 fields so add getpwent()/getgrent() functions and call those.
4246 2005-01-05 17:29 millert
4248 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4250 2005-01-05 17:18 millert
4252 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4253 in the clean target Add devdir variable and use it to specify the
4254 path to parser sources
4256 2005-01-05 17:17 millert
4260 2005-01-05 17:17 millert
4262 * configure.in: Add a devdir variables that defaults to $(srcdir)
4263 and is set to . if --devel was specified. Allows for proper
4264 dependecies building the parser.
4266 2005-01-05 14:50 millert
4268 * testsudoers.c: Add support for custom passwd/group files.
4270 2005-01-05 14:47 millert
4272 * Makefile.in: Build private copy of pwutil.o for testsudoers with
4273 MYPW defined so it uses our own passwd/group routines.
4275 2005-01-05 14:46 millert
4277 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4278 sudo_setspent/sudo_endspent stubs instead. We can now just use
4279 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4280 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4282 2005-01-05 14:44 millert
4284 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4285 Use global buffers for passwd/group structs Rename functions from
4288 2005-01-05 14:43 millert
4290 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4292 2005-01-05 14:42 millert
4294 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4297 2005-01-05 14:41 millert
4299 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4300 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4301 are no longer needed. Also add preprocessor magic to use private
4302 versions of the passwd and group routines if MYPW is defined (for
4303 use by testsudoers).
4305 2005-01-04 22:40 millert
4307 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4308 if there are fields we don't handle they end up as 0.
4310 2005-01-04 20:10 millert
4312 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4315 2005-01-04 20:09 millert
4317 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4318 variables for better readability.
4320 2005-01-04 20:08 millert
4322 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4323 that support alternate passwd and group files.
4325 2005-01-04 20:07 millert
4327 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4328 its own file. This allows visudo and testsudoers to use the
4331 2005-01-01 19:31 millert
4333 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4334 based on the terminal width.
4336 2005-01-01 12:41 millert
4338 * match.c, visudo.c, testsudoers.c: Only check group vector in
4339 usergr_matches() if we are matching the invoking or list user.
4340 Always check the group members, even if there was a group vector.
4342 2004-12-17 17:24 millert
4344 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4346 2004-12-17 13:12 millert
4348 * CHANGES, TODO: checkpoint
4350 2004-12-16 14:20 millert
4352 * sudo.c: sort usage
4354 2004-12-16 14:20 millert
4356 * sudo.pod: Sort command line options
4358 2004-12-16 13:33 millert
4360 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4361 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4362 start closing at a point other than 3. Add closefrom_override
4363 sudoers option and -C sudo flag to allow the user to specify a
4364 different closefrom starting point.
4366 2004-12-16 13:25 millert
4368 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4370 2004-12-15 22:55 millert
4372 * LICENSE: no more UCB strcasecmp
4374 2004-12-15 22:54 millert
4376 * strcasecmp.c: replace BSD licensed one with version derived from
4379 2004-12-09 21:07 millert
4381 * sudo.c: Fix last commit.
4383 2004-12-09 19:26 millert
4385 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4386 to /dev/null if not.
4388 2004-12-03 13:57 millert
4390 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4392 2004-12-03 13:52 millert
4394 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4395 Use TIME_WITH_SYS_TIME
4397 2004-12-03 13:48 millert
4399 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4401 2004-12-02 11:18 millert
4403 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4404 being set unconditionally on darwin. From Toby Peterson.
4406 2004-12-02 10:40 millert
4408 * getspwuid.c: Check rbinsert() return value. In the case of faked
4409 up entries there is usually a negative response cached that we
4412 In pwfree() don't try to zero out a NULL pw_passwd pointer.
4414 2004-12-02 09:53 millert
4416 * mon_systrace.c: Use the double fork trick to avoid the monitor
4417 process being waited for by the main program run through sudo.
4419 2004-11-29 12:52 millert
4421 * sudo.c: Call initgroups() in -U mode so group matches work
4424 2004-11-29 12:34 millert
4426 * def_data.h, mkdefaults: Don't print a trailing comma for the last
4427 entry in enum def_tupple
4429 2004-11-28 16:08 millert
4431 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4432 lecture, listpw and verifypw are used in boolean context.
4434 2004-11-28 16:05 millert
4436 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4437 context should be "all", not "any".
4439 2004-11-26 14:21 millert
4441 * def_data.in, defaults.c: Allow tuples that can be used as
4442 booleans to be used as boolean TRUE. In this case the 2nd
4443 possible value of the tuple is used for TRUE.
4445 2004-11-25 12:23 millert
4447 * configure, configure.in: Correct the test for 2-parameter
4450 2004-11-25 12:20 millert
4452 * sudo.h: Add strub struct definitions for passwd, timeval and
4455 2004-11-25 12:09 millert
4457 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4458 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4459 fix a typo in the gettimeofday check.
4461 2004-11-24 16:44 millert
4463 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4464 for visudo and testsudoers.
4466 2004-11-24 16:31 millert
4468 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4469 option to use in conjunction with -l instead of -u. Add support
4470 for "sudo -l command" to test a specific command.
4472 2004-11-24 16:28 millert
4474 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4475 it has not been set. Previously it was set by sudo "ALL" in the
4476 parser but at that point the fully-qualified pathname has not yet
4479 2004-11-23 18:18 millert
4481 * parse.c, testsudoers.c: Correctly handle multiple privileges per
4482 userspec and runas inheritence.
4484 2004-11-21 14:09 millert
4486 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4489 2004-11-19 18:04 millert
4491 * toke.c, toke.l: make per-command defaults work with sudoedit
4493 2004-11-19 18:00 millert
4495 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4496 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4497 approriate defaults variable.
4499 2004-11-19 17:09 millert
4501 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4502 Document per-command Defaults.
4504 2004-11-19 16:35 millert
4506 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4507 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4508 command-specific Defaults entries. E.g.
4509 Defaults!/usr/bin/vi noexec
4511 2004-11-19 15:03 millert
4513 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4514 occurence of user_matches() -> runas_matches() missed previously
4515 runas_matches(), host_matches() and cmnd_matches() only really
4516 need to pass in a list of members. user_matches() still needs to
4517 pass in a passwd struct because of "sudo -l"
4519 2004-11-19 14:46 millert
4521 * parse.c: Check def_authenticate, def_noexec and def_monitor when
4522 setting return flags. XXX May be better to just set the defaults
4523 directly and get rid of those flags.
4525 2004-11-19 13:39 millert
4527 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4528 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4529 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4530 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4531 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4532 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4533 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4534 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4535 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4536 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4537 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4538 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4539 <config.h> Not: #include "config.h" That way we get the correct
4540 config.h when build dir != src dir
4542 2004-11-19 13:30 millert
4544 * Makefile.in: Back out part of rev 1.263; fix -I order
4546 2004-11-19 13:12 millert
4548 * toke.c, toke.l: More robust parsing if #include; could be much
4551 2004-11-19 12:55 millert
4553 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4556 2004-11-19 12:35 millert
4558 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4559 routines out into their own file.
4561 2004-11-19 12:32 millert
4563 * error.h: __attribute__ is already defined in compat.h
4565 2004-11-19 12:30 millert
4567 * visudo.c: quit() should not be __noreturn__ as it is non-void on
4570 2004-11-19 12:24 millert
4572 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4573 error/warning functions like err/warn but that call an additional
4574 cleanup routine in the error case. This means we no longer need
4575 to compile a special version of alloc.o for visudo.
4577 2004-11-19 11:54 millert
4579 * parse.h: Clarify comments about the data structures
4581 2004-11-18 15:28 millert
4583 * visudo.c: Add support for VISUAL and EDITOR containing command
4584 line args. If env_editor is not set any args in VISUAL and
4585 EDITOR are ignored. Arguments are also now supported in
4588 2004-11-17 14:25 millert
4590 * parse.h: alias_matches() is no more
4592 2004-11-17 14:09 millert
4594 * CHANGES, TODO: sync
4596 2004-11-17 13:19 millert
4598 * Makefile.in: When regenerating the parser, don't replace gram.h
4599 unless it has changed.
4601 2004-11-17 11:56 millert
4603 * Makefile.in: remove Makefile.binary for distclean
4605 2004-11-17 11:18 millert
4607 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4608 to make sure we can't overflow new_env.
4610 2004-11-17 10:33 millert
4612 * sudo_edit.c: paranoia when stripping trailing slashes from
4615 2004-11-16 19:00 millert
4617 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4619 2004-11-16 18:59 millert
4621 * configure, configure.in, config.h.in, sudo.c: Add configure check
4624 2004-11-16 18:55 millert
4626 * ldap.c: Use supplementary group vector in struct sudo_user.
4628 2004-11-16 18:40 millert
4630 * match.c: Only do string comparisons on the group members if there
4631 is no supplemental group list.
4633 2004-11-16 16:10 millert
4635 * CHANGES, TODO: sync
4637 2004-11-16 15:54 millert
4639 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4640 trailing slash so chop off any trailing slashes we see and add an
4643 2004-11-16 12:02 millert
4645 * match.c: remove bogus XXX comment
4647 2004-11-16 11:10 millert
4649 * match.c: Get rid of alias_matches and correctly fall through to
4650 the non-alias cases when there is no alias with the specified
4653 2004-11-16 10:47 millert
4655 * getspwuid.c: Cache non-existent passwd/group entries too.
4657 2004-11-16 10:45 millert
4661 2004-11-15 23:32 millert
4663 * getspwuid.c: fix typo
4665 2004-11-15 23:24 millert
4667 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4668 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4669 Implement group caching and use the passwd and group caches
4672 2004-11-15 14:43 millert
4674 * match.c: Properly negate the return value of alias_matches() when
4677 2004-11-15 14:38 millert
4679 * match.c: Make hostname_matches() return TRUE for a match, else
4680 FALSE like the caller expects.
4682 2004-11-15 13:24 millert
4684 * Makefile.in: Add missing dependencies on gram.h
4686 2004-11-15 13:06 millert
4688 * match.c: Use runas_matches in alias_matches() now that we have
4691 2004-11-15 13:00 millert
4693 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4695 2004-11-15 12:33 millert
4697 * gram.y, match.c: Use ALIAS for the member type when storing an
4698 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4699 match.c relies on the more generic type. Expand runas_matches
4700 instead of calling user_matches() inside of it since
4701 user_matches() looks up USERALIASes, not RUNASALIASes.
4703 2004-11-15 12:05 millert
4705 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4708 2004-11-15 10:53 millert
4710 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4711 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4712 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4713 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4714 local error/warning functions like err/warn but that call an
4715 additional cleanup routine in the error case. This means we no
4716 longer need to compile a special version of alloc.o for visudo.
4718 2004-11-15 09:59 millert
4720 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4721 since the latter checks for "#uid".
4723 2004-11-15 09:53 millert
4725 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4726 db entries in 2 reb-black trees; one indexed by uid, the other by
4727 user name. The data returned from the cache should be considered
4728 read-only and is destroyed by sudo_endpwent().
4730 2004-11-15 09:50 millert
4732 * match.c: add cast to uid_t
4734 2004-11-15 09:49 millert
4736 * gram.y: missing free in alias_destroy
4738 2004-11-15 09:49 millert
4740 * redblack.c: Can't use rbapply() for rbdestroy since the
4741 destructor is passed a data pointer, not a node pointer.
4743 2004-11-14 23:06 millert
4745 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4746 versions of setpwent() and endpwent() that set/end the shadow
4749 2004-11-14 22:55 millert
4751 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4752 visudo.c: Store aliases in a red-black tree.
4754 2004-11-14 22:52 millert
4756 * Makefile.in, redblack.c, redblack.h: red-black tree
4759 2004-11-14 22:37 millert
4761 * visudo.c: Edit all sudoers file if there were unused or undefined
4762 aliases and we are in strict mode.
4764 2004-11-12 11:19 millert
4766 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4767 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4768 Bring back the "secure_path" Defaults option now that Defaults
4769 take effect before the path is searched.
4771 2004-11-11 12:22 millert
4773 * logging.c, parse.c: A user can always list their own entries,
4774 even with -u. Better error message when failing to list another
4777 2004-11-11 12:12 millert
4779 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4780 entries is now "-u otheruser -l". Only root or users with sudo
4781 "ALL" may list other user's entries.
4783 2004-11-11 11:30 millert
4785 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4788 2004-11-11 11:25 millert
4790 * env.c: strip CDPATH too
4792 2004-11-11 11:20 millert
4794 * env.c: strip exported bash functions from the environment.
4796 2004-10-27 12:16 millert
4798 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4799 variables for real commands and sudoedit. This avoids a
4800 confusing message when a user tries "sudo -l" or "sudo -v" and is
4803 2004-10-27 12:06 millert
4805 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4808 2004-10-26 18:39 millert
4810 * logging.c: Convert some bitwise AND to ISSET
4812 2004-10-26 18:29 millert
4814 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4816 2004-10-26 18:29 millert
4818 * CHANGES, TODO: sync
4820 2004-10-26 18:28 millert
4822 * BUGS: new parser fixes most of the outstanding bugs
4824 2004-10-26 18:27 millert
4828 2004-10-26 18:26 millert
4830 * visudo.c: Rework for the new parser. Now checks for unused
4833 2004-10-26 18:25 millert
4835 * testsudoers.c: Rewrite for the new parser. Now supports a -d
4836 flag (dump) and adds a -h flag (host). It now defaults to the
4837 local hostname unless otherwise specified.
4839 2004-10-26 18:23 millert
4841 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4844 2004-10-26 18:22 millert
4846 * sudo.c: Update for new parse. We now call find_path() *after* we
4847 have updated the global defaults based on sudoers. Also adds
4848 support for listing other user's privs if you are root.
4850 2004-10-26 18:21 millert
4852 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4855 2004-10-26 18:20 millert
4857 * logging.c, logging.h: Add NO_STDERR flag.
4859 2004-10-26 18:19 millert
4861 * ldap.c: Split sudo_ldap_check() into three pieces:
4862 sudo_ldap_open(), udo_ldap_update_defaults() and
4863 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4864 default options, find the command in the user's path, and then
4865 check whether the user is allowed to run it. The important thing
4866 here is that the default runas user may be specified as a default
4867 option and that needs to be set before we search for the command.
4869 2004-10-26 18:17 millert
4871 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4874 2004-10-26 18:16 millert
4876 * defaults.h: Add prototype for update_defaults()
4878 2004-10-26 18:16 millert
4880 * defaults.c: Don't warn about line numbers now that we operate on
4881 a set of data structures (or LDAP) and not a file.
4883 2004-10-26 18:15 millert
4885 * config.h.in: No long use lsearch()
4887 2004-10-26 18:14 millert
4889 * Makefile.in: Update for new and changed file names.
4891 2004-10-26 18:14 millert
4893 * LICENSE: no more BSD lsearch.c
4895 2004-10-26 18:14 millert
4897 * match.c: foo_matches() routines now live in match.c Added
4898 user_matches(), runas_matches(), host_matches(), cmnd_matches()
4899 and alias_matches() that operate on the parsed sudoers file.
4901 2004-10-26 18:12 millert
4903 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4904 -> switch_buffer() WORD no longer needs to exclude '@' kill
4907 2004-10-26 18:10 millert
4909 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4910 Rewritten parser that converts sudoers into a set of data
4911 structures. This eliminates ordering issues and makes it
4912 possible to apply sudoers Defaults entries before searching for
4915 2004-10-26 18:09 millert
4917 * configure.in, lsearch.c, emul/search.h: We won't be using
4918 lsearch() any longer.
4920 2004-10-26 18:07 millert
4922 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4925 2004-10-26 16:09 millert
4927 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4928 visudo.man.in: regen
4930 2004-10-26 16:09 millert
4932 * visudo.pod: Update warnings to match new visudo
4934 2004-10-26 16:08 millert
4936 * sudoers.pod: The new parser doesn't have the old ordering
4939 2004-10-26 16:08 millert
4941 * sudo.pod: Document that -l now takes an optional username
4944 2004-10-25 13:44 millert
4946 * RUNSON: AIX 5.2.0.0 works
4948 2004-10-25 13:38 millert
4950 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4951 instead. Fixes a compilation problem with Solaris 9's native
4954 Set FLAG_MONITOR when needed.
4956 2004-10-23 13:32 millert
4958 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4959 match the traced process. Fixes relative paths.
4961 2004-10-21 12:31 millert
4963 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4965 2004-10-13 12:52 millert
4967 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4968 requires set_reuid() or setresuid()
4970 2004-10-13 12:46 millert
4972 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4973 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4974 saved uids; they aren't worth bothering with.
4976 2004-10-07 16:23 millert
4978 * glob.c: remove call to issetugid()
4980 2004-10-07 14:57 millert
4982 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4983 wildcards. Now that we use glob() the bug is fixed.
4985 2004-10-07 14:52 millert
4987 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4988 and stat each result that matches the basename of the user's
4989 command. This makes "cd /usr/bin ; sudo ./blah" work when
4990 sudoers allows /usr/bin/blah. Fixes bug #143.
4992 2004-10-07 14:27 millert
4994 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4995 for extended glob (GLOB_TILDE and GLOB_BRACE)
4997 2004-10-07 12:59 millert
4999 * config.h.in, configure, configure.in: Check for a glob() that
5000 supports GLOB_BRACE and GLOB_TILDE
5002 2004-10-07 12:51 millert
5004 * LICENSE: reference glob
5006 2004-10-07 12:50 millert
5008 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5009 some unneeded extensions removed.
5011 2004-10-05 17:26 millert
5013 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5014 fail. It probably means we are out of space in the stack gap...
5016 2004-10-05 17:20 millert
5020 2004-10-05 16:53 millert
5022 * mon_systrace.c: Take a stab at ldap sudoers support here.
5024 2004-10-05 15:13 millert
5026 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5027 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5028 inadvertanly kill itself.
5030 2004-10-05 14:21 millert
5032 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5034 2004-10-05 14:15 millert
5036 * mon_systrace.c: When modifying the environment, don't replace
5037 envp when we can get away with just rewriting pointers in the
5040 2004-10-05 13:46 millert
5042 * mon_systrace.c, mon_systrace.h: Add environment updating via
5043 STRIOCINJECT (if available).
5045 2004-10-05 10:22 millert
5047 * sudoers.cat, sudoers.man.in: regen
5049 2004-10-04 16:15 millert
5053 2004-10-04 16:15 millert
5055 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5058 2004-10-04 12:09 millert
5060 * mon_systrace.c: Include file is now mon_systrace.h
5062 2004-10-04 12:07 millert
5064 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5065 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5066 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5067 tracing, it is now "monitoring" which should be more a obvious
5068 name to non-hackers.
5070 2004-10-01 15:06 millert
5072 * mon_systrace.c, mon_systrace.h: Fix some XXX
5074 2004-10-01 14:30 millert
5076 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5077 1024 as the max # of entries (the max that systrace(4) allows).
5079 Only need to use SYSTR_POLICY_ASSIGN once
5081 Change check_syscall() -> find_handler() and have it return the
5082 handler instead of just running it. We need this since handler
5083 now have two parts: one part that generates and answer and
5084 another that gets called after the answer is accepted (to do
5087 Add some missing check_exec for emul execv
5089 2004-10-01 10:58 millert
5091 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
5092 $Sudo: ChangeLog,v 1.22 2009/07/12 01:12:29 millert Exp $ tags.
5094 2004-10-01 10:47 millert
5096 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5098 2004-09-30 20:46 millert
5100 * Makefile.in: add trace_systrace.o dependency
5102 2004-09-30 19:00 millert
5104 * configure, configure.in: Also look for systrace.h in
5107 2004-09-30 18:27 millert
5109 * mon_systrace.c, mon_systrace.h: Move all struct defs and
5110 prototypes into trace_systrace.h and mark all but
5111 systace_attach() static.
5113 2004-09-30 18:14 millert
5115 * mon_systrace.c, mon_systrace.h: Add support for tracing
5116 emulations. At the moment, all emulations are compiled in. It
5117 might make sense to #ifdef them in the future, though this
5118 impeeds readability.
5120 2004-09-30 17:07 millert
5122 * Makefile.in, configure.in, configure: rename systrace.c ->
5125 2004-09-30 15:58 millert
5127 * parse.yacc: Allow this to build with a K&R compiler again
5129 2004-09-30 13:58 millert
5133 2004-09-30 13:55 millert
5135 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5137 2004-09-30 13:44 millert
5139 * visudo.c: Exit() takes a negative value to indicate it was not
5142 2004-09-30 13:25 millert
5144 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5145 visudo.man.in: regen
5147 2004-09-30 13:22 millert
5149 * Makefile.in, visudo.c: Define Err() and Errx() that are like
5150 err() and errx() but call Exit() instead of exit(). Build
5151 private copy of alloc.o for visudo that calls Err() and Errx().
5153 2004-09-29 15:22 millert
5157 2004-09-29 15:22 millert
5161 2004-09-29 14:41 millert
5163 * visudo.c: Overhaul visudo for editing multiple files: o visudo
5164 has been broken out into functions (more work needed here) o
5165 each file is now edited before sudoers is re-parsed o if a
5166 #include line is added that file will be edited too
5168 TODO: o cleanup temp files when exiting via err() or errx() o
5169 continue breaking things out into separate functions
5171 2004-09-29 14:36 millert
5173 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5174 arg to open_sudoers that open_sudoers can use to indicate to the
5175 caller that the fd should not be closed when it is done with it.
5176 To be used by visudo to keep locked fds from being closed
5177 prematurely (and thus losing the lock).
5179 2004-09-29 14:33 millert
5181 * parse.yacc, sudo.c: Add errorfile global that contains the name
5182 of the file that caused the error.
5184 2004-09-29 14:30 millert
5186 * parse.lex: return COMMENT to yacc grammar for a #include line
5188 2004-09-29 14:29 millert
5190 * parse.lex: Remove us of unput() in favor of yyless() which is
5193 2004-09-29 14:28 millert
5195 * parse.yacc: Allow an empty sudoers file.
5197 2004-09-28 16:50 millert
5199 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5200 doesn't do it for us.
5202 2004-09-28 14:37 millert
5206 2004-09-28 14:36 millert
5208 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5209 shadow the "quiet" global.
5211 2004-09-28 14:33 millert
5213 * visudo.c: If a sudoers file includes other files, edit those too.
5214 Does not yes deal with creating the new includes files itself.
5216 2004-09-28 14:31 millert
5218 * testsudoers.c: init_parser now takes a path
5220 2004-09-28 14:31 millert
5222 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5223 dealing with multiple sudoers files: o init_parser() now takes a
5224 path used to populate the sudoers global o the sudoers global is
5225 used to print the correct file in yyerror() o when switching to
5226 a new sudoers file, perserve old file name and line number
5228 2004-09-28 14:29 millert
5230 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5231 meaningful now that we can have multiple sudoers files.
5233 2004-09-28 13:52 millert
5235 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5236 sudoers_lookup() so we start at the right file position when
5237 reading include files.
5239 2004-09-27 21:04 millert
5241 * sudoers.pod: document #include
5243 2004-09-27 20:47 millert
5247 2004-09-27 20:47 millert
5249 * parse.lex: Add max depth of 128 for the include stack to avoid
5252 Since yyerror() doesn't stop parsing, pass return values back to
5253 yylex and call yyterminate() on error.
5255 2004-09-27 14:06 millert
5257 * sudoers.pod: document tracing
5259 2004-09-27 14:05 millert
5261 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5264 2004-09-27 12:08 millert
5268 2004-09-27 12:03 millert
5270 * parse.lex: Add support for #include in sudoers (visudo support
5273 2004-09-27 12:02 millert
5275 * parse.yacc: make yyerror()'s argument const
5277 2004-09-27 12:02 millert
5279 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5281 2004-09-27 12:01 millert
5283 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5286 2004-09-26 12:35 millert
5288 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5289 version.h: Crank version
5291 2004-09-26 12:33 millert
5293 * Makefile.in, sudo.psf: Better HP-UX depot construction
5295 2004-09-25 17:08 millert
5297 * mon_systrace.c: o Made children global so check_exec() can lookup
5298 a child. o Replaced uid in struct childinfo with struct passwd *
5299 (for runas) o new_child() now takes a parent pid so the runas
5300 info can be inherited o Added find_child() to lookup a child by
5301 its pid o update_child() now fills in a struct passwd o Converted
5302 the big if/else mess in set_policy to a switch o Syscalls that
5303 change uid are now "ask" so we get SYSTR_MSG_UGID events
5305 2004-09-25 17:01 millert
5307 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5308 to lookup the shadow password. Will be used to a struct passwd
5309 that has the shadow password already filled in.
5311 2004-09-25 16:58 millert
5313 * mon_systrace.c: add missing increment of addr in read_string()
5315 2004-09-25 16:15 millert
5317 * mon_systrace.c: Remove bogus call to update_child() and some
5320 2004-09-25 16:11 millert
5322 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5323 initialized global for simplicity If STRIOCATTACH returns EBUSY
5324 we are already being traced Check for user_args == NULL in
5325 setproctitle() call Add missing calls to STRIOCANSWER
5327 2004-09-25 13:15 millert
5329 * sudo.c: g/c sudo_pwdup proto
5331 2004-09-24 20:21 millert
5333 * Makefile.in, sudo.psf: Add target for building a depot file
5335 2004-09-24 20:07 millert
5337 * mon_systrace.c: trim includes
5339 2004-09-24 14:11 millert
5341 * lex.yy.c, sudo.tab.h: regen
5343 2004-09-24 14:10 millert
5345 * INSTALL: document --with-systrace
5347 2004-09-24 14:10 millert
5349 * config.h.in, configure, configure.in: Add check for setproctitle
5351 2004-09-24 14:09 millert
5353 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5354 it can set the error code
5356 2004-09-24 13:30 millert
5358 * mon_systrace.c: systrace(4) support for sudo. On systems with
5359 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5360 patches) sudo can intercept exec calls and check the exec args
5361 against the sudoers file. In other words, sudo can now control
5362 subcommands and shell escapes.
5364 2004-09-24 13:17 millert
5366 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5368 2004-09-24 13:15 millert
5370 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5371 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5373 2004-09-24 13:13 millert
5375 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5376 close on exec flag instead.
5378 2004-09-24 13:11 millert
5380 * def_data.c, def_data.h, def_data.in: Add trace option
5382 2004-09-23 20:24 millert
5384 * Makefile.in: Add systrace
5386 2004-09-23 20:23 millert
5388 * INSTALL: SunOS /bin/sh blows up with configure
5390 2004-09-23 20:23 millert
5392 * configure, configure.in: Include sys/param.h before systrace.h
5394 2004-09-23 20:15 millert
5398 2004-09-23 20:15 millert
5400 * pathnames.h.in: _PATH_DEV_SYSTRACE
5402 2004-09-23 20:14 millert
5404 * configure.in: line up options in --help
5406 2004-09-23 20:11 millert
5408 * config.h.in, configure.in: Add --with-systrace
5410 2004-09-23 13:35 millert
5414 2004-09-23 13:35 millert
5416 * aclocal.m4, configure.in: make this work with autoconf-2.59
5418 2004-09-16 12:58 millert
5420 * sudo_edit.c: Simplify logic around open & stat of files and do
5421 sanity on edited file even if we lack fstat (still racable but
5424 2004-09-15 18:47 millert
5426 * HISTORY: Add support url
5428 2004-09-15 16:11 millert
5430 * Makefile.in: versino 1.6.8p1
5432 2004-09-15 15:20 millert
5434 * CHANGES: more changes for 1.6.8p1
5436 2004-09-15 15:18 millert
5438 * version.h: 1.6.8p1
5440 2004-09-15 12:16 millert
5442 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5443 something other than a regular file.
5445 2004-09-14 20:55 aaron
5449 2004-09-14 20:21 aaron
5451 * INSTALL: document --with-ldap-conf-file
5453 2004-09-14 17:43 millert
5455 * CHANGES, ins_csops.h: political correctness strikes again
5457 2004-09-14 15:09 millert
5461 2004-09-12 19:50 millert
5463 * Makefile.binary.in, Makefile.in: Install sudoedit man link
5465 2004-09-12 14:25 millert
5467 * INSTALL: Update PAM note and mention where HP-UX users can
5468 download gcc binaries.
5470 2004-09-12 12:08 millert
5472 * Makefile.in: libtool wants to install stuff from .libs so fake
5473 one up for binary installations.
5475 2004-09-12 11:53 millert
5477 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5478 -f set LIBTOOL correctly
5480 2004-09-12 11:53 millert
5482 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5483 sudoedit link instead of using ln -f
5485 2004-09-12 10:22 millert
5487 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5488 Makefile.binary.in for config.status substitution Add support for
5489 installing noexec bits
5491 2004-09-12 10:21 millert
5493 * Makefile.in: Copy noexec bits into binary dists too No longer use
5494 my old arch script for making binary dists
5496 2004-09-12 09:36 millert
5498 * Makefile.binary: Install sudoedit link.
5500 2004-09-11 12:25 millert
5502 * emul/utime.h: avoid __P so there is no need for compat.h to be
5505 2004-09-11 12:24 millert
5507 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5509 2004-09-10 12:31 millert
5511 * compat.h: Fix Solatis futimes macro
5513 2004-09-09 11:02 millert
5515 * sudo_edit.c: Rename ots -> omtim for improved readability.
5517 2004-09-08 14:38 millert
5519 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5520 keep the temp file open; re-opening it with the invoking user's
5523 2004-09-08 14:36 millert
5527 2004-09-08 14:35 millert
5529 * sudo.cat, sudo.man.in: regen
5531 2004-09-08 14:34 millert
5533 * sudo.pod: back out revision 1.70; it is no long applicable
5535 2004-09-08 11:57 millert
5537 * env.c: Let the loader initialize nep
5539 2004-09-08 11:49 millert
5541 * configure, configure.in, config.h.in: Removed unneed check for
5542 fchown Add check for gettimeofday Move autoheader template stuff
5543 into separate AH_TEMPLATE lines
5545 2004-09-08 11:48 millert
5547 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5548 timespec throughout.
5550 2004-09-08 11:47 millert
5552 * Makefile.in: gettime.[co]
5554 2004-09-08 11:47 millert
5556 * gettime.c: function to return the current time in a struct
5559 2004-09-08 10:51 millert
5561 * utimes.c: Not a darpa-sponsored file.
5563 2004-09-07 16:36 millert
5565 * compat.h, config.h.in, configure, configure.in: Add a check for
5566 struct timespec and provide it for those without.
5568 2004-09-07 15:56 millert
5570 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5571 st_mtim and st_mtimespec and add macros for pulling the mtime sec
5572 and nsec out of struct stat. These are used in sudo_edit() to
5573 better tell whether or not the file has changed.
5575 2004-09-07 15:55 millert
5577 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5578 param to touch() for nsec
5580 2004-09-07 14:06 millert
5582 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5583 have to chown the file later. Only touch() the temp file if we
5584 can do it via the file descriptor. Don't check for modification
5585 of the temp file if we lack fstat(). Catch errors read()ing the
5588 2004-09-07 14:04 millert
5590 * fileops.c: If path is NULL and fd == -1 return -1.
5592 2004-09-07 13:31 millert
5594 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5595 ones we opened so just close those in the child.
5597 2004-09-07 13:14 millert
5599 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5600 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5601 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5602 in touch(), emulating as needed. Not all systems are able to
5603 support setting the times of an fd so touch() takes both an fd
5604 and a file name as arguments.
5606 2004-09-06 21:12 aaron
5610 2004-09-06 16:46 millert
5612 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5613 visudo.man.in: regen
5615 2004-09-06 16:45 millert
5617 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5618 re-order some of the sections to match the order we use in
5621 2004-09-06 15:05 aaron
5623 * env.c: Openldap ~/.ldaprc fix
5625 2004-09-06 12:18 millert
5627 * sudo.pod: Talk about how the editor must write its changes to the
5628 original file and not just use rename(2).
5630 2004-09-06 12:12 millert
5634 2004-09-06 12:11 millert
5636 * sudo_edit.c: Keep the temp file open instead of re-opening after
5637 the editor has exited.
5639 2004-09-06 12:10 millert
5641 * sample.pam: Update for current redhat/fedora core.
5643 2004-09-02 21:56 aaron
5645 * README.LDAP: tls_ examples
5647 2004-09-02 00:03 aaron
5649 * ldap.c: config tls_* options
5651 2004-08-29 11:39 millert
5653 * configure, configure.in: No need for -lcrypt when using pam.
5655 2004-08-26 23:57 millert
5659 2004-08-26 23:44 aaron
5661 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5662 option to override LDAP_CONF
5664 2004-08-26 22:08 aaron
5666 * ldap.c: cleanup debug message
5668 2004-08-26 19:29 aaron
5670 * README.LDAP: more config info
5672 2004-08-24 14:01 millert
5674 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5675 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5676 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5677 longer use gross statics in command_matches(). Also rename some
5678 variables for improved clarity.
5680 2004-08-21 14:33 millert
5682 * INSTALL: document HP's crippled compiler deficiency.
5684 2004-08-21 14:25 millert
5686 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5687 descriptions. Noticed by Norihiko Murase.
5689 2004-08-21 14:20 millert
5691 * configure, configure.in: --with-noexec takes an optional PATH
5694 2004-08-21 14:20 millert
5696 * INSTALL: document --with-noexec
5698 2004-08-17 16:21 millert
5700 * RUNSON, TODO: sync
5702 2004-08-17 15:11 millert
5704 * sudo_edit.c: Better warning message when sudoedit is unable to
5705 write to the destination file.
5707 2004-08-17 14:53 millert
5709 * sudo.cat, sudo.man.in: regen
5711 2004-08-17 14:53 millert
5713 * sudo.pod: Don't italicize the string "sudoedit"
5715 2004-08-16 18:45 millert
5717 * HISTORY: Mention GratiSoft.
5719 2004-08-11 14:29 millert
5721 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5724 2004-08-09 19:04 millert
5726 * config.guess: Correct OpenBSD mips support
5728 2004-08-09 17:28 millert
5730 * config.guess: Add OpenBSD/mips
5732 2004-08-06 23:43 aaron
5734 * README.LDAP: More behavior notes
5736 2004-08-06 23:36 aaron
5738 * README.LDAP: Updates on current behavior
5740 2004-08-06 19:56 millert
5742 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5743 no difference to formatted files).
5745 2004-08-06 19:48 millert
5749 2004-08-06 19:42 millert
5751 * sudo.c: Consistency. Use same error for bad -u #uid when
5752 targetpw is set as we do when a bad -u username is specified.
5754 2004-08-06 19:33 millert
5756 * TODO: Add checksum idea from Steve Mancini
5758 2004-08-06 19:32 millert
5760 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5762 2004-08-06 19:31 millert
5764 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5765 via -u when targetpw is set.
5767 2004-08-06 19:24 millert
5769 * sudo.c: Error out when targetpw is enabled and sudo is run with
5770 -u #uid but #uid does not exist in the passwd database. We can't
5771 do target authentication when the target is not in passwd!
5773 2004-08-05 21:16 millert
5775 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5777 2004-08-05 21:14 millert
5779 * TODO: Some more todo for the next release.
5781 2004-08-05 21:13 millert
5783 * INSTALL: Make it clear that PAM should be used for DCE support
5786 2004-08-05 21:13 millert
5788 * sudoers.pod: o Document problems with wildcards and relative
5789 paths. o Make the order requirements more prominent. o Change a
5790 "set" to "reset" for clarity.
5792 2004-08-05 14:29 millert
5794 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5796 2004-08-02 22:34 aaron
5798 * ldap.c: reflect changes to parse.c
5800 2004-08-02 14:44 millert
5802 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5803 user_cmnd and user_args to command_matches(), just use the
5804 globals there. Since we keep state with statics anyway it is
5805 misleading to pretend that passing in different cmnd and
5806 cmnd_args will work.
5808 2004-08-02 14:40 millert
5810 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5811 pseudo-commands check for a '/' anywhere in cmnd, not just the
5814 2004-07-30 23:07 aaron
5816 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5817 <oblin@mandrakesoft.com>
5819 2004-07-30 22:41 aaron
5821 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5823 2004-07-30 22:06 aaron
5825 * README.LDAP: Sun One schema definition by
5826 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5828 2004-07-29 11:57 millert
5832 2004-07-23 16:44 millert
5836 2004-07-23 16:43 millert
5838 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5839 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5842 2004-07-08 10:20 millert
5844 * CHANGES: PAM change
5846 2004-07-07 21:04 aaron
5848 * ldap.c: Better debugging of ALL command
5850 2004-07-07 20:15 millert
5852 * parse.c: When matching for "sudoedit" in sudoers check both the
5853 command the user typed *and* the command that is listed in the
5856 2004-07-04 19:59 aaron
5858 * ldap.c: Added !command feature
5860 2004-06-28 10:51 millert
5862 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5865 2004-06-10 23:11 millert
5867 * LICENSE: License is ISC-style, not BSD-style
5869 2004-06-10 20:58 millert
5873 2004-06-10 16:54 millert
5875 * sudo.man.in, sudo.cat: regen
5877 2004-06-10 16:53 millert
5879 * sudo.pod: o Update some out of date bits to reality o Change the
5880 shell promt in examples to bourne-shell style o Clarify some
5881 details o Add a CAVEAT about "sudo cd /foo"
5883 2004-06-10 16:19 millert
5885 * check.c: Don't ask for a password if invoking user == target
5888 2004-06-10 12:32 millert
5890 * sudo.c: typo in comment
5892 2004-06-08 19:20 millert
5894 * sudoers.man.in, sudoers.cat: regen
5896 2004-06-08 19:19 millert
5898 * sudoers.pod: Expand on NOEXEC a little.
5900 2004-06-08 16:20 millert
5904 2004-06-08 15:58 millert
5906 * visudo.man.in, visudo.cat: regen
5908 2004-06-08 15:55 millert
5910 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5911 for runas_default being set after it has already been used.
5913 2004-06-08 13:53 millert
5915 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5916 has been set to TRUE or FALSE. This is more readable than
5917 checking for >=0 or < 0. Doesn't change the actual code
5920 2004-06-06 20:11 millert
5922 * sudoers.man.in, sudoers.cat: regen
5924 2004-06-06 20:07 millert
5926 * sudoers, sudoers.pod: Correct description of where Defaults specs
5929 2004-06-06 20:02 millert
5931 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5932 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5934 2004-06-06 19:58 millert
5936 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5937 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5938 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5939 Remove trailing spaces, no actual code changes.
5941 2004-06-06 16:22 millert
5943 * parse.yacc: Fix a >=0 that should be <0 that was improperly
5944 converted when UNSPEC was added.
5946 2004-06-06 15:54 millert
5948 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5949 to UNSPEC, not NOMATCH when resetting it.
5951 2004-06-06 15:39 millert
5953 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5955 2004-06-05 13:55 millert
5957 * README.LDAP: Update for configure changes
5959 2004-06-05 13:42 millert
5961 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5962 respectively) and use these in parse.yacc. Also in parse.yacc
5963 initialize the *_matches vars to UNSPEC and add two macros,
5964 SETMATCH and SETNMATCH for use when setting *_matches to a value
5965 that may be NOMATCH/UNSPEC/TRUE/FALSE.
5967 2004-06-05 11:17 millert
5969 * parse.yacc: Initialize runas to -2, not -1 since we need to be
5970 able to distinguish between the initialized value and the value
5971 of a non-match when passing along the runas value to multiple
5974 The result of this is that an unmatched runas is now set to -1,
5975 not 0. This is required now that parse.c treats a FALSE value
5976 for runas as being explicitly denied.
5978 2004-06-03 16:21 millert
5980 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5982 2004-06-03 12:37 millert
5984 * configure, configure.in: Add tests for what libs we need to link
5985 with for ldap and for whether or not lber.h needs to be
5986 explicitly included.
5988 2004-06-02 20:30 aaron
5990 * ldap.c: Solaris native LDAP build fix
5992 2004-06-01 16:56 millert
5994 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5995 use of an unset variable.
5997 2004-06-01 16:56 millert
5999 * sudo.h: Add prototype for sudo_ldap_list_matches
6001 2004-06-01 16:53 millert
6003 * compat.h, config.h.in, configure, configure.in: Better check for
6004 dirfd macro--we now set HAVE_DIRFD for the macro version too.
6005 Added check for dd_fd in `DIR' if no dirfd is found; this is now
6006 used to confitionally define the dirfd macro in compat.h.
6008 2004-06-01 16:51 millert
6010 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6013 2004-06-01 15:13 millert
6015 * compat.h, config.h.in, configure, configure.in: Add a check for a
6016 dirfd() function (like Linux) and add a dirfd macro in compat.h
6017 if there is no dirfd() function or macro.
6019 2004-06-01 14:59 millert
6021 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6024 2004-06-01 14:30 millert
6026 * CHANGES: Clarify closefrom() note.
6028 2004-06-01 12:51 millert
6030 * parse.c: When checking for a command in the directory, only copy
6033 2004-06-01 12:44 millert
6035 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6036 Solaris closefrom() and only close the descriptors listed
6039 2004-06-01 12:23 millert
6041 * alloc.c: compat.h guarantees INT_MAX is defined.
6043 2004-06-01 12:23 millert
6045 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6046 without it and remove definition of RLIM_INFINITY (now unused).
6048 2004-05-31 21:22 millert
6050 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6051 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6052 since the former is standardized.
6054 2004-05-31 19:18 millert
6058 2004-05-31 19:10 millert
6060 * RUNSON: Add some entries that were mailed in a while ago
6062 2004-05-31 14:16 millert
6064 * closefrom.c: o sysconf returns a long, not an int. o check for
6065 negative return value from sysconf/getdtablesize and use
6066 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6067 without it (a fair guess...)
6069 2004-05-30 12:25 millert
6071 * UPGRADE: Mention change in parse order for RunAs entries.
6073 2004-05-30 12:15 millert
6077 2004-05-29 18:29 millert
6079 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6080 now takes an optional dir as a parameter
6081 o added check for ldap_initialize() and start_tls_s()
6083 2004-05-29 14:54 millert
6085 * README.LDAP: Fix some typos, word choice and formatting issues.
6087 2004-05-28 18:06 millert
6089 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6090 stdio and just use read/write as it is simpler.
6092 2004-05-28 16:27 millert
6094 * configure, configure.in: Remove hack overriding cross-compiler
6095 check. It should no longer be needed.
6097 2004-05-28 16:26 millert
6099 * compat.h: Remove select() compat bits since we no longer use
6102 2004-05-28 16:24 millert
6104 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6105 timeout for systems that don't fully/properly implement select().
6107 2004-05-27 19:14 millert
6111 2004-05-27 19:12 millert
6115 2004-05-27 19:12 millert
6117 * set_perms.c: Deal with systems that have no way of setting the
6118 effective uid such as nsr-tandem-nsk.
6120 2004-05-27 19:01 millert
6122 * configure, configure.in: Define NO_SAVED_IDS if we don't find
6125 2004-05-27 18:21 millert
6127 * config.h.in, configure, configure.in: Add back check for
6128 setreuid() since NSK doesn't have it.
6130 2004-05-27 15:57 millert
6132 * sudoers.cat, sudoers.man.in: regen
6134 2004-05-27 15:56 millert
6136 * BUGS, CHANGES: sync
6138 2004-05-27 15:55 millert
6140 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6141 user was explicitly denied and the command matched. This fixes a
6142 long-standing bug and makes: foo machine = (ALL)
6143 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6145 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6147 2004-05-27 15:52 millert
6149 * sudoers.pod: Clarify mail_noperm
6151 2004-05-19 21:25 aaron
6153 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6155 2004-05-17 18:32 millert
6157 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6158 sudoers.cat, visudo.cat: regen
6160 2004-05-17 18:31 millert
6164 2004-05-17 18:31 millert
6166 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6167 remembers these?) and add a minimal sudoedit example.
6169 2004-05-17 18:21 millert
6171 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6172 filesystem -> file system
6174 2004-05-17 18:19 millert
6176 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6178 2004-05-17 18:10 millert
6182 2004-05-17 17:57 millert
6184 * visudo.pod: remove my email addr
6186 2004-05-17 17:55 millert
6188 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6189 @mansectsu@ everywhere Make man page references links with L<>
6191 2004-05-17 16:51 millert
6193 * parse.lex: Accept quoted globbing characters and pass them
6194 verbatim for fnmatch()
6196 2004-05-17 16:50 millert
6198 * UPGRADE: Document that /tmp/.odus is gone.
6200 2004-05-17 16:28 millert
6202 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6203 /tmp/.odus as a possible timestamp dir unless specifically
6204 configured to do so. Instead, if no /var/run exists, use
6205 /var/adm/sudo or /usr/adm/sudo.
6207 2004-05-17 16:08 millert
6209 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6210 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6211 on patches from Tom Bates.
6213 2004-05-16 18:47 millert
6215 * CHANGES: There was no 1.6.7p6.
6217 2004-05-16 16:38 millert
6219 * BUGS, CHANGES: sync
6221 2004-05-16 16:36 millert
6223 * Makefile.in: add missing files to DISTFILES
6225 2004-05-16 16:23 millert
6227 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6229 2004-05-16 16:20 millert
6231 * Makefile.in: Fix some line wrap and update (c) year
6233 2004-04-28 15:05 aaron
6235 * README.LDAP: Build Note
6237 2004-04-06 22:03 aaron
6239 * Makefile.in: Fix install-dirs
6241 2004-04-04 20:27 millert
6243 * visudo.c: In Exit() when used as a signal handler, emsg is a
6244 pointer so sizeof() is wrong so make it a #define instead. Also
6245 avoid using a negative exit value. Found by Aaron Campbell
6247 2004-03-24 18:23 millert
6249 * sudoers.pod: Remove bogus sentence about uids in a User_List.
6250 Document usernames vs. uid parsing in a Runas_List.
6252 2004-03-24 18:06 millert
6254 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6255 the user specified a uid with the -u flag and the uid exists in
6256 the passwd file, set runas_user to the name, not the uid.
6258 When comparing usernames in sudoers, if a name is really a uid
6259 (starts with '#') compare it numerically to pw_uid.
6261 2004-03-22 13:35 millert
6263 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6265 2004-02-28 18:54 aaron
6267 * CHANGES, config.h.in, ldap.c: Added start_tls support
6269 2004-02-14 18:04 millert
6271 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6272 def_data.c, def_data.h to PARSESRCS.
6274 2004-02-14 10:13 aaron
6276 * strlcat.c, strlcpy.c: Un-Fix last license munge
6278 2004-02-13 16:37 millert
6280 * CHANGES, RUNSON, TODO: checkpoint
6282 2004-02-13 16:37 millert
6284 * lex.yy.c, configure: regen
6286 2004-02-13 16:36 millert
6288 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6289 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6290 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6291 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6292 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6293 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6294 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6295 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6296 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6297 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6298 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6299 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6300 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6301 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6302 emul/search.h, emul/utime.h: More to a less restrictive,
6305 2004-02-12 21:08 aaron
6307 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6308 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6309 sudoers2ldif: Merged in LDAP Support
6311 2004-02-08 15:53 millert
6313 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6316 2004-02-06 18:08 millert
6318 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6319 already 0 so set the euid first, then just call setuid(0) to set
6322 2004-02-06 14:52 millert
6324 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6325 appropriate instead of seteuid() which may not exist.
6327 2004-02-04 14:58 millert
6331 2004-02-03 23:38 millert
6333 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6334 --with-pc-insults configure option
6336 2004-02-03 23:32 millert
6338 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6340 2004-02-01 15:45 millert
6342 * sudo.man.in, sudoers.man.in: regen
6344 2004-02-01 15:44 millert
6346 * sudoers.pod: Add a note that noexec is not a cure-all.
6348 2004-02-01 15:20 millert
6350 * sudoers.pod: Mention that disabling "root_sudo" is pretty
6353 2004-02-01 15:20 millert
6355 * configure, configure.in: Substitute for root_sudo in sudoers.pod
6357 2004-02-01 15:03 millert
6359 * sudo.pod: Add sudoedit to the NAME section
6361 2004-02-01 15:00 millert
6363 * sudoers.pod: Document that fact that setting ignore_dot in
6364 sudoers has no effect due to the fact that find_path() is called
6365 *before* sudoers is read.
6367 2004-01-29 19:50 millert
6369 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6371 2004-01-29 19:42 millert
6373 * BUGS, CHANGES, TODO: sync
6375 2004-01-29 19:42 millert
6377 * sudo.man.in: regen
6379 2004-01-29 19:41 millert
6381 * sudo.pod: Clarify that when sudo is run by root with the
6382 SUDO_USER variable set, the sudoers lookup happens for root and
6383 not the SUDO_USER user.
6385 2004-01-29 17:33 millert
6387 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6388 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6389 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6391 2004-01-29 16:22 millert
6393 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6395 2004-01-29 16:15 millert
6397 * sudo.c: Don't look at prev_user until after we've parsed sudoers
6398 and done the password check. That way, if sudo/sudoedit is run
6399 from a root process that was invoked by sudo, we check sudoers
6400 for root, not the previous user. This makes sudoedit much more
6401 useful and means that for the sudo case, we get correct logging
6402 on who actually ran the command.
6404 2004-01-22 19:22 millert
6406 * sudo_edit.c: Add a comment describing why we need to be notified
6407 about our child stopping.
6409 2004-01-22 16:06 millert
6411 * def_data.c, def_data.in: Update the noexec variable descriptions
6413 2004-01-22 14:18 millert
6415 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6418 2004-01-22 12:14 millert
6420 * sudo_noexec.c: Alas, all the world does not go through execve(2).
6421 Many systems still have an execv(2) system call, Linux 2.6
6422 provides fexecve(2) and it is not uncommon for libc to have
6423 underscore ('_') versions of the functions to be used internally
6424 by the library. Instead of stubbing all these out by hand,
6425 define a macro and let it do the work. Extra exec functions
6426 pointed out by Reznic Valery.
6428 2004-01-21 21:57 millert
6430 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6431 Because we do a fork() first we need to be notified when the
6432 child has been stopped and then send that same signal to ourself
6433 so the shell can do its job control thing.
6435 2004-01-21 21:44 millert
6437 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6438 systems out there that want to run sudo that still don't support
6439 these we can try to deal with that later.
6441 2004-01-21 20:03 millert
6445 2004-01-21 20:00 millert
6447 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6450 2004-01-21 19:08 millert
6452 * configure, configure.in: fix typo
6454 2004-01-21 19:02 millert
6456 * config.h.in, configure.in: Add SET/CLR/ISSET
6458 2004-01-21 18:55 millert
6460 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6461 Pretty print the long usage() line to not wrap (assumes 80 char
6464 2004-01-21 18:01 millert
6466 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6467 is implied and no other flags are permitted.
6469 2004-01-21 18:00 millert
6471 * sudo.h: Add a new flag, -e, that makes it possible to give users
6472 the ability to edit files with the editor of their choice as the
6473 invoking user, not the runas user. Temporary files are used for
6474 the actual edit and the temp file is copied over the original
6475 after the editor is done.
6477 2004-01-21 17:25 millert
6479 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6480 flag, -e, that makes it possible to give users the ability to
6481 edit files with the editor of their choice as the invoking user,
6482 not the runas user. Temporary files are used for the actual edit
6483 and the temp file is copied over the original after the editor is
6486 2004-01-21 17:06 millert
6488 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6489 variables is set, use that to determine the invoking user's true
6490 identity. That way the proper info gets logged by someone who
6491 has done "sudo su" but still uses sudo to as root. We can't do
6492 this for non-root users since that would open up a security hole,
6493 though perhaps it would be acceptable to use getlogin(2) on OSes
6494 where this a system call (and doesn't just look in the utmp
6497 2004-01-21 16:58 millert
6499 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6501 2004-01-21 16:57 millert
6503 * configure, config.h.in, configure.in: Add check for fchown(2)
6505 2004-01-20 14:22 millert
6507 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6508 set_runaspw. It is far to late to set NewArgv[0] there and will
6509 have no effect anyway as cmnd and safe_cmnd have already been
6512 2004-01-20 14:18 millert
6514 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6517 2004-01-18 20:17 millert
6519 * env.c, sudo.c: In -i mode always set new environment based on the
6520 runas user's passwd entry.
6522 2004-01-18 17:56 millert
6524 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6525 section with usage() in sudo.c. Also sort the flags in the
6528 2004-01-18 17:55 millert
6530 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6531 patches from David J. MacKenzie o Sort the flags in the usage
6534 2004-01-18 17:22 millert
6536 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6539 2004-01-17 16:34 millert
6541 * sudo.c: Change euid to runas user before calling find_path().
6542 Unfortunately, though runas_user can be modified in sudoers we
6543 haven't parsed sudoers yet.
6545 2004-01-17 16:25 millert
6547 * sudoers.man.in, sudoers.pod: Add missing defintion of
6548 Parameter_List and use single pipes in the Defaults EBNF
6551 2004-01-17 13:49 millert
6553 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6554 don't want to reset the contents of runas_pw if the user
6555 specified a user via the -u flag.
6557 Avoid unnecessary passwd lookups in set_authpw(). In most cases
6558 we already have the info in runas_pw.
6560 2004-01-16 18:16 millert
6562 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6565 2004-01-16 18:12 millert
6567 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6569 2004-01-16 18:10 millert
6571 * parse.c: If we can't stat the command as root, try as the runas
6574 2004-01-16 18:09 millert
6576 * testsudoers.c, visudo.c: Add stub set_runaspw() function
6578 2004-01-16 18:09 millert
6580 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6581 will be used as a callback to update runas_pw when the runas user
6584 2004-01-16 18:07 millert
6586 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6588 2004-01-16 18:05 millert
6590 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6591 a PERM_RUNAS that just changes the euid.
6593 2004-01-16 18:04 millert
6595 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6596 allocate memory in one chunk for easy free()ing. Also change it
6597 from static to extern.
6599 2004-01-16 18:03 millert
6601 * defaults.c, defaults.h: Add callback support
6603 2004-01-16 18:02 millert
6605 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6606 it for runas_default
6608 2004-01-15 15:13 millert
6610 * auth/fwtk.c: Add support for chalnecho and display server
6611 responses used by fwtk >= 2.0
6613 2004-01-12 18:39 millert
6615 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6617 2004-01-12 14:03 millert
6619 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6620 sudo.h: Use closefrom() instead of doing the equivalent inline.
6622 2004-01-12 13:55 millert
6624 * closefrom.c: closefrom(3) for systems w/o it
6626 2004-01-09 16:29 millert
6628 * sudoers.man.in: Update from .pod file.
6630 2004-01-09 16:26 millert
6632 * configure, configure.in: Substitute noexec_file for the sudoers
6635 2004-01-09 16:24 millert
6637 * sudo.man.in, sudo.pod: Mention noexec
6639 2004-01-09 16:16 millert
6641 * sudoers.man.in, sudoers.pod: Document noexec
6643 2004-01-09 14:38 millert
6645 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6646 definition from config.h to pam.c where it belongs. We can't
6647 have this in config.h since that gets included too early.
6649 2004-01-09 14:35 millert
6651 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6652 implementations put their headers in /usr/include/pam instead of
6653 /usr/include/security.
6655 2004-01-09 14:32 millert
6657 * configure.in: I missed changing the EXEC macro -> EXECV here when
6658 I changed this in config.h.in and sudo.c a while ago.
6660 2004-01-09 13:15 millert
6662 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6664 2004-01-09 03:29 millert
6666 * configure, configure.in: o merge the hpux case entries into a
6667 single entry w/ its own sub-case statement. o HP-UX >= 11
6668 support getspnam(), use it in preference to getprpwuid()
6670 2004-01-09 02:58 millert
6672 * configure, configure.in: eval $shrext so that it expands nicely
6675 2004-01-09 02:50 millert
6677 * Makefile.in: Don't lie about making a module, it does the wrong
6680 2004-01-09 02:49 millert
6682 * ltmain.sh: Remove requirement that libs must begin with "lib".
6683 They don't when we point directly at the lib using LD_PRELOAD or
6686 2004-01-09 02:01 millert
6688 * acsite.m4: Disable support for c++, f77 and java. We don't need
6689 it, it takes a lot of time, and it hosed our check for shared lib
6692 2004-01-09 02:00 millert
6696 2004-01-09 02:00 millert
6698 * configure.in: Call AC_ENABLE_SHARED and check the status of
6699 enable_shared to know when shared libs are available.
6701 2004-01-09 01:37 millert
6703 * acsite.m4: Duh, OpenBSD suports shared libs too
6705 2004-01-09 01:18 millert
6707 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6710 2004-01-09 01:15 millert
6712 * configure, configure.in: o No need to check for sed, libtool
6713 config does that for us o move check for --with-noexec until
6714 after libtool magic is run so we can use $can_build_shared and
6717 2004-01-09 01:14 millert
6719 * ltmain.sh: Don't print a bunch of crap about library installs
6720 since we are not really installing a library.
6722 2004-01-09 00:38 millert
6724 * env.c: Make format_env() varargs Add noexec support for Darwin,
6725 MacOS X, Irix, and Tru64
6727 2004-01-09 00:32 millert
6729 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6730 changes: o no ldconfig in the finish step o assume no libprefix
6731 or version is needed
6733 2004-01-09 00:15 millert
6735 * sudo_noexec.c: Fix compilation under K&R
6737 2004-01-06 09:31 millert
6739 * CHANGES: checkpoint
6741 2004-01-06 09:28 millert
6743 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6744 noexec functionality
6746 2004-01-06 01:42 millert
6748 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6749 issue with generated code.
6751 2004-01-05 16:10 millert
6753 * def_data.c, def_data.h, def_data.in: Move the environment
6754 defaults to the end and shorten a few of the descriptions.
6756 2004-01-05 15:05 millert
6758 * configure.in, configure: no shared libs on ultris or convexos
6760 2004-01-05 15:03 millert
6762 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6763 object using libtool; could use some cleanup.
6765 2004-01-05 14:59 millert
6767 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6769 2004-01-05 14:56 millert
6771 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6772 that order is not important.
6774 2004-01-05 12:15 millert
6776 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6777 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6779 2004-01-04 22:58 millert
6781 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6782 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6783 option. The default value of noexec_file is set to this.
6785 2004-01-04 21:48 millert
6787 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6788 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6789 support for preloading a shared object containing a dummy
6790 execve() function that just sets error and returns -1. This adds
6791 a "noexec_file" option to load the filename as well as a "noexec"
6792 flag to enable it unconditionally. There is also a NOEXEC tag
6793 that can be attached to specific commands and an EXEC tag to
6796 2004-01-04 21:40 millert
6798 * mkdefaults: add missing newline to usage statement
6800 2004-01-04 20:39 millert
6802 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6804 2004-01-04 20:16 millert
6806 * logging.c: Don't truncate usernames to 8 characters in the log
6809 2004-01-04 20:13 millert
6811 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6813 2004-01-04 20:12 millert
6815 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6816 sudoers.pod: Add a new option, lecture_file, that can be used to
6817 point to a custom sudo lecture.
6819 2003-12-31 17:46 millert
6821 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6822 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6823 zero_bytes() function to do the equivalent of bzero in such a way
6824 that will heopfully not be optimized away by sneaky compilers.
6826 2003-12-31 13:35 millert
6828 * err.c: Use #ifdef __STDC__, not #if __STDC__.
6830 2003-12-30 17:41 millert
6832 * mkdefaults: Always put at least one space between the def_* macro
6833 name and its definition.
6835 2003-12-30 17:34 millert
6837 * configure, configure.in: Adjust code for --without-lecture to
6840 2003-12-30 17:33 millert
6842 * visudo.man.in: regen after pasto fix
6844 2003-12-30 17:31 millert
6846 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6847 from a flag to a tuple.
6849 2003-12-30 17:31 millert
6851 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6852 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6853 support for tuples in def_data.in; these are implemented as an
6854 enum type. Currently there is only a single tuple enum but in
6855 the future we may have one tuple enum per T_TUPLE entry in
6856 def_data.in. Currently listpw, verifypw and lecture are tuples.
6857 This avoids the need to have two entries (one ival, one str) for
6858 pwflags and syslog values.
6860 lecture is now a tuple with the following values: never, once,
6863 We no longer use both an int and string entry for syslog
6864 facilities and priorities. Instead, there are logfac2str() and
6865 logpri2str() functions that get used when we need to print the
6868 2003-12-30 17:20 millert
6870 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6871 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6872 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6873 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6874 auth/sudo_auth.c: Create def_* macros for each defaults value so
6875 we no longer need the def_{flag,ival,str,list,mode} macros (which
6876 have been removed). This is a step toward more flexible data
6877 types in def_data.in.
6879 2003-12-30 15:55 millert
6883 2003-12-22 21:18 millert
6885 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6886 unusual for users to place "sudo -k" in a .logout file which can
6887 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6888 daemon has died. Previously, this would result in useless mail
6891 2003-12-16 13:51 millert
6893 * visudo.pod: fix pasto in VISUAL description
6895 2003-12-09 22:09 millert
6899 2003-12-09 22:08 millert
6901 * CHANGES: checkpoint
6903 2003-12-09 22:02 millert
6905 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6908 2003-08-12 16:45 millert
6910 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6913 2003-06-28 21:31 millert
6915 * auth/pam.c: Fix a core dump on Solaris by preserving the
6916 pam_handle_t we used during authentication for pam_prep_user().
6917 If we didn't authenticate (ie: ticket still valid), we call
6918 pam_init() from pam_prep_user(). This is something of a hack; it
6919 may be better to change the auth API and add an auth_final()
6920 function that acts like pam_prep_user().
6922 2003-06-21 12:50 millert
6924 * set_perms.c: Add explicit declaration of printerr variable in
6925 function header (was defaulting to int which is OK but oh so K&R
6928 2003-06-09 19:00 millert
6930 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6932 2003-06-09 16:07 millert
6934 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6935 problem where the sudo process would spin eating up CPU until
6936 sendmail finished when it has to send mail.
6938 2003-05-30 16:22 millert
6940 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6943 2003-05-21 21:53 millert
6945 * parse.c: Don't assume that getgrnam() calls don't modify contents
6946 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6947 can happen. Based on a patch from Kirk Webb.
6949 2003-05-06 11:25 millert
6951 * configure.in: missing ;;
6953 2003-05-06 00:53 millert
6955 * configure.in: darwin has a broken setreuid() in at least some
6958 2003-05-06 00:31 millert
6960 * env.c: Fix an off by one error when reallocating the environment;
6963 2003-04-30 14:04 millert
6965 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6967 2003-04-28 19:30 millert
6969 * HISTORY: More info on the early days from Coggs.
6971 2003-04-21 14:47 millert
6973 * auth/kerb5.c: remove errant semicolon that prevented compilation
6976 2003-04-15 20:42 millert
6978 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6979 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6980 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6981 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6982 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6983 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6984 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6985 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6986 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6987 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6988 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6991 2003-04-15 20:25 millert
6993 * LICENSE: slightly different wording for the darpa credit
6995 2003-04-15 14:37 millert
6997 * LICENSE: Add DARPA credit
6999 2003-04-14 16:49 millert
7001 * auth/kerb5.c: Use krb5_princ_component() instead of
7002 krb5_princ_realm() for MIT Kerberos like we did before I messed
7005 Use krb5_principal_get_comp_string() to do the same thing w/
7006 Heimdal. I'm not sure if the component should be 0 or 1 in this
7009 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7010 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7011 should be a configure check for this I guess.
7013 2003-04-13 15:48 millert
7015 * TROUBLESHOOTING, config.h.in, configure, configure.in,
7016 sample.sudoers: builtin -> built-in; Jason McIntyre
7018 2003-04-13 15:45 millert
7020 * sudoers.pod: built in -> built-in; Jason McIntyre
7022 2003-04-09 16:14 millert
7024 * CHANGES: checkpoint for 1.6.7p3
7026 2003-04-09 16:14 millert
7028 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7029 Spencer. Amazingly, sudo source from 1985 is available via
7032 2003-04-09 16:13 millert
7034 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7035 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7036 for the RLIMIT_CORE restoration on some OSes.
7038 2003-04-04 12:46 millert
7040 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7042 2003-04-04 12:45 millert
7044 * config.h.in, configure, configure.in: Check for heimdal even if
7045 we found krb5-config and define HAVE_HEIMDAL.
7047 2003-04-03 22:04 millert
7049 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7050 The former is no longer defined by MIT kerb5 (though it used to
7051 be and indeed remains so in Heimdal).
7053 2003-04-03 10:16 millert
7055 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7056 duplicate) directories to "mkdir -p" since that seems to break on
7057 Tru64 Unix at least. This basically brings back what shipped
7060 2003-04-02 13:57 millert
7062 * auth/kerb5.c: Correct number of args to
7063 krb5_principal_get_realm() and fix an unclosed comment that hid
7066 2003-04-02 13:45 millert
7070 2003-04-02 13:45 millert
7072 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7073 configure.in, version.h: ++version
7075 2003-04-02 13:44 millert
7077 * configure.in: use krb5-config to determine Kerberos V details if
7080 2003-04-02 13:25 millert
7082 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7083 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7084 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7085 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7086 throughout. The main exception is openlog(). Since the admin
7087 may be filtering logs based on the program name in the log files,
7088 hard code this to "sudo".
7090 2003-04-02 13:16 millert
7092 * Makefile.in: Add getprogname.c and err.c
7094 2003-04-02 13:15 millert
7098 2003-04-02 13:15 millert
7100 * configure.in, config.h.in: Add checks for getprognam(),
7101 __progname and err.h
7103 2003-04-02 13:14 millert
7105 * err.c, emul/err.h: For systems withour err/warn functions.
7107 2003-04-02 13:14 millert
7109 * getprogname.c: For systems neither getprogname() nor __progname;
7112 2003-04-01 10:09 millert
7114 * CHANGES: checkpoint for 1.6.7p1
7116 2003-04-01 10:02 millert
7118 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7120 2003-04-01 09:58 millert
7122 * check.c: oflow detection in expand_prompt() was faulty (false
7123 positives). The count was based on strlcat() return value which
7124 includes the length of the entire string.
7126 2003-03-30 19:02 millert
7128 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7130 2003-03-24 16:09 millert
7132 * logging.c: g/c unused variable
7134 2003-03-24 11:06 millert
7138 2003-03-24 11:05 millert
7140 * configure.in: use man sections 8 and 5 for csops
7142 2003-03-21 18:11 millert
7146 2003-03-21 15:10 millert
7148 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7149 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7151 2003-03-21 14:02 millert
7155 2003-03-21 14:01 millert
7157 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7158 An alternate libpath may be specified or -blibpath support can be
7159 disabled. Also change conifgure such that -blibpath is not
7160 specified if no -L libpaths were added to SUDO_LDFLAGS.
7162 2003-03-20 22:05 millert
7164 * configure.in: add AIX blibpath support
7166 2003-03-20 20:28 millert
7168 * INSTALL, configure.in: --with-skey and --with-opie now take an
7169 option directory argument This obsoletes a --with-csops hack
7172 Also remove the remaining direct uses of "echo"
7174 2003-03-20 17:44 millert
7176 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7177 -lroken optional for KTH Kerberos IV and V.
7179 2003-03-20 14:42 millert
7181 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7182 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7185 2003-03-20 14:40 millert
7187 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7188 There is a new configure option, --with-rpath to control this
7191 2003-03-19 23:50 millert
7193 * configure.in: for kerb4 put libdes after libkrb on the link line
7195 2003-03-19 23:49 millert
7197 * auth/kerb4.c: typo
7199 2003-03-19 23:33 millert
7201 * configure.in: fix kerberos lib check when a path is specified
7203 2003-03-19 21:04 millert
7205 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7206 reapchild after sending mail instead of doing a conditional
7209 2003-03-19 16:20 millert
7213 2003-03-19 16:19 millert
7215 * configure.in: replace =DIR with [=DIR] where sensible
7217 2003-03-19 16:16 millert
7219 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7220 include/lib detection based on openssh's configure.in
7222 2003-03-19 15:58 millert
7224 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7227 2003-03-15 22:03 millert
7229 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7230 says username is 32 bytes.
7232 2003-03-15 21:18 millert
7234 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7235 snprintf, not sprintf
7237 2003-03-15 21:18 millert
7239 * auth/rfc1938.c: use snprintf
7241 2003-03-15 15:37 millert
7243 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7244 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7247 2003-03-15 15:31 millert
7249 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7250 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7251 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7252 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7253 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7256 2003-03-15 15:19 millert
7258 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7261 2003-03-15 15:17 millert
7265 2003-03-15 15:16 millert
7267 * configure.in: correct error messages for
7268 --with-sudoers-{mode,uid,gid}
7270 2003-03-15 15:10 millert
7272 * alloc.c: make the malloc(0) error specific to each function to
7273 aid tracking down bugs.
7275 2003-03-15 14:49 millert
7277 * alloc.c: deal with platforms where size_t is signed and there is
7278 no SIZE_MAX or SIZE_T_MAX
7280 2003-03-15 14:10 millert
7282 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7285 2003-03-15 13:02 millert
7287 * sudo.c: Use stat_sudoers macro so --with-stow can work
7289 2003-03-15 13:01 millert
7291 * INSTALL, config.h.in, configure, configure.in: Add support for
7292 --with-stow based on patches from Robert Uhl
7294 2003-03-15 12:51 millert
7296 * env.c: fix indentation
7298 2003-03-15 00:21 millert
7300 * configure.in: back out rev 1.352
7302 2003-03-14 20:11 millert
7306 2003-03-14 20:11 millert
7308 * parse.lex: use strlcpy, not strncpy
7310 2003-03-14 19:48 millert
7312 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7313 setusercontext() failure.
7315 2003-03-14 19:43 millert
7317 * logging.c: use pid_t
7319 2003-03-14 10:43 millert
7321 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7323 2003-03-14 10:35 millert
7325 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7327 2003-03-13 21:47 millert
7329 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7331 2003-03-13 21:38 millert
7335 2003-03-13 21:38 millert
7337 * configure.in: put -ldl after -lpam, not before; fixes static
7340 2003-03-13 21:17 millert
7342 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7345 2003-03-13 20:24 millert
7347 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7348 sudoers.cat, visudo.cat: regen
7350 2003-03-13 20:23 millert
7352 * Makefile.in: Preserve copyright notice from .pod file in .man.in
7355 2003-03-13 20:01 millert
7357 * visudo.pod: Add sudoers(5) to SEE ALSO
7359 2003-03-13 15:27 millert
7363 2003-03-13 15:27 millert
7365 * parse.lex: Don't assume libc can realloc() a NULL string. If
7366 malloc/realloc fails, make sure we just return; yyerror() is not
7369 2003-03-13 15:17 millert
7373 2003-03-13 15:17 millert
7375 * parse.lex: simplify fill_args a little and use strlcpy for
7378 2003-03-13 15:00 millert
7380 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7381 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7382 overflow. In all cases the strings were either pre-allocated to
7383 the correct size of length checks were done before the copy but a
7384 little paranoia can go a long way.
7386 2003-03-13 12:54 millert
7388 * sudo.h: Add strlc{at,py} protos
7390 2003-03-13 12:03 millert
7392 * env.c, interfaces.c: Use erealloc3()
7394 2003-03-13 12:00 millert
7398 2003-03-13 12:00 millert
7400 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7401 need >=). Use memcpy() instead of strcpy() in estrdup() so this
7404 2003-03-13 11:58 millert
7406 * sudo.c: snprintf() a uid as %lu, not %ld to match the
7407 MAX_UID_T_LEN test in configure.
7409 2003-03-13 11:56 millert
7411 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7414 2003-03-12 18:46 millert
7416 * sudo.c: Use snprintf() for paranoia
7418 2003-03-12 17:16 millert
7420 * parse.yacc: Use emalloc2 and erealloc3
7422 2003-03-12 17:08 millert
7424 * Makefile.in: strlc{at,py} for those w/o it
7426 2003-03-12 17:07 millert
7428 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7430 2003-03-12 17:07 millert
7432 * config.h.in, configure, configure.in: Add stlc{at,py} for those
7435 2003-03-12 16:51 millert
7437 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7440 2003-03-12 16:45 millert
7442 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7445 2003-03-12 16:41 millert
7447 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7448 bzero and with error/oflow checking.
7450 2003-03-12 16:23 millert
7452 * alloc.c: Error out on malloc(0); suggested by theo
7454 2003-03-09 19:34 millert
7456 * configure, configure.in: fix a typo; David Krause
7458 2003-03-07 10:46 millert
7460 * sudo.pod: fix typo
7462 2003-03-03 21:47 millert
7464 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7466 2003-03-01 13:20 millert
7468 * configure.in, config.h.in: not not; Anil Madhavapeddy
7470 2003-01-23 03:03 millert
7472 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7474 2003-01-20 16:13 millert
7476 * parse.yacc: Add some missing ';' rule terminators that bison
7479 2003-01-20 16:07 millert
7481 * config.sub: fix typo I introduced in last merge
7483 2003-01-20 15:59 millert
7485 * configure: regenerate with autoconf 2.57
7487 2003-01-20 15:58 millert
7489 * config.h.in: Add missing "$HOME"
7491 2003-01-20 15:57 millert
7493 * configure.in: Add some more square backets to make autoconf 2.57
7496 2003-01-20 14:39 millert
7498 * config.guess, config.sub, mkinstalldirs: Updates from
7501 2003-01-17 18:10 millert
7503 * lex.yy.c, sudo.tab.h: regen
7505 2003-01-17 18:09 millert
7507 * parse.lex, parse.yacc, sudoers.pod: Add support for
7510 2003-01-06 19:10 millert
7512 * visudo.c: fclose() yyin after each yyparse() is done and use
7513 fopen() instead of using freopen().
7515 2003-01-06 19:02 millert
7517 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7518 It looks like the issue is that yyrestart() does not reset the
7519 start condition to INITIAL which is an issue since we parse
7520 sudoers multiple times.
7522 2003-01-06 18:47 millert
7524 * parse.lex: Work around what appears to be a flex bug when dealing
7525 with files that lack a final newline before EOF. This adds a
7526 rule to match EOF in the non-initial states which resets the
7527 state to INITIAL and throws an error.
7529 2003-01-06 15:06 millert
7531 * visudo.c: o The parser needs sudoers to end with a newline but
7532 some editors (emacs) may not add one. Check for a missing
7533 newline at EOF and add one if needed. o Set quiet flag during
7534 initial sudoers parse (to get options) o Move yyrestart() call
7535 and always use freopen() to open yyin after initial sudoers
7538 2002-12-15 11:24 millert
7540 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7541 Want to set effective gid, not real gid, when reading sudoers.
7543 2002-12-15 11:08 millert
7545 * set_perms.c: don't compile set_perms_posix if we have setreuid or
7548 2002-12-14 14:21 millert
7550 * sudo.pod, sudoers.pod: document new prompt escapes
7552 2002-12-14 14:15 millert
7554 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7555 now gets collapsed to "%" as was originally intended. This also
7556 gets rid of lastchar (does lookahead instead of lookback) which
7557 should simplify the logic slightly.
7559 2002-12-13 13:20 millert
7561 * tgetpass.c: Write the prompt *after* turning off echo to avoid
7562 some password characters being echoed on heavily-loaded machines
7565 2002-12-13 13:09 millert
7567 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7569 2002-12-13 12:48 millert
7571 * configure.in: Fix IRIX fallout from name changes in man dir/sect
7572 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7575 2002-12-13 11:33 millert
7577 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7578 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7580 2002-11-28 18:43 millert
7582 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7585 2002-11-26 12:09 millert
7587 * sudo.c: fix typo in comment; Pedro Bastos
7589 2002-11-22 14:41 millert
7591 * INSTALL: document --disable-setresuid
7593 2002-11-22 14:41 millert
7595 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7596 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7597 optimizers from removing memset() calls.
7599 2002-11-22 14:11 millert
7601 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7604 2002-11-22 14:09 millert
7606 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7607 version based on setresuid() or setreuid() when possible since
7608 that allows us to support the stay_setuid option and we always
7609 know exactly what the semantics will be (various Linux kernels
7610 have broken POSIX saved uid support).
7612 2002-11-22 14:08 millert
7614 * config.h.in, configure: regen from configure.in
7616 2002-11-22 14:07 millert
7618 * configure.in: Add checks for setresuid() and a way to disable
7621 2002-11-22 14:05 millert
7623 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7624 or setre[ug]id(). The new set_perms stuff only uses things it
7627 2002-11-22 13:33 millert
7629 * sudo.c: Before exec, restore state of signal handlers to be the
7630 same as when we were initialy invoked instead of just reseting to
7631 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7632 patch from Paul Markham.
7634 2002-11-22 13:23 millert
7636 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7637 message when sudo is run by root and no_root_sudo is set
7639 2002-09-19 17:27 millert
7641 * README: update ftp link for bison
7643 2002-07-20 08:30 millert
7645 * set_perms.c: Error out if setusercontext() fails and the runas
7648 2002-05-20 16:51 millert
7650 * auth/securid5.c: Fix rcsid
7652 2002-05-20 16:50 millert
7654 * configure.in: Fix SecurID API test
7656 2002-05-17 13:20 millert
7658 * env.c: typo in comment
7660 2002-05-17 13:20 millert
7662 * configure.in: securid5 stuff needs pthreads. Just adding
7663 -lpthread is suboptimal but I don't see a better way at the
7666 2002-05-17 13:04 millert
7668 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7671 2002-05-17 13:02 millert
7673 * configure.in: Add check for SecurID 5.0 API
7675 2002-05-08 16:46 millert
7677 * strerror.c: We actually do still need config.h to get the 'const'
7678 definition for K&R C.
7680 2002-05-05 16:43 millert
7682 * configure: regen with autoconf 2.5.3
7684 2002-05-05 16:25 millert
7686 * configure.in: Don't set sysconfdir to '/etc' if the user has
7687 specified a --prefix.
7689 2002-05-05 16:14 millert
7691 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7692 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7695 2002-05-05 15:58 millert
7697 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7698 dump_defaults() knows how to dump lists.
7700 2002-05-04 21:31 millert
7702 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7703 INSTALL.binary, README: ++version
7705 2002-05-04 20:57 millert
7707 * sudoers.pod: document timestampowner
7709 2002-05-04 20:45 millert
7711 * check.c: Don't call set_perms() when doing timestamp stuff unless
7714 2002-05-04 20:43 millert
7716 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7717 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7720 2002-05-03 18:48 millert
7722 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7723 timestamp dirs. This allows the timestamp dir to be shared via
7724 NFS (though this is not recommended).
7726 2002-05-03 18:47 millert
7728 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7729 of the authentication timestamp dir"
7731 2002-05-02 15:40 millert
7733 * env.c: Don't try to pre-compute the size of the new envp, just
7734 allocate space up front and realloc as needed. Changes to the
7735 new env pointer must all be made through insert_env() which now
7736 keeps track of spaced used and allocates as needed.
7738 2002-04-26 15:12 millert
7742 2002-04-26 15:12 millert
7744 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7746 2002-04-25 11:36 millert
7748 * INSTALL.binary, README: ++version
7750 2002-04-25 11:35 millert
7752 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7753 visudo.man.in, configure: regen
7755 2002-04-25 11:31 millert
7757 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7759 2002-04-25 11:30 millert
7761 * check.c: The the loop used to expand %h and %u, the lastchar
7762 variable was not being initialized. This means that if the last
7763 char in the prompt is '%' and the first char is 'h' or 'u' a
7764 extra copy of the host or user name would be copied, for which
7765 space had not been allocated.
7767 2002-04-18 11:41 millert
7769 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7772 2002-04-18 11:39 millert
7774 * auth/afs.c: #undef VOID to get rid of an AFS warning
7776 2002-04-18 11:38 millert
7778 * env.c: Use easprintf instead of emalloc + sprintf for some
7781 2002-03-15 19:45 millert
7785 2002-03-15 19:44 millert
7787 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7788 Jepeway's email address so people don't bug him ;-)
7790 2002-03-11 22:19 millert
7792 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7793 and also call endgrent() at the same time.
7795 2002-02-21 22:23 millert
7797 * INSTALL: Make it clear which configure options take arguments.
7799 2002-01-25 13:38 millert
7801 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7802 is no RLIM_INFINITY, just pretend it is -1. This works because
7803 we only check for RLIM_INFINITY and do not set anything to that
7806 2002-01-22 11:43 millert
7808 * auth/pam.c: Zero and free allocated memory when there is a
7811 2002-01-21 22:37 millert
7813 * auth/bsdauth.c: Use sigaction() not signal()
7815 2002-01-21 22:26 millert
7817 * INSTALL: Mention that some linux kernels have broken POSIX saved
7820 2002-01-21 21:03 millert
7822 * CHANGES: checkpoint for 1.6.5p2
7824 2002-01-21 21:01 millert
7828 2002-01-21 21:01 millert
7830 * configure.in: Add --disable-setreuid flag
7832 2002-01-21 21:00 millert
7834 * INSTALL: Document new --disable-setreuid option and change
7835 description for --disable-saved-ids to match new error message.
7837 2002-01-21 21:00 millert
7839 * set_perms.c: fatal() now takes an argument that determines
7840 whether or not to call perror().
7842 2002-01-21 20:58 millert
7844 * PORTING, TROUBLESHOOTING: Update for new error messages from
7847 2002-01-21 17:46 millert
7849 * auth/pam.c: Make this compile w/o warnings
7851 2002-01-21 17:36 millert
7853 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7855 2002-01-21 17:25 millert
7857 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7858 was not zeroed after use when AIX authentication, BSD
7859 authentication, FWTK or PAM was in use.
7861 2002-01-20 14:21 millert
7863 * auth/pam.c: Avoid giving PAM a NULL password response, use the
7864 empty string instead. This avoids a log warning when the user
7865 hits ^C at the password prompt when PAM is in use.
7867 2002-01-19 19:46 millert
7869 * auth/pam.c: Don't check the return value of pam_setcred(). In
7870 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7871 not the return code for the setcred module. Because we haven't
7872 called pam_authenticate(), this is not set and so pam_setcred()
7873 returns PAM_PERM_DENIED.
7875 2002-01-19 19:43 millert
7877 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7880 2002-01-18 14:18 millert
7884 2002-01-18 14:18 millert
7886 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7887 has a bogus setreuid() o new NetBSD has a real setreuid() o add
7888 check for freeifaddrs() if getifaddrs() exists.
7890 2002-01-18 14:17 millert
7892 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7893 so add a test for that and if it is not present just use free().
7895 2002-01-17 11:30 millert
7897 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7899 2002-01-17 10:56 millert
7901 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7902 skeyaccess() denies access to normal passwords, not AUTH_FATAL
7903 (which just causes an exit).
7905 2002-01-17 10:35 millert
7907 * visudo.c: Don't use memory after it has been freed.
7909 2002-01-17 00:24 millert
7911 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7912 Patch from Phillip E. Lobbes
7914 2002-01-16 20:00 millert
7918 2002-01-16 19:53 millert
7920 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7922 2002-01-16 18:37 millert
7926 2002-01-16 18:37 millert
7928 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7931 2002-01-16 18:37 millert
7933 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7934 visudo.man.in: sudo version 1.6.5
7936 2002-01-16 16:28 millert
7938 * logging.c: o when invoking the mailer as root use a hard-coded
7939 environment that doesn't include any info from the user's
7940 environment. Basically paranoia.
7942 o Add support for the NO_ROOT_MAILER compile-time option and run
7943 the mailer as the user and not root if NO_ROOT_MAILER is
7946 2002-01-16 16:27 millert
7948 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7950 2002-01-16 16:26 millert
7954 2002-01-16 16:26 millert
7956 * version.h: version 1.6.5
7958 2002-01-16 16:26 millert
7960 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7961 option to run the mailer as the user and not root.
7963 2002-01-16 12:44 millert
7965 * CHANGES: checkpoint for 1.6.4p2
7967 2002-01-15 19:22 millert
7969 * PORTING: Mention the "seteuid(0): Operation not permitted"
7970 problem here too just for good measure.
7972 2002-01-15 18:43 millert
7974 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7975 preserved from the user's environment instead of being reset
7976 based on the passwd database when the "env_reset" option was
7977 used. Now it is reset as it should be.
7979 2002-01-15 17:47 millert
7983 2002-01-15 17:47 millert
7985 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7986 sudo.c: Add a configure option to turn off use of POSIX saved IDs
7988 2002-01-15 15:48 millert
7992 2002-01-15 15:48 millert
7994 * configure.in: add --with-efence option
7996 2002-01-15 15:39 millert
7998 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7999 problem where "sudo -l" would not work if always_set_home was
8002 2002-01-15 13:16 millert
8006 2002-01-15 13:16 millert
8008 * parse.lex: Quoted commas were not being treated correctly in
8009 command line arguments.
8011 2002-01-14 20:53 millert
8013 * sudo.c: o Move the call to rebuild_env() until after
8014 MODE_RESET_HOME is set. Otherwise, the set_home option has no
8017 o Fix use of freed memory when the "fqdn" flag is set. This was
8018 introduced by the fix for the "segv when gethostbynam() fails"
8019 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8020 not set so there is no need to check the "fqdn" flag in
8023 2002-01-14 20:45 millert
8025 * env.c: Add 'continue' statements to optimize the switch
8026 statement. From Solar.
8028 2002-01-13 13:42 millert
8030 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8032 2002-01-13 13:36 millert
8034 * sudoers.pod: Add caveat about stay_setuid flag
8036 2002-01-13 13:29 millert
8038 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8039 is not set, set all uids to 0 and use set_perms_fallback().
8041 2002-01-13 13:28 millert
8043 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8044 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8046 2002-01-13 13:27 millert
8048 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8049 mailer since we never want to run the mailer setuid.
8051 2002-01-12 17:55 millert
8053 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8054 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8056 2002-01-12 14:00 millert
8058 * Makefile.in, Makefile.binary: Fix mansect substitution
8060 2002-01-12 13:15 millert
8062 * Makefile.in: Substitute man sections in Makefile.binary
8064 2002-01-12 13:15 millert
8066 * Makefile.binary: Sync install targets with Makefile.in and
8067 substitute in man sections.
8069 2002-01-12 13:09 millert
8071 * INSTALL, INSTALL.binary: version is 1.6.4
8073 2002-01-12 12:59 millert
8075 * Makefile.in: Repair bindist target
8077 2002-01-12 11:43 millert
8079 * CHANGES: sync for 1.6.4
8081 2002-01-10 13:00 millert
8083 * install-sh: Fix case where neither whoami nor id are found
8085 2002-01-09 12:35 millert
8087 * install-sh: If neither whoami nor id exists, just assume we are
8090 2002-01-09 11:56 millert
8092 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8093 to be needed on AIX which for some reason isn't pulling in the
8096 2002-01-08 10:00 millert
8098 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8100 2002-01-08 09:21 millert
8102 * CHANGES: checkpoint
8104 2002-01-08 09:20 millert
8106 * sudo.c: Defer assigning new environment until right before the
8109 2002-01-08 09:08 millert
8111 * parse.c: kill extra blank line
8113 2002-01-07 13:59 millert
8117 2002-01-07 13:59 millert
8119 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8120 motorola gcc-derived compiler doesn't recognise -O2.
8122 2002-01-06 23:02 millert
8124 * HISTORY: Clarify origins of Root Group sudo a bit based on info
8125 from billp@rootgroup.com
8127 2002-01-02 22:41 millert
8131 2002-01-02 22:26 millert
8133 * CHANGES: checkpoint for 1.6.4rc1
8135 2002-01-02 17:40 millert
8137 * config.h.in: now generated via autoheader
8139 2002-01-02 17:40 millert
8143 2002-01-02 17:37 millert
8145 * compat.h: Move in some stuff that was previously in config.h.
8147 2002-01-02 17:36 millert
8149 * configure.in, aclocal.m4: Add info for autoheader.
8151 2002-01-01 16:53 millert
8153 * Makefile.in: o Add DESTDIR support
8154 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8157 2002-01-01 16:48 millert
8159 * install-sh: Add -M option (like -m but only for root) If we can't
8160 find "whoami", use "id" w/ some sed.
8162 2002-01-01 14:01 millert
8166 2002-01-01 14:00 millert
8168 * configure.in: allow user to always override mansectsu and
8171 2001-12-31 17:05 millert
8173 * mkinstalldirs: update from autoconf 2.52
8175 2001-12-31 17:03 millert
8177 * config.guess, config.sub: Update from autoconf 2.52
8179 2001-12-31 16:57 millert
8181 * configure: regen with autoconf 2.52
8183 2001-12-31 16:57 millert
8185 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8186 compiler in ANSI mode
8187 o Remove compiler-specific checks for HP-UX now that we use
8190 2001-12-31 12:19 millert
8192 * RUNSON: Checkpoint
8194 2001-12-31 12:18 millert
8196 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8197 for the target user; on Linux this often sets resource limits.
8198 o When calling pam_end(), try to convert the auth->result to a
8199 PAM_FOO value. This is a hack--we really need to stash the
8200 last PAM_FOO value received and use that instead.
8202 2001-12-31 12:18 millert
8204 * set_perms.c, sudo.h: o Add pam_prep_user function to call
8205 pam_setcred() for the target user; on Linux this often sets
8208 2001-12-31 00:53 millert
8210 * env.c: Fix off by one error in number of bytes allocated via
8211 malloc (does not affected any released version of sudo).
8213 2001-12-30 17:12 millert
8217 2001-12-30 17:12 millert
8219 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8220 variable w/o requiring that they be quoted.
8222 2001-12-30 14:26 millert
8224 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8225 quotes are needed when adding/deleting/assigning a single value
8228 2001-12-30 13:58 millert
8230 * Makefile.in: Don't rely on mkdefaults being executable, call perl
8233 2001-12-30 13:41 millert
8235 * parse.yacc: Remove some XXX that are no longer relevant.
8237 2001-12-30 13:40 millert
8239 * defaults.c: o Roll our own loop instead of using strpbrk() for
8240 better grokability o When adding to a list we must malloc() and
8241 use memcpy(), not strdup() since we must only copy len bytes
8244 2001-12-21 16:49 millert
8246 * parse.yacc: typo in comment
8248 2001-12-19 11:50 millert
8250 * CHANGES: checkpoint
8252 2001-12-19 10:56 millert
8256 2001-12-19 10:56 millert
8258 * configure.in: avoid the -g flag unless --with-devel was specified
8260 2001-12-19 10:04 millert
8262 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8265 2001-12-19 09:46 millert
8267 * Makefile.in: def_data.c was missing
8269 2001-12-18 12:42 millert
8271 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8272 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8275 2001-12-17 20:48 millert
8277 * TODO: Another TODO item
8279 2001-12-17 19:50 millert
8281 * sudoers: Add comment for Default section so folks know where it
8284 2001-12-17 18:56 millert
8286 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8289 2001-12-17 18:35 millert
8291 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8293 2001-12-17 18:33 millert
8295 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8296 o a User_List can not contain a uid
8297 o mention that the Defaults section should come after Alias
8298 definitions but before the user specifications
8300 2001-12-15 11:51 millert
8302 * sudoers.cat, sudoers.man.in: regen
8304 2001-12-15 11:51 millert
8306 * sudoers.pod: Fix listpw and verifypw sections, they were not
8307 being formatted properly.
8309 2001-12-15 11:39 millert
8311 * sudoers.cat, sudoers.man.in: regen
8313 2001-12-15 11:38 millert
8315 * sudoers.pod: fix typos
8317 2001-12-15 10:57 millert
8321 2001-12-15 10:57 millert
8323 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8326 2001-12-15 10:33 millert
8328 * README: Reference sudo.ws not courtesan.com
8330 2001-12-15 10:29 millert
8332 * PORTING: Add notes on shadow passwords
8334 2001-12-15 00:48 millert
8336 * BUGS: In list mode (sudo -l), characters escaped with a backslash
8337 are shown verbatim with the backslash.
8339 2001-12-15 00:44 millert
8341 * sudoers: Add simple examples from OpenBSD (Marc Espie)
8343 2001-12-15 00:40 millert
8345 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8348 2001-12-14 21:53 millert
8350 * CHANGES: minor prettyification
8352 2001-12-14 21:43 millert
8354 * CHANGES: Updated change log
8356 2001-12-14 21:27 millert
8358 * testsudoers.c: Fix CIDR handling here too.
8360 2001-12-14 21:21 millert
8362 * auth/pam.c: Apparently a NULL response is OK
8364 2001-12-14 21:19 millert
8366 * TODO: Checkpoint for upcoming beta release
8368 2001-12-14 21:17 millert
8370 * TROUBLESHOOTING: Many people believe that adding a runas spec
8371 should obviate the need for the -u flag. It does not.
8373 2001-12-14 21:11 millert
8375 * RUNSON: checkpoint update for upcoming 1.6.4 beta
8377 2001-12-14 20:44 millert
8379 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8380 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8383 2001-12-14 20:07 millert
8385 * PORTING: Add signals section
8387 2001-12-14 20:00 millert
8391 2001-12-14 20:00 millert
8393 * configure.in: Fix check for sigaction_t
8395 2001-12-14 19:45 millert
8397 * sudo.c: XXX - should call find_path() as runas user, not root.
8398 Can't do that until the parser changes though.
8400 2001-12-14 19:38 millert
8402 * sudo.c: If find_path() fails as root, try again as the invoking
8403 user (useful for NFS). Idea from Chip Capelik.
8405 2001-12-14 19:28 millert
8407 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8408 after pod file changes
8410 2001-12-14 19:24 millert
8412 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8413 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8414 Previously sudo would not call initgroups() if the target user
8415 was root. Now it always calls initgroups() unless the -P command
8416 line option or the "preserve_groups" sudoers option is set. Idea
8419 2001-12-14 18:38 millert
8421 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8423 2001-12-14 18:33 millert
8425 * logging.c: Fix compilation on K&C
8427 2001-12-14 18:14 millert
8431 2001-12-14 18:14 millert
8433 * configure.in: Add check for sigaction_t -- IRIX already defines
8434 this so don't redefine it.
8436 2001-12-14 17:15 millert
8438 * snprintf.c: fix typo
8440 2001-12-14 17:12 millert
8442 * interfaces.c: need stdlib.h here too
8444 2001-12-14 15:31 millert
8448 2001-12-14 15:31 millert
8450 * configure.in: Remove redundant checks for string.h, strings.h and
8453 2001-12-14 15:29 millert
8455 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8456 visudo.man.in: Regen from pod files
8458 2001-12-14 15:03 millert
8460 * BUGS: Update for 1.6.4
8462 2001-12-14 14:59 millert
8464 * configure, lex.yy.c: regen
8466 2001-12-14 14:56 millert
8468 * strerror.c: Return EINVAL if errnum > sys_nerr
8470 2001-12-14 14:54 millert
8472 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8473 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8474 sudo.pod, auth/sudo_auth.h: o Update copyright year
8476 2001-12-14 14:54 millert
8478 * configure.in: o Don't define STDC_HEADERS unconditionally for
8479 IRIX o Update copyright year
8481 2001-12-14 14:53 millert
8483 * README: update version
8485 2001-12-14 14:52 millert
8487 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8488 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8489 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8490 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8491 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8492 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8493 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8494 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8495 STDC_HEADERS define properly o Update copyright year
8497 2001-12-14 01:53 millert
8501 2001-12-14 01:53 millert
8503 * tgetpass.c: flags set in signal handlers should be volatile
8506 2001-12-14 01:52 millert
8508 * config.h.in, configure.in: Add checks for volatile and
8511 2001-12-14 01:42 millert
8513 * lex.yy.c, configure: regen
8515 2001-12-14 01:40 millert
8517 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8518 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8519 option since it cannot work with the existing parser.
8521 2001-12-14 01:26 millert
8523 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8525 2001-12-14 01:24 millert
8527 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8528 not listed in env_keep o If no PATH is in the environment use a
8529 default value o If TERM is not set in the non-reset case also
8530 give it a default value.
8532 2001-12-14 01:17 millert
8534 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8535 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8536 on systems that define in paths.h
8538 2001-12-14 01:15 millert
8540 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8541 skeyaccess(3) if it is present in libskey.
8543 2001-12-12 21:42 millert
8545 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8547 2001-12-12 21:24 millert
8549 * parse.lex: '\\' is a perfectly legal character to have in a
8550 command line argument.
8552 2001-12-12 20:24 millert
8554 * sudo.c: o Defer call to set_fqdn() until it is safe to use
8555 log_error() o Don't print errno string value if gethostbyname
8556 fails, it is not relevant
8558 2001-12-12 20:07 millert
8560 * parse.c: Fix CIDR -> in_addr_t conversion.
8562 2001-12-12 16:21 millert
8564 * sudoers.pod: Remove an extra "User_List" in the User_Spec
8565 definition From ybertrand AT snoopymail.com
8567 2001-12-12 16:00 millert
8569 * parse.c: Make 'listpw=never' work for users who are not
8570 explicitly mentioned in sudoers.
8572 2001-12-12 15:40 millert
8574 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8576 2001-12-12 15:34 millert
8578 * sudoers.pod: Document new list Defaults type and convert env_keep
8579 and env_delete to lists. Document new env_check option.
8581 2001-12-12 15:11 millert
8583 * lex.yy.c, sudo.tab.h: regen parser
8585 2001-12-12 14:56 millert
8587 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8588 a Runas spec to #[0-9-]+.
8590 2001-12-12 14:55 millert
8594 2001-12-12 14:55 millert
8596 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8598 2001-12-12 14:43 millert
8600 * config.h.in, configure.in: Add check for skeyaccess(3)
8602 2001-12-11 19:47 millert
8604 * visudo.pod: Document new -c, -f, and -q options
8606 2001-12-11 19:41 millert
8608 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8611 2001-12-11 19:31 millert
8615 2001-12-11 19:31 millert
8617 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8618 a replacement macro if it doesn't exist.
8620 2001-12-11 18:22 millert
8622 * visudo.c: In check-only mode, don't create sudoers if it does not
8625 2001-12-11 18:06 millert
8627 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8629 o Add support for "+=" and "-=" list operators
8630 o replace some 1 and 0 with TRUE and FALSE for greater
8633 2001-12-11 18:05 millert
8635 * parse.lex: o Use exclusive start conditions to remove some
8637 lexer. Also reorder some things for clarity.
8638 o Add support for "+=" and "-=" list operators.
8639 o Use the new DEFVAR token to denote a Defaults variable name.
8641 2001-12-11 18:03 millert
8643 * sudo.h: Prototype init_envtables()
8645 2001-12-11 18:02 millert
8647 * env.c: o Convert environment handling to use lists instead of
8649 This greatly simplifies routines that need to do "foreach"
8652 o Add new init_envtables() function to set env_check and
8654 defaults based on initial_badenv_table and
8655 initial_checkenv_table
8656 (formerly sudo_badenv_table).
8658 2001-12-11 18:00 millert
8660 * defaults.c, defaults.h: o Add a new LIST type and functions to
8662 o This is for use with environment handling variables.
8663 o Call new init_envtables() routine inside init_defaults() to
8664 initialize the environment lists.
8666 2001-12-11 17:57 millert
8668 * def_data.c, def_data.h, def_data.in: Convert environment options
8669 to use the new LIST type and add a new one, env_check that only
8670 deletes if the sanity check fails.
8672 2001-12-11 17:55 millert
8674 * testsudoers.c: Add dummy version of init_envtables()
8676 2001-12-11 17:53 millert
8678 * parse.yacc: honor quiet mode
8680 2001-12-11 17:51 millert
8682 * visudo.c: Add check-only mode
8684 2001-12-10 20:27 millert
8686 * mkdefaults: Fix generation of entries with NULL descriptions.
8688 2001-12-09 00:27 millert
8690 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8692 2001-12-09 00:20 millert
8694 * sudo.c: Must reset signal handlers before we exec
8696 2001-12-09 00:16 millert
8698 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8699 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8700 version needs testing. Set SIGTSTP to SIG_DFL during password
8701 entry so user can suspend us.
8703 2001-12-09 00:14 millert
8705 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8706 keyboard input. If you suspend sudo from the password prompt and
8707 resume it will re-prompt you.
8709 2001-12-09 00:09 millert
8711 * sudo.c: Don't block keyboard interrupt signals, just set them to
8714 2001-12-08 14:48 millert
8716 * config.h.in: add back HAVE_SIGACTION
8718 2001-12-08 14:44 millert
8722 2001-12-08 14:44 millert
8724 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8725 POSIX_SIGNALS define and old signal support now that we emulate
8726 POSIX ones Also be sure to correctly initialize struct sigaction.
8728 2001-12-08 14:42 millert
8730 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8733 2001-12-08 14:39 millert
8735 * compat.h: Add scaffolding for POSIX signal emulation
8737 2001-12-08 14:36 millert
8739 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8740 since we don't include stdio.h
8742 2001-12-08 14:23 millert
8744 * sigaction.c: Emulate sigaction() using sigvec()
8746 2001-11-12 19:32 millert
8748 * sudoers.pod: Document new behavior of negative values of
8749 timestamp_timeout Fix a typo
8751 2001-11-12 19:31 millert
8753 * sudo.pod: Add security note about command not being logged after
8754 'sudo su' and friends.
8756 2001-11-12 19:19 millert
8758 * sudo.pod: Mention that -V prints default values when run as root,
8759 including the list of environment variables to clear.
8761 2001-11-12 19:14 millert
8763 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8764 quoting of C<> entries.
8766 2001-11-12 13:12 millert
8768 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8769 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8770 behavior to also send mail when the password is wrong
8772 2001-11-12 13:08 millert
8774 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8777 2001-11-11 23:52 millert
8779 * sudoers.pod: document env_delete
8781 2001-11-11 23:51 millert
8783 * env.c: Add support for '*' in env_keep when not resetting the
8784 environment (ie: the normal case).
8786 2001-11-11 23:47 millert
8788 * env.c: Add env_delete variable that lets the user replace/add to
8789 the bad_env_table. Allow '*' wildcard in env_keep entries.
8791 2001-11-06 13:59 millert
8793 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8796 2001-11-02 18:09 millert
8798 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8801 2001-11-02 17:25 millert
8803 * mkdefaults: fix breakage in last commit
8805 2001-11-02 17:18 millert
8807 * Makefile.in: acsite.m4 -> aclocal.m4
8809 2001-11-02 15:59 millert
8811 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8814 2001-11-02 15:57 millert
8816 * def_data.c: regenerated from def_data.in
8818 2001-11-02 15:56 millert
8820 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8821 things use instead of T_INT If timestamp_timeout is < 0 then
8822 treat the ticket as never expiring (to be expired manually by the
8825 2001-11-02 15:51 millert
8827 * def_data.in: change most T_INT -> T_UINT
8829 2001-11-02 15:51 millert
8831 * mkdefaults: fix warning when no args
8833 2001-11-02 12:52 millert
8835 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8836 call _exit() if we are a signal handler. We no longer print the
8837 signal number but the user can just check the exit value for
8840 2001-10-16 01:35 millert
8842 * logging.c: when setting up pipes in child process check for case
8843 where stdin == pipe fd 0
8845 2001-10-11 13:20 millert
8847 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8848 value is the count of editing errors made (failed searches, etc).
8850 2001-10-05 16:39 millert
8854 2001-10-05 16:39 millert
8856 * configure.in: sco now is identified by config.guess as *-sco-*
8858 2001-10-05 16:24 millert
8860 * configure.in: Check for getspnam() in -lgen if not in -lc for
8863 2001-09-17 21:48 millert
8865 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8867 2001-09-17 21:32 millert
8869 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8871 2001-08-28 10:26 millert
8873 * sudoers.pod: Missing word (specify); krapht@secureops.com
8875 2001-08-23 17:43 millert
8877 * sudo.c: If we fail to lookup a login class, apply the default
8880 2001-08-23 17:42 millert
8882 * logging.c: In log_error() free message, not logline
8883 unconditionally, then free logline if it is not the same as
8884 message. No function change but this mirrors how they are
8887 2001-07-16 23:33 millert
8889 * configure: regenerate
8891 2001-07-16 23:33 millert
8893 * configure.in: remove some backslash quotes that are unneeded
8895 2001-07-16 23:30 millert
8897 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8898 AC_LIBOBJ instead of changing LIBOBJS directly o Use
8899 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8900 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8902 2001-07-16 23:28 millert
8904 * config.guess, config.sub: Updated from autoconf-2.50
8906 2001-05-22 19:11 millert
8908 * README: Update mailing list section. We use mailman now, not
8911 2001-05-10 14:55 millert
8913 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8914 the shadow variants to make sure we don't inadvertantly leak an
8915 fd to the child. Apparently Linux's shadow routines leave the fd
8916 open even if you don't call setspent(). Reported by
8917 mike@gistnet.com; different patch used.
8919 2001-04-12 21:43 millert
8921 * sudoers.pod: s/eg./e.g./
8923 2001-04-12 21:42 millert
8925 * tgetpass.c: select() may return EAGAIN. If so, continue like we
8928 2001-04-12 21:41 millert
8930 * logging.c: Fix a non-exploitable buffer overflow in the word
8931 splitting code. This should really be rewritten.
8933 2001-04-12 21:41 millert
8935 * Makefile.in: FAQ link goes away
8937 2001-04-12 21:40 millert
8939 * INSTALL: Tell people to look in sample.syslog.conf for examples,
8942 2001-04-12 21:40 millert
8944 * TROUBLESHOOTING: Update list of env vars that are cleared
8946 2001-04-12 21:36 millert
8948 * sudo.c: remove struct env_table decl since that stuff has all
8951 2001-04-04 13:17 millert
8953 * fileops.c: Fix a pasto in flock-style unlocking and include
8954 <sys/file.h> for flock on older systems; twetzel@gwdg.de
8956 2001-04-04 13:14 millert
8958 * configure: regen to get NeXT lockf/flock fix
8960 2001-04-04 13:14 millert
8962 * configure.in: force NeXT to use flock since lockf is broken
8964 2001-03-30 08:54 millert
8966 * check.c: Use stashed user_gid when checking against exempt gid
8967 since sudo sets its gid to a a value that makes sudoers readable.
8968 Previously if you used gid 0 as the exempt group everyone would
8969 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8971 2001-03-29 13:14 millert
8975 2001-03-29 13:08 millert
8977 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8978 aparently defines some types (such as ssize_t) therein.
8980 2001-03-02 09:09 millert
8982 * defaults.c: Fix negation of paths in a boolean context. Problem
8985 2001-02-23 13:03 millert
8989 2001-02-17 16:11 millert
8991 * visudo.c: SA_RESETHAND means the opposite of what I was
8992 thinking--oops To block all signals in old-style signals use ~0,
8995 2001-02-04 11:16 millert
8997 * defaults.c: coerce difference of pointers to int when used in a
8998 string length printf format; deraadt@openbsd.org
9000 2001-01-17 11:34 millert
9002 * visudo.c: Block all signals in Exit() to avoid a signal race.
9003 There is still a tiny window but I'm not going to worry about it.
9005 2001-01-07 13:57 millert
9007 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9010 2001-01-07 13:55 millert
9012 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9013 from clobbering by isatty().
9015 2000-12-30 20:39 millert
9017 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9018 Some defaults I_ defines got renamed.
9020 2000-12-30 20:38 millert
9022 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9023 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9024 set_perms.c, sudo.c: Move defaults info into its own files from
9025 which we generate .h and .c files. This makes adding or
9026 rearranging variables much simpler.
9028 2000-12-30 16:58 millert
9030 * configure, configure.in: fix typo in last commit
9032 2000-12-30 16:55 millert
9034 * compat.h, config.h.in, configure, configure.in: Add check +
9035 emulation for setegid (like seteuid).
9037 2000-12-30 16:22 millert
9039 * env.c: Make env_keep override badenv_table as documented Fix
9040 traversal of badenv_table (broken in last commit)
9042 2000-12-29 22:59 millert
9044 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9045 version of set_perms on systems w/o them. Rename
9046 set_perms_saved_uid() -> set_perms_posix() Make
9047 set_perms_setreuid simply be set_perms_fallback() and simply
9048 include the appropriate function at compile time (setreuid()
9051 2000-12-29 22:45 millert
9053 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9054 when env_reset is in effect
9056 2000-12-29 22:29 millert
9058 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9059 configure, configure.in, defaults.c, defaults.h, find_path.c,
9060 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9061 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9062 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9063 options: o stay_setuid - sudo will remain setuid if system has
9064 saved uids or setreuid(2) o env_reset - reset the environment to
9065 a sane default o env_keep - preserve environment variables that
9066 would otherwise be cleared
9068 No longer use getenv/putenv/setenv functions--do environment
9069 munging by hand. Potentially dangerous environment variables can
9070 be cleared only if they contain '/' pr '%' characters to protect
9071 buggy programs. Moved environment routines into env.c (new file)
9073 2000-12-29 22:17 millert
9075 * INSTALL: Clear up --without-passwd description
9077 2000-12-29 19:39 millert
9079 * sudo_setenv.c, putenv.c: We now build up a new environment from
9080 scratch and assign it to "environ".
9082 2000-12-18 22:35 millert
9084 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9086 2000-12-14 23:19 millert
9088 * visudo.c: If there was a syntax error and the user just wants to
9089 quit, unlink sudoers if it is zero length.
9091 2000-12-14 23:10 millert
9093 * visudo.c: 'Q' means ignore parse error, not 'q'
9095 2000-12-14 22:57 millert
9097 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9098 Dimitry Andric <dim@xs4all.nl>
9100 2000-12-13 12:23 millert
9102 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9105 2000-12-09 11:46 millert
9107 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9108 Sanchez <wsanchez@apple.com>
9110 2000-11-03 09:36 millert
9112 * sudo.c, visudo.c: Use exit(127), not exit(-1)
9114 2000-11-03 00:37 millert
9116 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9117 set_perms() to its own file and use POSIX saved uid or setreuid()
9120 Added stay_setuid option for systems that have libraries that
9121 perform extra paranoia checks in system libraries for setuid
9122 programs (ie: anything with issetugid(2)).
9124 2000-11-02 20:28 millert
9126 * sudo.c: strip more bits from the environment and add a facility
9127 for stripping things only if they contain '/' or '%' to address
9128 printf format string vulnerabilities in other programs.
9130 2000-11-02 12:55 millert
9134 2000-11-02 12:55 millert
9136 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9137 the existence of strcasecmp().
9139 2000-11-02 12:46 millert
9143 2000-11-02 12:46 millert
9145 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9147 2000-11-01 10:22 millert
9149 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9151 2000-11-01 10:17 millert
9155 2000-11-01 10:17 millert
9157 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9158 since NCR systems have that instead of innetgr(3).
9160 2000-10-31 14:16 millert
9162 * auth/securid.c: check return value of creadcfg() call sd_close()
9163 after sd_auth() store username in sd->username so we don't rely
9164 on the USER env variable
9166 2000-10-29 23:00 millert
9168 * INSTALL: document --with-bsdauth
9170 2000-10-29 22:57 millert
9174 2000-10-29 22:56 millert
9176 * configure.in: --with-bsdauth assumes --with-logincap
9178 2000-10-29 22:45 millert
9180 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9181 challenge, if the user just hits return then reprompt with echo
9184 2000-10-29 17:31 millert
9186 * sudo.c: Remove debugging code that should not have been
9189 2000-10-29 17:31 millert
9191 * auth/bsdauth.c: Use lower-level routines and get the password
9192 ourselves. Checks for a challenge and if there is one echo is
9195 2000-10-29 17:30 millert
9197 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9200 2000-10-27 18:41 millert
9202 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9203 fails by deferring the call to log_error() until things are
9206 Fix return value of set_loginclass() in non-BSD-auth case.
9208 Hard-code 'sudo' in the usage message so we can fit more options
9211 2000-10-27 18:35 millert
9213 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9215 2000-10-26 13:03 millert
9217 * sudo.cat, sudo.man.in: regen
9219 2000-10-26 13:01 millert
9221 * sudo.pod: Document -a flag
9223 2000-10-26 12:42 millert
9225 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9226 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9229 2000-10-19 10:09 millert
9231 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9233 2000-10-12 09:49 millert
9235 * sudoers.pod: Mention negating umask
9237 2000-10-12 01:30 millert
9239 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9241 2000-10-08 21:46 millert
9243 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9246 2000-10-08 12:25 millert
9248 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9250 2000-09-14 16:48 millert
9252 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9253 alloc failure instead of returning -1.
9255 2000-09-07 17:41 millert
9257 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9258 for FreeBSD and possibly others.
9260 2000-09-07 10:43 millert
9262 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9263 it. This means that "%m" won't be expanded but we don't use that
9264 anyway since the logging routines may splat to stderr as well.
9266 2000-09-06 21:35 millert
9268 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9269 sudoers.pod: Add always_set_home variable
9271 2000-09-06 21:24 millert
9273 * configure, configure.in: Have to hard code default values in help
9274 since the defaults are set _after_ the help stuff.
9276 2000-08-31 13:08 millert
9278 * lex.yy.c, parse.lex: Allow special characters (including '#') to
9279 be embedded in pathnames if quoted by a '\\'. The quoted chars
9280 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9283 2000-08-13 17:10 millert
9285 * install-sh: Better path searching for programs we need.
9287 2000-08-13 17:10 millert
9289 * TROUBLESHOOTING: Add section on "C compiler cannot create
9290 executables" errors.
9292 2000-08-13 17:10 millert
9294 * Makefile.binary, Makefile.in, version.h: Crank version
9296 2000-08-13 17:09 millert
9298 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9299 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9300 visudo.man.in, visudo.pod: Substitute values from configure into
9303 2000-08-12 16:48 millert
9305 * parse.c, sudo.c: The listpw and verifypw sudoers options would
9306 not take effect because the value of the default was checked
9307 *before* sudoers was parsed. Instead of passing in the value of
9308 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9309 the check can be deferred until after sudoers is parsed.
9311 2000-08-11 15:41 millert
9313 * tgetpass.c: When writing prompt, no need to write the NUL as
9314 well; hag@linnaean.org
9316 2000-06-09 12:25 millert
9318 * install-sh: When looking for chown, check in /sbin too
9320 2000-06-04 22:57 millert
9322 * visudo.c: Remove extraneous call to init_defaults() and set
9323 runas_user to NULL betweem parses so init_defaults will reset it
9324 each time, thus avoiding a reference to free()d data.
9326 2000-06-04 19:57 millert
9328 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9329 using getifaddrs() to get the list of ip addr / netmask pairs.
9330 Currently IPv4-only.
9332 2000-06-04 19:51 millert
9334 * visudo.c: Add a missing check for UserEditor == NULL Add missing
9335 '+' before line number when invoking editor to fix a syntax error
9337 2000-05-12 16:55 millert
9339 * sudo.c: Call clean_env very early in main() for paranoia's sake.
9340 Idea from Marc Esipovich.
9342 2000-05-10 01:11 millert
9344 * sudo.h: Update proto for evasprintf and easprintf
9346 2000-05-10 01:10 millert
9348 * alloc.c: Make easprintf() and evasprintf() return an int.
9350 2000-05-10 00:56 millert
9352 * check.c: If the targetpw flag is set, use target username as part
9353 of the timestamp path. If tty tickets are in effect cat the tty
9354 and the target username with a ':' as the separator.
9356 2000-05-09 12:05 millert
9358 * auth/pam.c: Backout part of last change; setting PAM_USER to the
9359 invoking user breaks things like targetpw.
9361 2000-05-09 11:52 millert
9363 * auth/pam.c: set tty and username via pam_set_item
9365 2000-05-09 11:42 millert
9367 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9368 runas, and target authentication for non-passwd file auth
9371 2000-04-22 14:15 millert
9373 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9374 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9375 C<-Z> for command line flags in all places. This is more
9376 consistent and works around a bug in Pod::Man.
9378 2000-04-22 13:59 millert
9380 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9381 'semicolon' that should be 'colon'
9383 2000-04-19 15:30 millert
9385 * configure, configure.in: Fix --with-badpri help line
9387 2000-04-17 14:01 millert
9389 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9390 openlog() and closelog() since some authentication methods (like
9391 PAM) may do their own logging via syslog. Since we don't use
9392 syslog much (usually just once per session) this doesn't really
9393 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9395 2000-04-15 16:32 millert
9397 * sudo.c: Fix -H flag. runas_homedir is only valid after
9398 set_perms(PERM_RUNAS, mode)
9400 2000-04-12 18:56 millert
9402 * INSTALL: Clarify the fact that insults are not enabled just by
9403 including them in the binary.
9405 2000-04-07 10:39 millert
9407 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9408 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9410 2000-04-07 10:38 millert
9412 * Makefile.in: Give date string to pod2man since its default is
9413 ugly and it ain't got no alibi.
9415 2000-04-07 10:27 millert
9417 * Makefile.in: Do section substitution on the output of pod2man and
9418 remove hack needed for old pod2man.
9420 2000-04-07 10:26 millert
9422 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9423 will do the substitution later.
9425 2000-04-02 11:44 millert
9427 * configure, configure.in: Don't bother checking for the path to vi
9428 if user specified --with-editor
9430 2000-04-01 17:25 millert
9432 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9435 2000-04-01 16:23 millert
9437 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9438 sudoers.pod, visudo.c: Visudo now checks for the existence of an
9439 editor and gives a sensible error if it does not exist.
9441 The path to the editor for visudo is now a colon-separated list
9442 of allowable editors. If the user has $EDITOR set and it matches
9443 one of the allowed editors that editor will be used. If not, the
9444 first editor in the list that actually exists is used.
9446 2000-04-01 16:22 millert
9448 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9451 2000-03-27 12:08 millert
9453 * Makefile.in: Strip sudo and visudo for bindist target
9455 2000-03-26 22:26 millert
9457 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9458 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9459 @mansectsu@ and @mansectform@ in the man page bodies as well.
9461 2000-03-26 22:07 millert
9463 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9466 2000-03-26 21:57 millert
9468 * Makefile.in: 'make dist' should not cause any files to be
9469 modified so remove its dependencies.
9471 2000-03-26 21:43 millert
9473 * CHANGES: Whoops, forgot to add release marker
9475 2000-03-26 11:57 millert
9477 * CHANGES: Final change for 1.6.3 (or so I hope)
9479 2000-03-26 11:57 millert
9481 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9482 BSD systems will have nroff...
9484 2000-03-24 18:58 millert
9486 * parse.yacc: When checking to see if the host/user matches in a
9487 defaults spec, check against TRUE, not just non-zero since it
9490 2000-03-24 15:14 millert
9492 * configure.in, configure: OSF/1 puts file formats in section 4,
9495 2000-03-24 15:13 millert
9497 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9499 2000-03-23 20:24 millert
9501 * RUNSON: Update for 1.6.3
9503 2000-03-23 20:23 millert
9505 * configure, configure.in: If there is no inet_addr but there *is*
9506 an __inet_addr that's ok since inet_addr is probably just a macro
9507 then. The better thing to do would be to look for the macro, but
9508 this is fine for now.
9510 2000-03-23 19:50 millert
9512 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9514 2000-03-23 19:40 millert
9516 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9517 lives in $(srcdir), add a @mansrcdir@ configure variable so we
9518 can deal with this. Also, only remove *.man for 'distclean' not
9521 2000-03-23 19:16 millert
9523 * sudo.c: set_loginclass() should be static like the proto says
9525 2000-03-23 14:14 millert
9527 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9528 header to avoid promotion of test to int, thus violating the
9529 prototype. Gcc handles this gracefully but more std ANSI
9530 compilers will complain.
9532 2000-03-23 10:11 millert
9534 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9537 2000-03-23 10:11 millert
9539 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9540 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9543 2000-03-22 23:41 millert
9545 * CHANGES, TODO: update for 1.6.3
9547 2000-03-22 23:38 millert
9549 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9550 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9551 not matching the FQHOST token type. There's really no need for a
9552 separate token for fully-qualified vs. unqualified anymore so
9553 FQHOST is now history and hostname_matches now decides which
9554 hostname (short or long) to check based on whether or not the
9555 pattern contains a '.'.
9557 2000-03-22 23:09 millert
9559 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9560 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9563 2000-03-22 22:50 millert
9565 * Makefile.in: Add targets for *.man.in, using config.status to
9566 generate *.man from *.man.in
9568 2000-03-22 22:20 millert
9570 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9571 option and enbolden refs to sudo and visudo.
9573 2000-03-22 19:35 millert
9575 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9576 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9577 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9578 FreeBSD login.conf support (untested on BSD/OS) based on a patch
9579 from Michael D. Marchionna. configure now does substitution on
9580 the man pages, allowing us to fix up the paths and set the
9581 section correctly. Based on an idea from Michael D. Marchionna.
9583 2000-03-22 19:27 millert
9585 * auth/passwd.c: Better fix for handling HP-UX aging info.
9587 2000-03-22 19:20 millert
9589 * sudo.c: Add support for set_logname run-time default
9591 2000-03-22 19:17 millert
9593 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9594 substitution on these to produce *.man
9596 2000-03-22 19:16 millert
9598 * sudo.man, sudoers.man, visudo.man: These files now get generated
9599 from *.man.in at configure time.
9601 2000-03-22 18:40 millert
9603 * defaults.c, defaults.h: Add set_logname option so users can turn
9604 off setting of LOGNAME/USER environment variables.
9606 2000-03-22 10:53 millert
9608 * testsudoers.c, lsearch.c, parse.c: kill register
9610 2000-03-13 15:52 millert
9612 * auth/passwd.c: HP-UX adds extra info at the end for password
9613 aging so when comparing the result of crypt to pw_passwd we only
9614 compare the first len(epass) bytes *unless* the user entered an
9615 empty string for a password.
9617 2000-03-13 11:05 millert
9619 * logging.c: Get rid of grandchild hack, it was causing problems
9620 and there is really no need for it. This fixes a bug where we
9621 spin eating up CPU when the user runs a long-running process like
9624 2000-03-07 14:26 millert
9626 * sudo.c: User can always specify a login class if he/she is
9629 2000-03-06 23:29 millert
9631 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9632 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9634 2000-03-06 14:42 millert
9636 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9639 2000-03-03 18:04 millert
9641 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9642 encrypted password is exactly 13 characters (indicateing standard
9643 a DES password). Many versions of crypt() do this for you, but
9644 not all (like HP-UX's).
9646 2000-03-01 21:01 millert
9648 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9650 2000-02-29 17:46 millert
9652 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9655 2000-02-29 17:41 millert
9657 * defaults.c: Use Argv[0] as the first arg to openlog() since
9658 visudo uses this too.
9660 2000-02-28 18:58 millert
9662 * sudo.c: Stash coredumpsize resource limit and retsore it before
9663 the exec() Otherwise the child ends up with a coredumpsize of 0.
9665 2000-02-26 22:56 millert
9667 * sudo.cat, sudo.man, sudo.pod: document -S flag
9669 2000-02-26 22:54 millert
9671 * sudo.c: fix usage string
9673 2000-02-26 22:48 millert
9675 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9676 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9677 -S flag (read passwd from stdin) and tgetpass_flags global that
9678 holds flags to be passed in to tgetpass(). Change echo_off param
9679 to tgetpass() into a flags field. There are currently 2 possible
9680 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9681 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9682 but echo is not set on the terminal, but sure to set it.
9684 2000-02-26 22:11 millert
9686 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9687 password timeout was disabled.
9689 2000-02-18 12:56 millert
9691 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9692 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9693 runaspw, and targetpw options.
9695 2000-02-18 12:11 millert
9697 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9698 visudo.c: enveditor -> env_editor
9700 2000-02-15 19:07 millert
9702 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9703 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9704 visudo.cat, visudo.man: crank versino to 1.6.3
9706 2000-02-15 19:03 millert
9708 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9709 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9710 defaults and make visudo honor them. This means that visudo will
9711 now parse the sudoers file *before* it is edited so a bogus
9712 sudoers file will cause a warning to go to stderr. Also, visudo
9713 checks the variables once--it does not check them after each
9714 editor run since that could be confusing.
9716 2000-02-15 18:49 millert
9718 * RUNSON: 1.6.2 -> 1.6.2p1
9720 2000-02-15 18:36 millert
9722 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9725 2000-02-13 13:38 millert
9727 * configure, configure.in: Fix thinko, some && should have been ||
9730 2000-02-13 13:28 millert
9732 * configure, configure.in: Don't initialized Makefile variables to
9733 be NULL since the user may want to import variables from their
9736 2000-02-03 21:09 millert
9738 * configure, configure.in: typo
9740 2000-01-27 15:01 millert
9742 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9743 11.0;jaearick@colby.edu
9745 2000-01-27 15:01 millert
9747 * CHANGES: recent changes; prepare for 1.6.2p1
9749 2000-01-26 23:31 millert
9751 * find_path.c: Don't apply SECURE_PATH if user is example;
9754 2000-01-26 16:21 millert
9756 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9757 'defaults' options based on INSTALL file info.
9759 2000-01-26 16:21 millert
9761 * INSTALL: Fix some while lies
9763 2000-01-24 10:48 millert
9765 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9768 2000-01-23 22:57 millert
9770 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9772 2000-01-23 22:42 millert
9774 * RUNSON: Last minute updates
9776 2000-01-23 22:26 millert
9778 * TROUBLESHOOTING: PAM entry
9780 2000-01-23 22:23 millert
9782 * auth/pam.c: correct a comment
9784 2000-01-23 22:03 millert
9786 * CHANGES, RUNSON: update for 1.6.2
9788 2000-01-23 21:59 millert
9790 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9791 with PAM. Based on patches from "Cloyce D. Spradling"
9792 <cloyce@headgear.org>
9794 2000-01-20 11:15 millert
9796 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9797 to an unsigned long long value.
9799 2000-01-19 14:07 millert
9801 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9802 sudoers locking in visudo. We now lock the sudoers file itself,
9803 not the temp file (since locking the temp file can foul up
9804 editors). The previous locking scheme didn't work because the fd
9805 was closed too early.
9807 2000-01-19 13:37 millert
9809 * configure, config.h.in, configure.in: Don't need test for
9810 ftruncate() any more.
9812 2000-01-18 21:23 millert
9814 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9815 cc. Fixes compilation with the unbundled HP-UX cc.
9817 2000-01-18 17:00 millert
9819 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9820 Campbell <aaron@cs.dal.ca>
9822 2000-01-17 18:46 millert
9824 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9825 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9826 tgetpass.c, version.h, visudo.c: update copyright year on changed
9829 2000-01-17 18:45 millert
9833 2000-01-17 18:45 millert
9837 2000-01-17 18:42 millert
9839 * INSTALL: Crank version to 1.6.2
9841 2000-01-17 18:11 millert
9843 * configure: Crank version to 1.6.2
9845 2000-01-17 17:46 millert
9847 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9848 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9850 2000-01-17 12:32 millert
9852 * CHANGES: recent changes
9854 2000-01-17 12:28 millert
9856 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9857 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9858 Crank version to 1.6.2
9860 2000-01-17 12:25 millert
9862 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9863 'shell_noargs' runtime option back in. We have to defer checking
9864 until after the sudoers file has been parsed but since there are
9865 now other options that operate that way this one can too. Based
9866 on a patch from bguillory@email.com.
9868 2000-01-16 23:05 millert
9870 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9873 2000-01-16 22:57 millert
9875 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9876 o Add section on verifypw and listpw o Define how NOPASSWD
9877 interacts with the -v and -l flags
9879 2000-01-14 12:39 millert
9881 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9882 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9884 2000-01-14 12:29 millert
9886 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9887 to the end and don't initialize the union member since that only
9888 works with an ANSI compiler. We set the value of the union by
9889 hand in init_defaults() anyway. This allows sudo to compile on a
9892 2000-01-11 13:20 millert
9894 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9895 netgr_matches needs to check shost as well as host since they may
9898 2000-01-11 13:17 millert
9900 * tgetpass.c: End on \r as well as \n
9902 2000-01-02 23:53 millert
9904 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9905 chaning from 0400 to whatever SUDOERS_MODE is (converting from
9906 the old sudoers mode). Assumes that SUDOERS_MODE is less
9907 restrictive than 0400 which should always be the case.
9909 2000-01-02 23:43 millert
9911 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9912 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9913 *any* entry for the user on the host with a NOPASSWD flag. For
9914 -v, only allow w/o a passwd if *all* entries for the user on the
9915 host w/ the specified runas user have the NOPASSWD flag set.
9917 2000-01-02 23:26 millert
9919 * Makefile.in: add check target
9921 1999-12-16 13:02 millert
9923 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9926 1999-12-10 00:09 millert
9928 * CHANGES: recent changes
9930 1999-12-08 23:04 millert
9932 * config.h.in, configure, configure.in, sudo.c: Add check for
9933 initgroups() since old SYSV lacks this.
9935 1999-12-08 22:54 millert
9937 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9938 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9939 Only define HAVE_FNMATCH if <fnmatch.h> exists.
9941 1999-12-06 01:47 millert
9943 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9944 to be enabled if the insults[] array is empty. Otherwise there
9945 would be division by zero.
9947 1999-12-06 01:25 millert
9949 * insults.h: Don't care about USE_INSULTS #define since the insult
9950 stuff may be overridden at runtime.
9952 1999-12-06 01:23 millert
9954 * auth/sudo_auth.c: Honor insults flag.
9956 1999-12-05 19:14 millert
9958 * CHANGES, parse.c: Don't ask the user for a password if the user
9959 is not allowed to run the command and the authenticate flag (in
9962 1999-12-05 19:05 millert
9964 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9965 newline we change to the INITIAL state. o Enter GOTRUNAS when we
9968 This allows #uid to work in a RunasAlias.
9970 1999-12-05 14:06 millert
9972 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9973 and runaslist now return a value o in a runasspec, if a runaslist
9974 does not return TRUE, set runas_matches to FALSE. Normally, a
9975 runaslist only returns FALSE for explicitly denied users. o
9976 since runaslist does not modify the stack there is no need for a
9977 push/pop in runasalias.
9979 1999-12-04 21:54 millert
9981 * check.c, sudo.c: Don't kill the user's tickets until after
9982 sudoers has been parsed since tty_tickets and ticket_dir could be
9985 1999-12-04 21:18 millert
9987 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9988 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9989 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9992 1999-12-04 21:18 millert
9994 * testsudoers.c: add set_fqdn() stub
9996 1999-12-02 15:31 millert
9998 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9999 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10000 it cannot work since the command needs to be set before sudoers
10001 is parsed. o Fix the "set_home" sudoers option (only worked at
10002 compile time). o Fix "fqdn" sudoers option. We now set
10003 host/shost via set_fqdn which gets called when the "fqdn"
10004 option is set in sudoers. o Move the openlog() to
10005 store_syslogfac() so this gets overridden correctly from the
10008 1999-12-02 15:21 millert
10010 * auth/securid.c: SecurID support should compile now.
10012 1999-11-28 20:56 millert
10014 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10015 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10017 1999-11-28 18:51 millert
10019 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10020 the .html files as they are generated automatically on the web
10023 1999-11-28 18:49 millert
10025 * CHANGES, LICENSE: kill characters that made wml unhappy
10027 1999-11-28 18:34 millert
10031 1999-11-25 12:05 millert
10033 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10035 1999-11-24 19:43 millert
10037 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10040 1999-11-23 22:52 millert
10042 * sudo.c: Make the -s flag be exclusive too. Also reorder the
10043 flags in the exclusive usage message so they are alphabetical.
10045 1999-11-23 13:27 millert
10047 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10049 1999-11-23 13:07 millert
10051 * auth/API: fix typo
10053 1999-11-23 13:07 millert
10055 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10057 1999-11-23 13:06 millert
10059 * auth/pam.c: fix a warning on redhat and spew an error if
10060 pam_authenticate() returns an error other than AUTH_SUCCESS or
10063 1999-11-23 00:43 millert
10065 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10066 password required is the user's not root's
10068 1999-11-19 21:04 millert
10070 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10072 1999-11-18 19:13 millert
10074 * RUNSON: updates from Brian Jackson + some formatting
10076 1999-11-17 21:39 millert
10078 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10079 update o Changes for automating real binary releases
10081 1999-11-17 21:38 millert
10083 * Makefile.in: Add bindist target
10085 1999-11-16 16:26 millert
10087 * TROUBLESHOOTING: talk about run-time options in addition to
10088 compile-time options
10090 1999-11-16 01:16 millert
10092 * CHANGES: fix typos
10094 1999-11-16 01:09 millert
10096 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10098 1999-11-16 00:42 millert
10100 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10101 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10102 rid of references to sudo-bugs. Now mention the web site or the
10105 1999-11-16 00:35 millert
10107 * sudoers.html: repair pod2html damage
10109 1999-11-16 00:28 millert
10111 * RUNSON, TODO: Update for 1.6 release
10113 1999-11-16 00:23 millert
10115 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10116 about using ALL in a command context.
10118 1999-11-09 15:12 millert
10120 * visudo.c: Call yyrestart() on a parse error to reset the lexer
10123 1999-11-09 15:06 millert
10125 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10126 yyrestart() into visudo.c since it might not get called in yywrap
10127 if we get a parse error (and we only reread the file on error
10130 1999-11-09 14:32 millert
10132 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10133 clean up any buffers that might still exist. Call yyrestart()
10134 instead of using the deprecated YY_NEW_FILE macro.
10136 1999-11-09 12:13 millert
10138 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10140 1999-11-08 19:00 millert
10142 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10143 characters need to be escaped in names.
10145 1999-11-08 18:59 millert
10149 1999-11-08 18:59 millert
10151 * INSTALL: clarify Mac OS X entry
10153 1999-11-08 18:59 millert
10157 1999-11-08 17:45 millert
10159 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10160 configure options for danity
10162 1999-11-05 17:11 millert
10164 * defaults.c: Fix printing of type T_MODE in dump_defaults()
10166 1999-11-05 12:00 millert
10168 * strcasecmp.c: missing sys/types.h
10170 1999-11-05 00:42 millert
10172 * INSTALL: Break out options that may be overridden at run time
10173 into their own section. Add a not about Max OS X and correct
10176 1999-11-04 14:01 millert
10178 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10179 getrlimit to find the highest fd when closing all non-std fd's o
10180 Turn off core dumps via setrlimit for the sake of paranoia
10182 1999-11-04 13:57 millert
10186 1999-11-01 10:59 millert
10190 1999-11-01 10:58 millert
10192 * tgetpass.c: When read()'ing, do a single character at a time to
10193 be sure we don't go oast the newline.
10195 1999-11-01 10:43 millert
10197 * sudo.c: For the sudo_root option, check against user_uid, not
10198 getuid() since at this point, ruid == euid == 0.
10200 1999-10-31 23:14 millert
10202 * RUNSON: some updates
10204 1999-10-31 23:14 millert
10206 * logging.h: Fix compilation problem when --with-logging=file was
10207 specified. This means that syslog is now required to build sudo
10208 but that should not be a problem. If it is it can be fixed
10209 trivially with a configure check for syslog() or syslog.h.
10211 1999-10-31 23:00 millert
10213 * tgetpass.c: Make this work again for things like "sudo echo hi |
10214 more" where the tty gets put into character at a time mode. We
10215 read until we read end of line or we run out of space (similar to
10218 1999-10-20 11:23 millert
10220 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10223 1999-10-20 11:23 millert
10227 1999-10-16 13:56 millert
10229 * defaults.c: Error out if syslog parameters are given without a
10230 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10231 since there are no facilities in the 4.2BSD syslog.
10233 1999-10-15 16:37 millert
10235 * defaults.c: Ignore the syslog facility for systems w/ old syslog
10238 1999-10-15 12:51 millert
10240 * TROUBLESHOOTING: people with "." early in their path can have
10241 problems running sudo from the build dir ;-)
10243 1999-10-13 00:18 millert
10245 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10247 1999-10-12 22:34 millert
10249 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10250 auth/sudo_auth.h: New krb5 code from Frank Cusack
10251 <fcusack@iconnet.net>.
10253 1999-10-12 22:33 millert
10255 * CHANGES: update to reality
10257 1999-10-11 20:53 millert
10259 * auth/fwtk.c: include <auth.h> to get function prototypes.
10261 1999-10-11 20:05 millert
10263 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10265 1999-10-11 19:42 millert
10267 * sudo.c: in set_perms(), always call setuid(0) before changing the
10268 ruid/euid so we always know it will succeed.
10270 1999-10-11 12:24 millert
10272 * defaults.h: #undef T_FOO to avoid conflicts with system defines
10275 1999-10-11 11:55 millert
10277 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10278 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10279 needs some fleshing out but this is a start.
10281 1999-10-10 17:21 millert
10283 * defaults.c: use strtol, not strtoul since not everyone has not
10286 1999-10-10 15:01 millert
10288 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10291 1999-10-10 14:38 millert
10293 * lex.yy.c, parse.lex: o Add support for escaped characters in the
10294 WORD macro o Modify fill() to squash escape chars
10296 1999-10-10 13:56 millert
10298 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10299 checks for default values that are supposed to be pathnames. o
10300 Fix a duplicate free when visudo finds an error.
10302 1999-10-09 01:01 millert
10304 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10306 1999-10-07 21:12 millert
10308 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10309 requiretty option o Move O_NOCTTY to compat.h
10311 1999-10-07 21:12 millert
10313 * logging.c: The exit() in log_error() was mistakenly removed in a
10314 previous version. Put it back...
10316 1999-10-07 17:20 millert
10318 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10319 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10320 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10321 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10322 Change defaults stuff to put the value right in the struct. o
10323 Implement mailer_flags o Store syslog stuff both in int and
10324 string form. Setting the string form magically updates the int
10325 version. o Add boolean attribute to strings where it makes sense
10328 1999-10-07 17:13 millert
10330 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10332 1999-10-06 00:48 millert
10334 * auth/API: cleanup function no longer takes a status arg
10336 1999-10-06 00:48 millert
10340 1999-09-15 05:15 millert
10342 * TODO, config.h.in, configure, configure.in, logging.c: Use
10343 strftime() instead of ctime() if it is available.
10345 1999-09-14 12:58 millert
10347 * defaults.c: fix copyright date
10349 1999-09-14 12:57 millert
10351 * RUNSON: update ReliantUNIX entry
10353 1999-09-14 12:56 millert
10355 * defaults.c, defaults.h, logging.c: add log_year option
10357 1999-09-14 04:01 millert
10359 * configure, configure.in: add --without-sendmail to help output
10361 1999-09-14 03:42 millert
10363 * configure, configure.in: enforce an otctal arg for
10364 --with-suoders-mode
10366 1999-09-08 04:06 millert
10368 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10369 config.h.in, configure, configure.in, defaults.c, defaults.h,
10370 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10371 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10372 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10373 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10374 "Defaults" line in sudoers to make configuration variables
10375 changable at runtime (and on a global, per-host and per-user
10376 basis). Both the names and the internal representation are still
10377 subject to change. It was necessary to make sudo_user.runas but
10378 a char ** instead of a char * since this value can be changed by
10379 a Defaults line. There is a similar (but more complicated) issue
10380 with sudo_user.prompt but it is handled differently at the
10383 Add a "-L" flag to list the name of options with their
10384 descriptions. This may only be temporary.
10386 Move some prototypes to parse.h
10388 Be much less restrictive on what is allowed for a username.
10390 1999-09-08 04:01 millert
10392 * sample.syslog.conf: Add more info
10394 1999-09-04 03:09 millert
10396 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10397 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10398 from their license.
10400 1999-08-31 05:39 millert
10402 * auth/sudo_auth.h: move dce_verofy proto to correct section
10404 1999-08-31 05:39 millert
10406 * auth/dce.c: remove XXX
10408 1999-08-28 06:00 millert
10410 * emul/fnmatch.h: Add fnmatch() prototype
10412 1999-08-28 06:00 millert
10414 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10415 emul/fnmatch.h to be after sudo.h for __P
10417 1999-08-28 05:59 millert
10419 * sudo.h: add strcasecmp proto
10421 1999-08-28 05:50 millert
10423 * auth/sudo_auth.c: add check for case where there are no auth
10426 1999-08-28 05:36 millert
10428 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10429 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10431 1999-08-28 05:24 millert
10433 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10434 everywhere we include string.h
10436 1999-08-28 05:22 millert
10438 * version.c: nicer output when showing auth methods
10440 1999-08-28 05:00 millert
10442 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10444 1999-08-28 04:49 millert
10446 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10448 1999-08-28 04:22 millert
10450 * parse.lex, lex.yy.c: fix definition of OCTECT
10452 1999-08-28 04:10 millert
10454 * configure, configure.in: aix_auth.o not authenticate.o
10456 1999-08-27 17:02 millert
10458 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10459 generated from the keyboard). Since we run with ruid/euid == 0
10460 the user can't really signal us in nasty ways.
10462 1999-08-27 17:01 millert
10464 * visudo.c: Don't need to worry about catching too many signals
10465 since we do locking on the tmp file. If a lockfile is really
10466 stale, it will be detected and overwritten.
10468 1999-08-27 16:09 millert
10470 * INSTALL, Makefile.in: include auth/API in tarball
10472 1999-08-27 16:09 millert
10474 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10475 loop and only do the memset if we are *not* in standalone mode.
10477 1999-08-27 13:46 millert
10479 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10481 1999-08-27 11:53 millert
10483 * sudo.c: fix --enable-noargs-shell
10485 1999-08-27 11:06 millert
10487 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10489 1999-08-27 10:54 millert
10491 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10493 1999-08-27 10:50 millert
10495 * auth/dce.c: there were still some return(0)'s hanging around,
10496 make them AUTH_FAILURE
10498 1999-08-27 10:39 millert
10500 * parse.c: typo in comment
10502 1999-08-27 10:03 millert
10504 * version.c: add missing semicolon
10506 1999-08-27 08:31 millert
10508 * auth/sudo_auth.h: missing backslash
10510 1999-08-26 17:24 millert
10512 * CHANGES, config.h.in, configure, configure.in: Kill
10513 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10515 1999-08-26 09:21 millert
10517 * Makefile.in: add parse.h to HDRS
10519 1999-08-26 09:16 millert
10521 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10522 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10523 in LIBS, commong ld flags go in LDFLAGS and network libs like
10524 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10525 on Solaris and is a bit cleaner in general.
10527 1999-08-26 06:56 millert
10529 * UPGRADE: mention ptmp -> sudoers.tmp
10531 1999-08-26 06:12 millert
10533 * configure.in, configure, config.h.in: Define
10534 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10536 1999-08-26 05:37 millert
10538 * RUNSON: add 2 reports
10540 1999-08-26 05:20 millert
10542 * auth/kerb5.c: Minor changes, mostly cosmetic.
10543 verify_krb_v5_tgt() changed to return a value more like a system
10546 1999-08-26 05:19 millert
10548 * auth/dce.c: Add an XXX
10550 1999-08-26 05:19 millert
10552 * TODO: more things todo!
10554 1999-08-26 05:18 millert
10556 * sample.sudoers: update based on what is in the man page
10558 1999-08-26 05:10 millert
10560 * parse.yacc: minor change to first line printed in -l mode
10562 1999-08-26 05:10 millert
10564 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10565 VARIABLES" section to "ENVIRONMENT" to be more standard and add
10568 1999-08-26 05:08 millert
10570 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10571 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10574 1999-08-26 05:06 millert
10576 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10578 1999-08-26 05:05 millert
10580 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10582 1999-08-26 05:04 millert
10584 * UPGRADE: mention timestamp changes
10586 1999-08-26 05:04 millert
10588 * PORTING: cosmetic cleanup
10590 1999-08-26 05:00 millert
10592 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10593 sudoers(8) man page
10595 1999-08-24 13:45 millert
10597 * version.c: Update comments about syslog name tables
10599 1999-08-24 13:37 millert
10601 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10602 configure.in, parse.yacc: include strcasecmp() for those without
10605 1999-08-24 12:43 millert
10607 * sample.sudoers: Use the : operator some more and fix a typo
10609 1999-08-24 12:43 millert
10611 * HISTORY: update the history of sudo
10613 1999-08-24 12:42 millert
10615 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10617 1999-08-24 12:41 millert
10619 * CHANGES: recent changes
10621 1999-08-24 12:40 millert
10623 * sudo.tab.h: these should be generated with byacc, not bison
10625 1999-08-24 12:40 millert
10629 1999-08-24 11:58 millert
10631 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10632 the stored (expanded) alias was not stored with the contents.
10633 This could lead to incorrect output if the sudoers file had
10634 different alias types with the same name. Normal parsing (ie:
10635 not in '-l' mode) is unaffected.
10637 1999-08-23 12:47 millert
10639 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10640 proto on some systems
10642 1999-08-22 13:10 millert
10644 * snprintf.c: fix comment
10646 1999-08-22 13:09 millert
10648 * tgetpass.c: don't need limits.h
10650 1999-08-22 07:36 millert
10652 * snprintf.c: kill bogus reference to vfprintf
10654 1999-08-22 07:26 millert
10656 * sample.sudoers, sudoers: better examples
10658 1999-08-22 07:23 millert
10660 * snprintf.c: Add some const in the K&R defs. This is safe since
10661 we define const away if the compiler doesn't grok it.
10663 1999-08-22 07:22 millert
10665 * aclocal.m4, configure: Better test for working long long support.
10666 Ultrix compiler supports basic long long but not all operations
10669 1999-08-22 05:59 millert
10671 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10672 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10673 MAXINT before including hpsecurity.h to silence an HP-UX warning
10674 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10676 1999-08-21 15:00 millert
10678 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10679 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10680 quads if the compiler does. No floating point yet, perhaps
10683 1999-08-20 16:37 millert
10685 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10686 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10687 code as root, not the invoking user. It doesn't really gain us
10688 anything to run as the user since an attacker can just have an
10689 setuid(0) in their egg. Running as root solves potential
10690 problems wrt signalling.
10692 1999-08-19 13:45 millert
10694 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10695 let the signal handler get it if we are still running, else let
10696 init reap it for us. The extra time it takes to wait lets the
10697 user know that mail is being sent.
10699 Install SIGCHLD handler in main() and for POSIX signals, block
10700 everything *except* SIGCHLD.
10702 1999-08-19 12:30 millert
10704 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10705 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10706 a bitmap instead of an int. This makes it possible to express
10707 things like "failed to validate because user not listed for this
10708 host". Some thigns that were previously VALIDATE_FOO are now
10709 FLAG_FOO. This may change later on.
10711 Reorganized code in log_auth() and sudo.c to deal with above
10714 Safer versions of push/pushcp with in the do { ... } while (0)
10717 parse.yacc now saves info on the stack to allow parse.c to
10718 determine if a user was listed, but not for the host he/she tried
10721 Added --with-mail-if-no-host option
10723 1999-08-17 11:29 millert
10725 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10726 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10727 externally visible. o If pedantic > 1, it is a parse error. o
10728 Add -s (strict) option to visudo which sets pedantic to 2.
10730 1999-08-17 11:26 millert
10732 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10734 1999-08-17 11:20 millert
10736 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10738 1999-08-17 10:29 millert
10740 * configure, configure.in, Makefile.in: Add testsudoers to default
10741 build target if --with-devel Don't clean generated parser files
10742 unless "distclean".
10744 1999-08-17 08:47 millert
10746 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10747 not just those that match, or we get spurious warnings.
10749 1999-08-17 05:32 millert
10751 * TROUBLESHOOTING: reference samples.sylog.conf
10753 1999-08-14 11:50 millert
10755 * sample.syslog.conf: Sample entries for syslog.conf
10757 1999-08-14 11:40 millert
10759 * CHANGES: recent changes
10761 1999-08-14 11:36 millert
10763 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10764 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10765 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10766 configured into flags and add a flag to specify an auth method is
10767 running alone (the only one). Pass auth methods their sudo_auth
10768 pointer, not the data pointer. This allows us to get at the
10769 flags and tell if we are the only auth method. That, in turn,
10770 allows the method to be able to decide what should/should not be
10771 a fatal error. Currently only rfc1938 uses it this way, which
10772 allows us to kill the OTP_ONLY define and te hackery that went
10773 with it. With access to the sudo_auth struct, methods can also
10774 get at a string holding their cannonical name (useful in error
10777 1999-08-14 11:34 millert
10779 * Makefile.in, INSTALL, README, config.h.in, configure,
10780 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10781 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10782 o real dependencies in the Makefile o --with-devel option to
10783 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10784 "foo->bar" o ALL goes back to being a token, not a string but
10785 don't leak memory o rename hsotspec -> host in parse.yacc
10787 1999-08-12 12:26 millert
10789 * BUGS, CHANGES: recent changes
10791 1999-08-12 12:24 millert
10793 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10794 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10795 *snprintf() before -ldb is added to LIBS since -ldb includes a
10796 bogus snprintf(). o Add forward refs for struct mbuf and struct
10797 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10798 to fix -Wall o Add missing includes to fix more -Wall
10800 1999-08-12 10:37 millert
10802 * INSTALL, check.c, config.h.in, configure, configure.in,
10803 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10804 o Add a "pedentic" flag to the parser. This makes sudo warn in
10805 cases where an alias may be used before it is defined. Only
10806 turned on for visudo and testsudoers. o Add
10807 --disable-authentication option that makes sudo not require
10808 authentication by default. The PASSWD tag can be used to require
10809 authentication for an entry. We no longer overload
10812 1999-08-12 10:29 millert
10814 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10815 USERNAME. These days a username can contain just about anything
10816 so be very permissive. Also drop the unused \. punctuation.
10818 1999-08-09 18:25 millert
10820 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10821 parse.h o find_alias() now returns an aliasinfo * instead of
10822 boolean o add_alias() now takes a value parameter to store in the
10823 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10824 return: 1) positive match 0) negative match (due to '!') -1) no
10825 match This means setting $$ explicitly in all cases, which I
10826 should have done in the first place. It also means that we
10827 always store a value that is != -1 and when we see a '!' we can
10828 set *_matches to !rv if rv != -1. The upshot of all of this is
10829 that '!' now works the way it should in lists and some of the
10830 rules are more uniform and sensible.
10832 1999-08-09 18:17 millert
10834 * Makefile.in: add parse.h dependency
10836 1999-08-09 18:17 millert
10838 * parse.h: kill unused *_matched macros
10840 1999-08-09 10:35 millert
10842 * parse.yacc: Allow a list of users as the first thing in a user
10843 spec, not just a single entry. This makes things more uniform,
10844 though it does allow you to write user specs that are hard to
10847 1999-08-09 10:08 millert
10851 1999-08-09 10:08 millert
10853 * configure.in: fix check for crypt() in libufc
10855 1999-08-07 14:03 millert
10857 * README: sudo-users list now exists
10859 1999-08-07 07:46 millert
10861 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10864 1999-08-07 05:59 millert
10866 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10867 config.h.in, configure.in, logging.c, sudo.h, version.c,
10868 visudo.c, configure, fileops.c: o Move lock_file() and touch()
10869 into fileops.c so visudo can use them o Visudo now locks the
10870 sudoers temp file instead of bailing when the temp file already
10871 exists. This fixes the problem of stale temp files but it does
10872 *require* that you not try to put the temp file in a
10873 world-writable directory. This shoud not be an issue as the temp
10874 file should live in the same dir as sudoers. o Visudo now only
10875 installs the temp file as sudoers if it changed.
10877 1999-08-06 09:49 millert
10879 * logging.c: add fcntl locking
10881 1999-08-06 09:33 millert
10883 * configure, config.h.in, configure.in, logging.c: Lock the log
10886 1999-08-06 05:36 millert
10888 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10889 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10890 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10891 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10892 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10894 1999-08-05 17:38 millert
10896 * INSTALL, check.c, config.h.in, configure, configure.in,
10897 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10898 more things to root sudo -V config reporting
10900 1999-08-05 10:56 millert
10902 * configure, configure.in: aix_auth.o not authenticate.o
10904 1999-08-05 10:48 millert
10906 * config.h.in: Add --with-goodpri and --with-badpri configure
10907 options to specify the syslog priority to use.
10909 1999-08-05 10:30 millert
10911 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10912 and --with-badpri configure options to specify the syslog
10915 1999-08-05 10:25 millert
10917 * compat.h: kill crufty AIX stuff
10919 1999-08-05 06:55 millert
10921 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10922 deal with $< like I would expect. Both GNU and BSD makes get
10923 this right but... So, we just expand $< inline at the cost of
10926 1999-08-05 06:52 millert
10928 * version.c: If the invoking user is root, sudo will now print
10929 configure info in -V mode. Currently just prints logging info,
10930 to be expanded later.
10932 1999-08-05 06:51 millert
10934 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10935 facility and priority o use new print_version() functino for -V
10938 1999-08-05 06:49 millert
10940 * check.c: Don't need version.c
10942 1999-08-05 06:21 millert
10944 * configure, configure.in, aclocal.m4, config.h.in: Add check for
10945 syslog facilities and priorities tables in syslog.h
10947 1999-08-05 05:23 millert
10949 * Makefile.in: o authenticate -> aix_auth o add version.c
10951 1999-08-05 05:21 millert
10953 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10955 1999-08-04 13:32 millert
10957 * TODO: sudo should lock its logfile
10959 1999-08-04 13:28 millert
10961 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10962 shortcut macros for append() to make things more readable. o The
10963 separator in append() is now a string instead of a char. o In
10964 append(), only prepend the separator if the last char is not a
10965 '!'. This is a hack but it greatly simplifies '!' handling. o
10966 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10967 inherited across entries in a list (matches current behavior).
10968 o Fix formatting in -l mode such that items in a list are
10969 separated by a space. Greatlt improves readability. o Space
10970 for name field in struct aliasinfo is now allocated dyanically
10971 instead of using a (big) buffer. o In add_alias(), only search
10972 the list once (lsearch instead of lfind + lsearch)
10974 1999-08-04 11:31 millert
10976 * lex.yy.c, sudo.tab.h: regen
10978 1999-08-04 10:54 millert
10980 * configure, configure.in: Solais pam doesn't require anye xtra
10983 1999-08-04 05:35 millert
10985 * parse.yacc: o Simpler '!' support now that the lexer deals with
10986 multiple !'s for us. o In the case of opFOO, have FOO give a
10987 boolean return value and set foo_matches in opFOO, not FOO. o
10988 Treat 'ALL' as a string since it gets fill()'d in
10989 parse.lex--fixes a small memory leak. In the long run it may
10990 be better to just fix parse.lex and make ALL back into a token.
10991 However, having it be a string is useful since it can be
10992 easily passed back to the parent rule if we so desire.
10994 1999-08-04 03:54 millert
10996 * parse.lex: o Remove some unnecessary backslashes o collapse
10997 multiple !'s by using !+ and checking if yyleng is even or odd.
10998 this allows us to simplify ! handling in parse.yacc
11000 1999-08-04 03:53 millert
11002 * sudo.c: -u flag was being ignored
11004 1999-08-01 13:04 millert
11006 * Makefile.in: correct fix
11008 1999-08-01 12:37 millert
11010 * Makefile.in: work around pod2man stupididy
11012 1999-08-01 12:35 millert
11014 * Makefile.in: correct dependencies for .cat
11016 1999-08-01 12:26 millert
11018 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11020 1999-08-01 12:25 millert
11022 * sudo.pod, visudo.pod: Add copyright Update to reality
11024 1999-08-01 11:42 millert
11026 * parse.c, sudo.c, sudo.h: rename validate() to the more
11027 descriptive sudoers_lookup()
11029 1999-08-01 06:49 millert
11031 * auth/aix_auth.c: use tgetpass
11033 1999-07-31 12:32 millert
11037 1999-07-31 12:31 millert
11039 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11040 configure, configure.in, sudo.c: Sudo, not CU Sudo
11042 1999-07-31 12:19 millert
11044 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11045 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11046 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11047 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11048 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11049 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11050 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11051 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11052 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11053 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11054 LICENSE: add 4th term to license similar to term 5 in the apache
11057 1999-07-31 12:02 millert
11059 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11060 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11062 1999-07-28 05:24 millert
11066 1999-07-28 05:21 millert
11068 * check.c: Use dirs instead of files for timestamp. This allows
11069 tty and non-tty schemes to coexist reasonably. Note, however,
11070 that when you update a tty ticket, the mtime on the user dir gets
11073 1999-07-28 05:17 millert
11075 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11076 to link with "-lprot -lx" when linking test program, not just
11077 -lprot. Also add check for getspnam(). The SCO docs indicate
11078 that /etc/shadow can be used but this may be a lie.
11080 1999-07-24 03:35 millert
11082 * auth/API: first cut at auth API description
11084 1999-07-22 15:48 millert
11086 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11087 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11088 now an init method that gets run before the main loop. This
11089 allows auth routines to differentiate between initialization that
11090 happens once vs. setup that needs to run each time through the
11093 1999-07-22 12:23 millert
11095 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11097 1999-07-22 12:22 millert
11099 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11100 versions of asprintf() and vasprintf()
11102 1999-07-22 09:14 millert
11104 * TODO: remove 2 items. One done, one won't do.
11106 1999-07-22 09:10 millert
11108 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11109 visudo.cat, visudo.html, configure, lex.yy.c: regen
11111 1999-07-22 09:06 millert
11113 * CHANGES: new changes
11115 1999-07-22 09:01 millert
11117 * sudo.pod: o Document -K flag and update meaning of -k flag. o
11118 BSD-style copyright o Document clearing of BIND resolver
11119 environment variables o Clarify bit about shared libs o suggest
11120 rc files create /tmp/.odus if your OS gives away files
11122 1999-07-22 08:59 millert
11124 * visudo.pod: BSD license
11126 1999-07-22 08:58 millert
11128 * tgetpass.c: o BSD copyright o no need to block signals, we now do
11129 that in main() o cosmetic changes
11131 1999-07-22 08:57 millert
11133 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11134 sudo_user" instead of old globals. o some cometic cleanup
11136 1999-07-22 08:56 millert
11138 * sudo_setenv.c, version.h: BSD-style copyright
11140 1999-07-22 08:56 millert
11142 * sudo.h: o BSD copyright o logging and parser bits moved to their
11143 own .h files o new "struct sudo_user" to encapsulate many of the
11146 1999-07-22 08:55 millert
11148 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11149 use new logging routines o simplified flow of control o BIND
11150 resolver additions to badenv_table
11152 1999-07-22 08:53 millert
11154 * strerror.c: BSD-style copyright
11156 1999-07-22 08:53 millert
11158 * snprintf.c: Now compiles on more K&R compilers
11160 1999-07-22 08:52 millert
11162 * putenv.c: BSD-style copyright, cosmetic changes
11164 1999-07-22 08:51 millert
11166 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11167 Move parser-specific defines and structs into parse.h + other
11170 1999-07-22 08:51 millert
11172 * logging.h: defines for logging routines
11174 1999-07-22 08:49 millert
11176 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11177 interfaces.h, pathnames.h.in: BSD-style copyright
11179 1999-07-22 08:48 millert
11181 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11182 copyright, cosmetic changes
11184 1999-07-22 08:46 millert
11186 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11187 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11188 changes to fill in AUTH_OBJS for new auth api o check for
11189 strerror(), v?snprintf() and v?asprintf() o replace
11190 --with-AuthSRV with --with-fwtk
11192 1999-07-22 08:43 millert
11194 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11195 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11196 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11199 1999-07-22 08:42 millert
11201 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11204 1999-07-22 08:39 millert
11206 * alloc.c: BSD-style copyright
11208 1999-07-22 08:38 millert
11210 * TROUBLESHOOTING: no more --with-getpass
11212 1999-07-22 08:34 millert
11214 * TODO: Take out things I've done...
11216 1999-07-22 08:34 millert
11218 * README: Refer to LICENSE
11220 1999-07-22 08:34 millert
11222 * PORTING: --with-getpass no longer exists
11224 1999-07-22 08:33 millert
11226 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11227 new files and new auth modules.
11229 1999-07-22 08:32 millert
11231 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11232 --with-fwtk and --without-passwd.
11234 1999-07-22 08:31 millert
11236 * HISTORY: Update history a bit
11238 1999-07-22 08:29 millert
11240 * COPYING, LICENSE: Now distributed under a BSD-style license
11242 1999-07-22 08:28 millert
11244 * auth/sudo_auth.c: o BSD-style copyright o Add support for
11245 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11246 rfc1938 code o new struct sudo_user global
11248 1999-07-22 08:25 millert
11250 * auth/: pam.c, sia.c: BSD-style copyright and use new log
11253 1999-07-22 08:24 millert
11255 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11256 Use asprintf() and snprintf() where sensible.
11258 1999-07-22 08:19 millert
11260 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11261 handling is now done more reasonably--better sanity checks and
11262 tty-based stamps are now done as files in a directory with the
11263 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11264 It is not currently possible to mix tty and non-tty based ticket
11265 schemes but this may change in the future (it requires sudo to
11266 use a directory instead of a file in the non-tty case). Also,
11267 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11268 really deletes the file. That way you don't get the lecture
11269 again just because you killed your ticket in .logout. BSD-style
11272 1999-07-22 08:13 millert
11274 * logging.c: o rewritten logging routines. log_error() now takes
11275 printf-style varargs and log_auth() for the return value of
11276 validate(). o BSD-style copyright
11278 1999-07-22 07:04 millert
11280 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11283 1999-07-22 07:02 millert
11285 * auth/fwtk.c: Use snprintf() where it makes sense and add a
11286 BSD-style copyright
11288 1999-07-22 07:00 millert
11290 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11291 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11294 1999-07-22 06:57 millert
11296 * emul/utime.h, utime.c: BSD-style copyright
11298 1999-07-22 06:57 millert
11300 * emul/search.h: this has been rewritten so use my BSD-style
11303 1999-07-15 11:21 millert
11305 * snprintf.c: include malloc.h if no stdlib.h
11307 1999-07-15 10:21 millert
11309 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11311 1999-07-15 10:20 millert
11313 * strerror.c: strerror() for systems w/o it
11315 1999-07-12 06:53 millert
11317 * visudo.c: stylistic changes
11319 1999-07-12 06:25 millert
11321 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11324 1999-07-11 16:10 millert
11326 * auth/pam.c: remove missed ref to PAM_nullpw
11328 1999-07-11 16:10 millert
11330 * auth/sudo_auth.h: pasto
11332 1999-07-11 15:19 millert
11334 * auth/kerb5.c: more or less complete now--still untested
11336 1999-07-11 15:09 millert
11338 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11340 1999-07-11 14:42 millert
11342 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11343 code into rfc1938.c
11345 1999-07-11 07:22 millert
11347 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11348 unchanged from dce_pwent.c
11350 1999-07-11 06:44 millert
11352 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11353 Could probably be much better
11355 1999-07-11 06:43 millert
11357 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11360 1999-07-11 05:37 millert
11362 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11364 1999-07-11 05:33 millert
11366 * auth/pam.c: don't use prompt global, it will go away
11368 1999-07-11 05:32 millert
11370 * auth/secureware.c: correct copyright years
11372 1999-07-10 20:32 millert
11374 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11375 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11376 New authentication API and methods
11378 1999-07-08 06:46 millert
11380 * parse.yacc: only save an entry if user_matches && host_matches,
11381 even if the stack is empty (fix for previous commit)
11383 1999-07-08 06:35 millert
11385 * parse.yacc: 1) Always save an entry on the stack if it is empty.
11386 This fixes the -l and -v flags that were broken by earlier parser
11389 2) In a Runas list, don't negate FALSE -> TRUE since that would
11390 make !foo match any time the user specified a runas user (via -u)
11393 1999-07-08 05:45 millert
11395 * testsudoers.c: interfaces and num_interfaces are now auto, not
11398 1999-07-07 14:09 millert
11400 * auth.c: use a static global to keep stae about empty passwords
11402 1999-07-07 14:08 millert
11404 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11407 1999-07-05 16:53 millert
11409 * auth.c: PAM prompt code was wrong, looks like we have to kludge
11412 1999-07-05 16:35 millert
11414 * auth.c: In the PAM code, when a user hits return at the first
11415 password prompt, exit without a warning just like the normal auth
11418 1999-07-05 16:15 millert
11420 * configure, configure.in: kludge around cross-compiler false
11423 1999-07-05 16:14 millert
11425 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11426 (correct) PAM code Tgetpass now takes an echo flag for use with
11427 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11428 useless umask setting Change error from BAD_ALLOCATION ->
11429 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11430 auth.c for consistency
11432 1999-07-05 16:11 millert
11434 * sudo.c: Some -Wall and kill some trailing spaces
11436 1999-07-05 16:10 millert
11438 * configure.in: define -D__EXTENSIONS__ for solaris so we get
11441 1999-06-22 09:42 millert
11443 * RUNSON: add Dynix 4.4.4
11445 1999-06-22 09:30 millert
11447 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11448 version, fall back on old kerb4 auth code
11450 1999-06-22 06:41 millert
11452 * INSTALL: clarify some things
11454 1999-06-22 06:38 millert
11456 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11458 1999-06-14 19:47 millert
11460 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11462 1999-06-03 12:34 millert
11464 * tgetpass.c: Fix open(2) return value checking, was NULL for
11465 fopen, should be -1 for open
11467 1999-06-03 12:06 millert
11471 1999-06-03 12:06 millert
11473 * configure.in: better wording for solaris pam notice
11475 1999-06-03 11:52 millert
11477 * CHANGES: document recent changes
11479 1999-06-03 11:52 millert
11481 * TROUBLESHOOTING: Update shadow password section
11483 1999-06-03 11:51 millert
11485 * auth.c: move authentication code from check.c to auth.c
11487 1999-06-03 11:51 millert
11489 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11491 1999-05-16 21:36 millert
11493 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11494 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11495 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11496 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11497 interface-related defines to interfaces.h so we don't have to
11498 include <netinet/in.h> everywhere.
11500 1999-05-14 12:30 millert
11502 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11503 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11504 braindeath with our own SUDO_MAX_PASS.
11505 It turns out the old DES crypt does the right thing with
11507 longert than 8 characters.
11508 o Fix common typo (necesary -> necessary)
11511 1999-05-03 12:00 millert
11513 * sudo.c: set $LOGNAME when we set $USER
11515 1999-04-27 00:00 millert
11517 * INSTALL: add comment about digital unix and interfaces.c warning
11520 1999-04-15 01:12 millert
11522 * sample.sudoers: use modern paths and give examples for some of
11523 the new parser features
11525 1999-04-10 13:03 millert
11527 * parse.c: fix comment
11529 1999-04-10 00:49 millert
11531 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11532 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11533 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11534 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11535 Function names should be flush with the start of the line so they
11536 can be found trivially in an editor and with grep
11538 1999-04-10 00:40 millert
11540 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11541 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11542 is already void, no need to cast it
11544 1999-04-10 00:37 millert
11546 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11547 (this should not be possible)
11549 1999-04-10 00:10 millert
11551 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11552 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11553 listed in sudoers) to the command instead of stashing the struct
11554 stat. Should be safer.
11556 1999-04-08 19:56 millert
11558 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11561 1999-04-07 20:20 millert
11565 1999-04-07 19:18 millert
11567 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11568 sudoers.pod: You can now specifiy a host list instead of just a
11569 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11572 1999-04-07 02:59 millert
11574 * testsudoers.c: Quiet -Wall
11576 1999-04-07 02:50 millert
11578 * parse.yacc: Move the push from the beginning of cmndspec to the
11579 end. This means we no longer have to do a push at the end of
11580 privilege, just reset some values.
11582 1999-04-06 20:24 millert
11584 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11585 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11588 1999-04-06 14:12 millert
11590 * sudoers.pod: modernize paths and update su example based on
11593 1999-04-06 14:06 millert
11595 * sample.sudoers: New runas semantics
11597 1999-04-06 13:54 millert
11599 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11600 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11601 ourselves so we don't need to rely on the system strdup(3) which
11602 may or may not exist. There is now no need to provide strdup()
11603 for those w/o it. Also, the prototype for estrdup() was wrong,
11604 it returns char * and its param is const.
11606 1999-04-06 13:40 millert
11608 * getcwd.c: $Sudo tag
11610 1999-04-06 13:20 millert
11612 * check.c: buf should be prompt; Michael Robokoff
11613 <mrobo@networkcs.com>
11615 1999-04-06 01:40 millert
11617 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11618 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11621 1999-04-06 01:38 millert
11623 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11626 1999-04-06 01:08 millert
11628 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11631 1999-04-06 01:00 millert
11633 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11634 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11635 command but the NOPASSWD flag was set. Make runasspec,
11636 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11637 support for '!' in the runas list Fix double printing of '%' and
11638 '+' for groups and netgroups respectively Add *_matched macros
11639 (no need for local stack variable). Should only be used directly
11640 after a pop (since top must be >= 2).
11642 1999-04-05 23:25 millert
11644 * aclocal.m4, configure.in: Add copyright, somewhat silly
11646 1999-04-05 16:57 millert
11648 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11649 check_sia.c, compat.h, config.h.in, configure, configure.in,
11650 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11651 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11652 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11653 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11654 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11655 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11656 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11657 1.6 and combine copyright statements
11659 1999-04-05 16:30 millert
11661 * sample.sudoers: Use ! not ^ to do negation
11663 1999-04-05 16:29 millert
11667 1999-04-05 16:28 millert
11669 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11670 across entris in a command list. Add a PASSWD tag to reverse
11671 NOPASSWD. When you override a runas or *PASSWD tag the value
11672 given becomes the new default for the rest of the command list.
11674 1999-04-02 16:03 millert
11676 * CHANGES, RUNSON: update for 1.5.9
11678 1999-04-02 16:02 millert
11680 * visudo.c: Shift return value of system(3) by 8 to get real exit
11681 value and if it is not 1 or 0 print the retval along with the
11684 1999-03-30 16:45 millert
11686 * Makefile.in: testsudoers needs LIBOBJS too
11688 1999-03-30 12:17 millert
11690 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11691 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11692 would not allow millert to run ls as root.
11694 1999-03-30 01:08 millert
11696 * CHANGES: new change
11698 1999-03-30 01:03 millert
11700 * parse.yacc: Save entries that match a ! command on the matching
11703 1999-03-30 01:01 millert
11705 * sudo.c: Make sudo's usage info better when mutually exclusive
11706 args are given and don't rely on argument order to detect this;
11709 1999-03-29 15:03 millert
11711 * CHANGES, Makefile.in, RUNSON: updates from CU
11713 1999-03-28 23:38 millert
11715 * Makefile.in: use gzip
11717 1999-03-28 23:31 millert
11719 * parse.yacc: Fix off by one error introduced in *alloc changes
11721 1999-03-28 23:05 millert
11723 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11724 check_sia.c, compat.h, config.h.in, configure, configure.in,
11725 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11726 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11727 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11728 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11729 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11730 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11731 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11732 emul/utime.h: ++version
11734 1999-03-28 21:59 millert
11736 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11737 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11738 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11739 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11740 emalloc/erealloc/estrdup
11742 1999-03-28 20:29 millert
11744 * alloc.c: error checking memory allocation routines
11746 1999-03-28 19:23 millert
11748 * parse.yacc: Still not right, this fixes it for real
11750 1999-03-28 19:08 millert
11752 * parse.yacc: Fix for previous commit
11754 1999-03-28 19:05 millert
11756 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11757 when mixing different runas specs and ! commands. For example:
11758 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11759 allow millert to run whoami as root as well as daemon when it
11760 should just allow daemon. The problem was that comma-separated
11761 commands in a list shared the same entry on the matching stack.
11762 Now they get their own entry iff there is a full match. It may
11763 be better to just make the runas spec persistent across all
11764 commands in a list like the user and host entries of the matching
11765 stack. However, since that is a fairly major change it should
11766 gets its own minor rev increase.
11768 1999-03-28 13:50 millert
11770 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11773 1999-03-26 13:17 millert
11777 1999-03-26 13:12 millert
11779 * sample.sudoers: better su entry
11781 1999-03-26 13:10 millert
11785 1999-03-26 13:09 millert
11787 * check.c, configure.in: new pam code that works on solaris, should
11788 work on linux too; aelberg@home.com
11790 1999-03-19 14:44 millert
11792 * RUNSON: more entries
11794 1999-03-19 14:43 millert
11796 * config.h.in: only include strings.h if there is no string.h
11798 1999-03-17 15:25 millert
11800 * config.guess: Sinix is now being called ReliantUNIX;
11801 bjjackso@us.oracle.com
11803 1999-03-13 13:37 millert
11805 * sudo.c: shost must be set before log functions are called #ifdef
11808 1999-03-07 18:34 millert
11810 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11811 command args. Stop processing an arg when you hit a backslash so
11812 the quoted-character detection can catch it.
11814 1999-02-26 01:19 millert
11816 * interfaces.c: include sys/time.h; aparently AIX needs it.
11819 1999-02-23 19:43 millert
11821 * configure, configure.in: add missing case statement so
11822 --without-sendmail works
11824 1999-02-22 21:51 millert
11828 1999-02-22 15:10 millert
11830 * configure, configure.in: only search for -lsun in irix <= 4.x
11832 1999-02-22 15:01 millert
11834 * configure, configure.in: back out last configure.in change now
11835 that I've hacked autoconf to fix the real problem and add a
11838 1999-02-22 14:32 millert
11842 1999-02-22 14:05 millert
11844 * getcwd.c: add def of dirfd() for those without it
11846 1999-02-22 10:58 millert
11848 * configure.in, configure: When falling back to checking for
11849 socket() when linking with "-lsocket -lnsl" check for main()
11850 instead since autoconf has already cached the results of checking
11851 for socket() in -lsocket. This is really an autoconf bug as it
11852 should use the extra libs as part of the cache variable name.
11854 1999-02-22 10:47 millert
11856 * configure.in: typo
11858 1999-02-21 15:18 millert
11860 * configure.in: fix occurrence of $with_timeout that should be
11861 $with_password_timeout;
11862 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11864 1999-02-17 11:40 millert
11866 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11869 1999-02-11 01:41 millert
11871 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11872 it does not have it
11874 1999-02-09 13:11 millert
11876 * configure, configure.in: define for_BSD_TYPES irix
11878 1999-02-06 19:47 millert
11880 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11881 clear that it is the user's password, not root's, that we want.
11883 1999-02-06 19:43 millert
11885 * check.c, sudo.h: If the user enters an empty password and really
11886 has no password, accept the empty password they entered.
11887 Perviously, they could enter anything *but* an empty password.
11888 Also, add GETPASS macro that calls either tgetpass() or getpass()
11889 depending on how sudo was configured. Problem noted by
11890 jdg@maths.qmw.ac.uk
11892 1999-02-02 23:32 millert
11894 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11895 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11896 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11897 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11898 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11899 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11900 emul/utime.h: add explicate copyright
11902 1999-02-02 23:16 millert
11904 * CHANGES: mention -lsocket, -lnsl configure changes
11906 1999-02-02 17:54 millert
11908 * sudo.c: Don't clobber errno after calling check_sudoers().
11910 1999-01-31 19:46 millert
11912 * configure.in, configure: When linking with both -lsocket and
11913 -lnsl be sure to do so in that order. Also, when we can't find
11914 socket() or inet_addr() and have to try linking with both libs,
11917 1999-01-31 19:45 millert
11919 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11921 1999-01-23 12:18 millert
11923 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11926 1999-01-22 13:13 millert
11928 * configure, CHANGES, INSTALL, configure.in: fix and correctly
11929 document --with-umask; problem noted by adap@adap.org
11931 1999-01-19 20:38 millert
11933 * configure.in, configure: only use /usr/{man,catman}/local to
11934 store man pages if suer didn't override prefix or mandir
11936 1999-01-19 20:24 millert
11938 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11941 1999-01-18 21:53 millert
11943 * RUNSON: updates from users
11945 1999-01-18 21:04 millert
11947 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11948 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11950 1999-01-18 20:00 millert
11952 * configure, configure.in: better fix for the problem of unresolved
11953 symbols in -lnsl or -lsocket
11955 1999-01-18 19:39 millert
11957 * configure, configure.in: when checking for functions in -lnsl and
11958 -lsocket link with both of them to avoid unresolved symbols on
11959 some weirdo systems
11961 1999-01-17 20:49 millert
11963 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11964 RCS before the RCS->CVS switch
11966 1999-01-17 18:16 millert
11968 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11969 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11970 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11971 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11972 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11973 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11974 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11975 emul/utime.h: add sudo tags
11977 1999-01-17 17:53 millert
11979 * version.h, sudo.h: testing Sudo tag
11981 1999-01-17 17:40 millert
11983 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11984 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11985 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11986 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11987 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11988 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11989 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11990 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11991 emul/utime.h: crank version and regen files
11993 1999-01-17 17:27 millert
11995 * Makefile.in: kill rcs goop in update_version and fix now that
11998 1999-01-17 17:08 millert
12000 * INSTALL, check.c, config.h.in, configure, configure.in,
12001 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12002 fcusack@iconnet.net
12004 1999-01-17 16:45 millert
12006 * realpath.c, sudo_realpath.c: we no longer use realpath
12008 1999-01-17 16:44 millert
12010 * qualify.c: replaced by find_path.c
12012 1999-01-17 16:43 millert
12014 * options.h: all options are now configure flags
12016 1999-01-17 16:42 millert
12020 1999-01-17 16:41 millert
12022 * getwd.c: superceded by getcwd.c
12024 1999-01-17 16:36 millert
12026 * getpass.c: superceded by tgetpass.c
12028 1999-01-17 16:36 millert
12030 * SUPPORTED: superceded by RUNSON
12032 1999-01-17 16:33 millert
12034 * OPTIONS: No longer used now that we have configure options for
12037 1999-01-17 16:32 millert
12039 * configure: regen based on configure.in
12041 1999-01-17 16:31 millert
12043 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12044 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12045 on sudo.pod, sudoers.pod, and visudo.pod
12047 1998-12-11 12:16 millert
12049 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12051 1998-12-07 16:16 millert
12053 * interfaces.c: close sock when we are done with it
12055 1998-11-27 19:37 millert
12057 * parse.yacc: never say "error on line -1"
12059 1998-11-23 23:38 millert
12061 * configure.in: check for -lnsl before -lsocket
12063 1998-11-23 23:29 millert
12065 * configure.in: quote '[', ']' used in ranges correctly
12067 1998-11-21 17:54 millert
12069 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12071 1998-11-20 18:33 millert
12075 1998-11-20 18:33 millert
12077 * INSTALL: more info for 1.5.7
12079 1998-11-20 18:30 millert
12081 * README: update for 1.5.7
12083 1998-11-20 14:26 millert
12085 * parse.yacc: make increases of cm_list_size and ga_list_size be
12086 similar to increases of stacksize (ie: >= not > in initial
12089 1998-11-20 14:22 millert
12091 * parse.yacc: when we get a syntax error, report it for the
12092 previous line since that's generally where the error occurred.
12094 1998-11-18 15:31 millert
12096 * config.h.in, configure.in, interfaces.c: add back check for
12097 sys/sockio.h but only use it if SIOCGIFCONF is not defined
12099 1998-11-18 15:25 millert
12101 * config.h.in: define BSD_COMP for svr4
12103 1998-11-17 23:16 millert
12105 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12106 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12107 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12108 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12111 1998-11-17 23:10 millert
12113 * configure.in: kill check for sockio,h
12115 1998-11-17 23:10 millert
12117 * config.h.in: no more HAVE_SYS_SOCKIO_H
12119 1998-11-17 22:51 millert
12121 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12122 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12123 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12124 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12127 1998-11-16 17:38 millert
12129 * sudo.c: add missing inform_user()
12131 1998-11-13 19:21 millert
12133 * find_path.c: return NOT_FOUND if given fully qualified path and
12134 it does not exist previously it would perror(ENOENT) which
12135 bypasses the option to not leak path info
12137 1998-11-13 19:20 millert
12139 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12140 for kerb, check for -ldes
12142 1998-11-13 14:19 millert
12144 * INSTALL: tty tickets are user:tty now
12146 1998-11-13 14:10 millert
12148 * check.c: when using tty tickets make it user:tty not user.tty as
12149 a username could have a '.' in it
12151 1998-11-09 19:15 millert
12153 * sudo.c: add "ignoring foo found in ." for auth successful case
12155 1998-11-09 17:57 millert
12157 * sudo.c: add missing printf param
12159 1998-11-08 15:56 millert
12161 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12162 go back to printing "command not found" unless
12163 --disable-path-info specified. Also, tell user when we ignore
12164 '.' in their path and it would have been used but for
12167 1998-11-08 13:51 millert
12169 * check.c, sudo.c: Only one space after a colon, not two, in
12172 1998-11-05 12:59 millert
12174 * sudo.pod: document setting $USER
12176 1998-11-04 22:24 millert
12178 * check.c: fix bugs with prompt expansion
12180 1998-11-04 21:21 millert
12182 * sudo.c: set $USER for root too
12184 1998-11-04 17:13 millert
12186 * getspwuid.c: typo
12188 1998-11-04 17:07 millert
12190 * configure.in: HP-UX's iscomsec is in -lsec, not libc
12192 1998-11-03 22:24 millert
12194 * configure.in: remove some entries in the OS case statement that
12197 1998-11-03 22:19 millert
12199 * TROUBLESHOOTING: add "cd" section and flush out syslog section
12201 1998-11-03 20:51 millert
12203 * Makefile.in: no more sudo-lex.yy.c
12205 1998-11-03 20:50 millert
12207 * check_sia.c: add custom prompt support
12209 1998-11-03 20:40 millert
12211 * sudo.c: kill perror("malloc") since we already have a good error
12212 messages pw_ent -> pw for brevity set $USER if -u specified
12214 1998-11-03 20:39 millert
12216 * parse.c: kill perror("malloc") since we already have a good error
12217 messages pw_ent -> pw for brevity when checking if %group
12218 matches, look up user in password file so that %groups works in a
12221 1998-11-03 20:39 millert
12223 * logging.c, parse.yacc: kill perror("malloc") since we already
12224 have a good error messages
12226 1998-11-03 20:38 millert
12228 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12229 perror("malloc") since we already have a good error messages
12230 pw_ent -> pw for brevity
12232 1998-11-03 15:03 millert
12234 * tgetpass.c: the prompt is expanded before tgetpass is called
12236 1998-11-03 15:03 millert
12238 * sudo.h: tgetpass now has the same args as getpass again
12240 1998-11-03 15:02 millert
12242 * getspwuid.c: add iscomsec, issecure support
12244 1998-11-03 15:02 millert
12246 * check.c: we now expand any %h or %u in the prompt before passing
12249 1998-11-03 14:58 millert
12251 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12253 1998-11-03 14:56 millert
12255 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12257 1998-11-03 14:55 millert
12259 * configure.in: add check for iscomsec in HP-UX
12261 1998-11-03 14:51 millert
12263 * configure.in: check for issecure if we have getpwanam on SunOS
12264 some options are incompatible with DUNIX SIA check for dispcrypt
12267 1998-10-25 15:21 millert
12269 * config.h.in: add HAVE_DISPCRYPT
12271 1998-10-25 15:21 millert
12273 * secureware.c: add back support for non-dispcrypt based checking
12276 1998-10-25 00:51 millert
12278 * INSTALL: sia changes
12280 1998-10-25 00:48 millert
12282 * configure.in: SIA becomes the default on Digital UNIX now havbe
12283 --disable-sia to turn it off...
12285 1998-10-24 23:52 millert
12287 * check.c: move local includes after system ones
12289 1998-10-24 19:28 millert
12291 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12292 INCORRECT_PASSWORD or an insult to stderr
12294 1998-10-24 19:07 millert
12296 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12297 password. Only the first iteration was working.
12299 1998-10-21 21:00 millert
12301 * aclocal.m4: don't trust UID_MAX or MAXUID
12303 1998-10-21 20:35 millert
12305 * configure.in: fix two pastos
12307 1998-10-21 20:30 millert
12309 * configure.in: fix typo
12311 1998-10-21 20:19 millert
12313 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12314 legal to be negative in DUNX 5.0
12316 1998-10-21 20:15 millert
12318 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12319 -lm but check for -ldb since DUNX < 4.0 lacks it
12321 1998-10-21 19:50 millert
12323 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12324 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12325 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12328 1998-10-20 17:22 millert
12330 * INSTALL: updated --with-editor blurb
12332 1998-10-20 17:21 millert
12334 * TROUBLESHOOTING: tell how to put sudoers in a different dir
12336 1998-10-20 16:22 millert
12338 * configure.in: add missing quotes around $with_editor
12340 1998-10-20 14:00 millert
12342 * configure.in: typo in --with-editor bits
12344 1998-10-20 01:24 millert
12346 * INSTALL: I don't expect it to work on Solaris
12348 1998-10-20 01:24 millert
12350 * check.c: add back security/pam_misc.h
12352 1998-10-19 17:13 millert
12354 * INSTALL: remove dunix note since configure checks for this now
12356 1998-10-19 16:30 millert
12358 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12361 1998-10-19 14:32 millert
12363 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12366 1998-10-19 14:32 millert
12368 * config.h.in: add HAVE_INITPRIVS
12370 1998-10-19 14:31 millert
12372 * sudo.c: call initprivs() if we have it for getprpwuid later on
12374 1998-10-19 14:30 millert
12376 * Makefile.in: clean pathnames.h too
12378 1998-10-19 14:28 millert
12380 * configure.in: quote "Sorry, try again." with [] since it has a
12381 comma in it set LIBS when we add stuff to SUDO_LIBS set
12382 SECUREWARE when we find getprpwuid() so we can check for
12383 bigcrypt, set_auth_parameters, and initprivs later.
12385 1998-10-19 13:48 millert
12387 * INSTALL: update Digital UNIX note about acl.h
12389 1998-10-18 20:26 millert
12391 * INSTALL: add --with-sia --without-root-sudo ->
12392 --disable-root-sudo some reordering
12394 1998-10-18 20:22 millert
12396 * secureware.c: add whitespace
12398 1998-10-18 20:22 millert
12400 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12401 sudo.h: add SIA support
12403 1998-10-18 20:21 millert
12405 * check_sia.c: Initial revision
12407 1998-10-18 19:42 millert
12409 * configure.in: when checking for -lsocket, -lnsl, and -linet,
12410 check for the specific functions we need from them.
12412 1998-10-18 19:10 millert
12414 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12416 1998-10-18 18:15 millert
12418 * sudo.h, Makefile.in: added check_secureware
12420 1998-10-18 18:12 millert
12422 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12425 1998-10-18 18:00 millert
12427 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12428 other sets defined. configure now does that for us
12430 1998-10-18 17:45 millert
12432 * configure.in: move some --with options around change a bunch of
12433 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12435 1998-10-18 01:09 millert
12437 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12438 that caused a syntax error add some echo verbage
12440 1998-10-17 18:08 millert
12442 * check.c: moved SecureWare stuff into secureware.c
12444 1998-10-17 18:07 millert
12446 * secureware.c: Initial revision
12448 1998-10-17 17:02 millert
12450 * INSTALL: update url to solaris gcc bins
12452 1998-10-17 16:39 millert
12454 * INSTALL: change option formatter and flesh out someentries
12456 1998-10-17 16:18 millert
12458 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12459 environment variable
12461 1998-10-17 16:01 millert
12463 * BUGS: everything is now done via configure
12465 1998-10-17 16:00 millert
12467 * README: prev rev was 1.5.6
12469 1998-10-17 00:33 millert
12471 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12474 1998-10-17 00:32 millert
12476 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12479 1998-10-17 00:31 millert
12481 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12482 sudoers_gid, sudoers_mode from configure
12484 1998-10-17 00:30 millert
12486 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12487 substituted into the Makefile, not config.h
12489 1998-10-17 00:30 millert
12491 * INSTALL: document all --with/--enable options
12493 1998-10-15 02:25 millert
12495 * insults.h: options.h is no more
12497 1998-10-15 02:25 millert
12499 * config.h.in: assimilated options.h
12501 1998-10-15 02:24 millert
12503 * configure.in: moved options from options.h to configure
12505 1998-10-15 01:41 millert
12507 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12508 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12509 sudo_setenv.c, visudo.c: no more options.h
12511 1998-10-15 01:39 millert
12513 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12516 1998-10-15 01:32 millert
12518 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12520 1998-10-15 00:10 millert
12522 * tgetpass.c: if select return < -1 still prompt for pw
12524 1998-10-15 00:03 millert
12526 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12527 IGNORE_DOT_PATH into configure options
12529 1998-10-14 23:57 millert
12531 * parse.c: FAST_MATCH is no longer an optino
12533 1998-10-14 23:52 millert
12535 * check.c: remove_timestamp() if timestamp is preposterous
12537 1998-10-14 23:36 millert
12539 * options.h: convert more options to --with/--enable
12541 1998-10-14 23:36 millert
12543 * INSTALL, aclocal.m4: logfile -> logpath
12545 1998-10-14 23:31 millert
12547 * configure.in: convert more options into --with and --enable
12549 1998-10-14 23:28 millert
12551 * tgetpass.c: catch EINTR in select and restart
12553 1998-10-14 23:15 millert
12555 * logging.c: sys/errno -> errno
12557 1998-09-24 11:40 millert
12559 * sudo.c: UMASK -> SUDO_UMASK.
12561 1998-09-24 11:36 millert
12563 * check.c, logging.c: time.h, not sys/time.h
12565 1998-09-21 19:52 millert
12567 * logging.c: MAILER -> _PATH_SENDMAIL
12569 1998-09-21 00:06 millert
12571 * INSTALL, configure.in: no more --with-C2, now it is
12574 1998-09-21 00:00 millert
12576 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12577 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12578 Always include shadow support if the platform supports it and the
12579 user did not disable it via configure
12581 1998-09-20 19:48 millert
12583 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12585 1998-09-20 19:16 millert
12587 * Makefile.in: pathnames.h -> pathnames.h.in
12589 1998-09-20 19:14 millert
12591 * check.c: fix version string
12593 1998-09-20 19:12 millert
12595 * check.c: move pam_conv to be static to auth function remove
12596 pam_misc.h (solaris doesn't have one)
12598 1998-09-20 19:10 millert
12600 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12603 1998-09-20 19:10 millert
12605 * configure.in: munge pathnames.h.in -> pathnames.h kill
12608 1998-09-20 19:10 millert
12610 * pathnames.h.in: convert to pathnames.h.in
12612 1998-09-18 20:20 millert
12614 * configure.in: fix typo in sysv4 matching case /.
12616 1998-09-18 01:29 millert
12618 * check.c: pam stuff needs to run as root, not user, for shadow
12621 1998-09-17 12:26 millert
12623 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12624 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12625 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12626 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12627 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12628 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12629 BUGS, INSTALL, README, configure.in: updated version
12631 1998-09-17 12:13 millert
12633 * check.c: user version.h for long message
12635 1998-09-17 11:53 millert
12637 * check.c: this is version 1.5.6
12639 1998-09-16 13:42 millert
12641 * Makefile.in: remove errant backslash
12643 1998-09-14 22:25 millert
12645 * options.h, parse.yacc, pathnames.h.in: fix version string
12647 1998-09-14 22:02 millert
12649 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12651 1998-09-14 22:02 millert
12653 * RUNSON: updated for 1.5.6
12655 1998-09-14 11:48 millert
12657 * interfaces.c: kill unused localhost_mask var copy if name to
12658 ifr_tmp after we zero it
12660 1998-09-13 15:50 millert
12662 * INSTALL: Better description of new vs. old sudoers modes fix some
12663 typos better description of /usr/ucb/cc gotchas on slowaris
12665 1998-09-13 15:49 millert
12667 * Makefile.in: add sample.pam
12669 1998-09-13 15:32 millert
12671 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12673 1998-09-12 11:10 millert
12675 * README: mention TROUBLESHOOTING more fix some typos
12677 1998-09-11 20:30 millert
12679 * configure.in: move --enable/--disable to be after --with
12681 1998-09-11 20:30 millert
12683 * INSTALL: document --enable/--disable
12685 1998-09-11 20:26 millert
12687 * INSTALL: document --with-pam
12689 1998-09-11 19:47 millert
12691 * configure.in: Add message for pam users
12693 1998-09-11 19:27 millert
12695 * sample.pam: Initial revision
12697 1998-09-11 19:23 millert
12699 * config.h.in: fix HAVE_PAM
12701 1998-09-11 19:19 millert
12703 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12704 <GCalvin@kenwoodusa.com>
12706 1998-09-10 18:51 millert
12708 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12710 1998-09-10 18:51 millert
12712 * logging.c: add WRAP_LOG and HOST_IN_LOG
12714 1998-09-10 18:37 millert
12716 * configure.in: add --enable-log-host and --enable-log-wrap
12718 1998-09-10 18:32 millert
12720 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12723 1998-09-08 20:45 millert
12725 * compat.h: add howmany macro
12727 1998-09-08 20:43 millert
12729 * tgetpass.c: include sys/param.h to get howmany macro
12731 1998-09-07 20:42 millert
12733 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12736 1998-09-07 12:51 millert
12738 * fnmatch.c: bring in stdio.h for NULL
12740 1998-09-07 12:50 millert
12742 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12744 1998-09-07 12:43 millert
12746 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12748 1998-09-07 12:42 millert
12750 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12752 1998-09-07 12:41 millert
12754 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12757 1998-09-07 12:39 millert
12759 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12761 1998-09-07 12:06 millert
12763 * interfaces.c: initialize previfname
12765 1998-09-07 11:51 millert
12767 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12768 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12769 IFF_LOOPBACK instead of kludging it
12771 1998-09-07 11:49 millert
12773 * configure.in: typo
12775 1998-09-07 00:01 millert
12777 * Makefile.in: don't need special build line for sudo.tab.o
12779 1998-09-06 23:58 millert
12781 * Makefile.in: don't clean sudo.tab.[ch]
12783 1998-09-06 23:48 millert
12785 * sudo.c: Sudo should prompt for a password before telling the user
12786 that a command could not be found.
12788 1998-09-06 23:47 millert
12792 1998-09-06 23:25 millert
12794 * INSTALL, README: no longer require yacc
12796 1998-09-06 23:19 millert
12798 * Makefile.in: typo
12800 1998-09-06 23:18 millert
12802 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12804 1998-09-06 23:09 millert
12806 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12807 command args if you get a '='
12809 1998-09-06 22:59 millert
12811 * insults.h: fix version ,
12813 1998-09-06 22:57 millert
12815 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12818 1998-09-06 22:55 millert
12820 * getcwd.c: getcwd(3) from OpenBSD for those without it.
12822 1998-09-06 22:51 millert
12824 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12826 1998-09-06 22:49 millert
12828 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12831 1998-09-06 22:41 millert
12833 * parse.c: use NAMLEN() macro
12835 1998-09-06 22:34 millert
12837 * fnmatch.c: remove duplicate include of string.h
12839 1998-09-06 22:28 millert
12841 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12843 1998-09-06 22:28 millert
12845 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12847 1998-09-06 22:28 millert
12849 * config.h.in: add dev_t and ino_t
12851 1998-07-28 12:44 millert
12853 * check.c: fix OTP_ONLY for opie
12855 1998-06-24 12:22 millert
12857 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12859 1998-05-19 00:10 millert
12861 * Makefile.in: make update_version saner
12863 1998-05-18 23:32 millert
12865 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12867 1998-05-18 23:32 millert
12869 * configure.in: check for waitpid and wait3 or no waitpid
12871 1998-05-18 23:31 millert
12873 * logging.c: used waitpid or wait3 if we have 'em
12875 1998-05-02 14:16 millert
12877 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12880 1998-04-27 20:09 millert
12882 * configure.in: don't need to explicately mention -lsocket -lnsl
12885 1998-04-25 01:56 millert
12887 * configure.in: dynix should not link with -linet
12889 1998-04-10 15:32 millert
12891 * INSTALL: mention that HP-UX doesn't ship with yacc
12893 1998-04-06 22:35 millert
12895 * check.c: ignore kerberos if we can't get the local realm
12897 1998-04-05 23:37 millert
12899 * configure.in, BUGS, INSTALL, README: ++version
12901 1998-04-05 23:36 millert
12905 1998-04-05 23:35 millert
12907 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12908 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12909 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12910 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12911 visudo.c: updated version
12913 1998-04-05 23:34 millert
12915 * check.c, sudo.h: fix version
12917 1998-04-05 23:33 millert
12919 * getcwd.c: don't use popen/pclose. Do it inline.
12921 1998-04-05 23:25 millert
12923 * lsearch.c: add rcsid
12925 1998-04-05 23:21 millert
12929 1998-04-05 23:17 millert
12931 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12932 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12933 check.c: updated version
12935 1998-04-05 23:15 millert
12937 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12940 1998-04-05 23:14 millert
12942 * Makefile.in: getwd.c -> getcwd.c
12944 1998-04-05 22:49 millert
12946 * config.h.in: kill HAVE_GETWD
12948 1998-04-05 22:49 millert
12950 * configure.in: getcwd, not getwd
12952 1998-04-05 22:48 millert
12954 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12955 defeats the purpose
12957 1998-03-31 00:15 millert
12959 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12961 1998-03-31 00:05 millert
12963 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12964 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12965 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12966 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12967 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12968 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12971 1998-03-30 23:54 millert
12973 * configure.in: support *-ccur-sysv4 and fix two typos
12975 1998-03-27 19:52 millert
12977 * configure.in: don't echo about with_logfile and with_timedir
12979 1998-03-27 19:49 millert
12981 * INSTALL: document --with-logfile and --with-timedir
12983 1998-03-27 19:46 millert
12985 * aclocal.m4: support --with-logfile and --with-timedir
12987 1998-03-27 19:46 millert
12989 * configure.in: Add --with-logfile and --with-timedir
12991 1998-03-27 19:27 millert
12993 * sudo.c: change size computation of NewArgv for UNICOS
12995 1998-02-18 20:10 millert
12997 * configure.in: treate -*-sysv4* like *-*-svr4
12999 1998-02-18 18:19 millert
13001 * configure.in: fix spacing for --with-authenticate help
13003 1998-02-18 16:39 millert
13005 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13006 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13007 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13008 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13009 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13010 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13013 1998-02-18 16:23 millert
13015 * parse.yacc: fix off by one error in push macro
13017 1998-02-17 01:15 millert
13019 * configure.in: removed bogus alloca hack
13021 1998-02-17 01:15 millert
13023 * check.c: added AIX 4.x authenticate() support
13025 1998-02-17 01:11 millert
13027 * parse.yacc: include alloca.h if using bison and not gcc and it
13028 exists. fixes an alloca problem on hpux 10.x
13030 1998-02-17 00:39 millert
13032 * INSTALL: mention --with-authenticate
13034 1998-02-17 00:37 millert
13036 * configure.in: added AIX authenticate() support
13038 1998-02-17 00:22 millert
13040 * config.h.in: add HAVE_AUTHENTICATE
13042 1998-02-16 23:58 millert
13044 * interfaces.c: dynamically size ifconf buffer
13046 1998-02-16 23:56 millert
13048 * configure.in: quote '[' and ']'
13050 1998-02-16 21:42 millert
13052 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13053 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13054 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13055 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13056 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13057 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13060 1998-02-16 19:06 millert
13062 * visudo.pod: add ERRORS section
13064 1998-02-16 18:57 millert
13066 * TROUBLESHOOTING: add busy stmp file explanation
13068 1998-02-15 18:49 millert
13070 * configure.in: the name of the cached var that signals whether or
13071 not you are cross compiling changed. It is now
13072 ac_cv_prog_cc_cross
13074 1998-02-11 16:26 millert
13076 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13078 1998-02-06 21:55 millert
13080 * sample.sudoers, sudoers.pod: better example of su but not root su
13082 1998-02-06 15:49 millert
13084 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13085 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13086 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13087 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13088 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13089 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13092 1998-02-06 15:48 millert
13094 * Makefile.in: correct regexp for updating version
13096 1998-02-06 14:05 millert
13098 * tgetpass.c: remove bogus flush of stderr spew prompt before
13099 turning off echo. Seems to fix a weird problem where if sudo
13100 complained about a bogus stamp file the user would sometimes not
13101 have a chance to enter a password
13103 1998-02-06 14:05 millert
13105 * check.c: fix bogus flush of stderr
13107 1998-02-05 19:19 millert
13109 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13111 1998-02-05 19:18 millert
13113 * configure.in: support hpux1[0-9] not just hpux10
13115 1998-01-30 14:59 millert
13117 * parse.c: set sudoers_fp to nil after closing
13119 1998-01-24 01:05 millert
13121 * config.guess, config.sub: updated from autoconf 2.12
13123 1998-01-24 00:50 millert
13125 * configure.in: add *-*-svr4 rule
13127 1998-01-22 22:53 millert
13129 * tgetpass.c: fix select usage for high fd's (dynamically allocate
13132 1998-01-22 22:49 millert
13134 * check.c: kill extra whitespace
13136 1998-01-22 19:28 millert
13138 * sudo.c: do an initgroups() before running a command, unless the
13139 target user is root.
13141 1998-01-22 12:22 millert
13143 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13146 1998-01-21 01:56 millert
13148 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13149 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13152 1998-01-21 01:32 millert
13154 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13157 1998-01-21 01:29 millert
13159 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13160 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13161 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13164 1998-01-21 01:20 millert
13166 * Makefile.in: more tweaks to update_version
13168 1998-01-21 01:19 millert
13170 * Makefile.in: fixed up update_version rule
13172 1998-01-21 00:55 millert
13174 * configure.in: ++version
13176 1998-01-21 00:53 millert
13178 * Makefile.in: removed supe of check.c
13180 1998-01-21 00:51 millert
13182 * INSTALL: ++version I missed
13184 1998-01-21 00:51 millert
13188 1998-01-21 00:48 millert
13190 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13191 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13192 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13193 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13194 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13195 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13196 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13198 1998-01-21 00:47 millert
13200 * CHANGES: updated for 1.5.5
13202 1998-01-21 00:35 millert
13204 * Makefile.in: add rules to update version stuff in files so I
13205 don't need to do it by hand
13207 1998-01-21 00:04 millert
13209 * sudo.h: sudoers_fp is now extern
13211 1998-01-21 00:03 millert
13213 * sudo.c: in check_sudoers, cache the sudoers file handle in
13214 sudoers_fp so we don't have to open it again in the parse. This
13215 may help with weird solaris problems where EAGAIN sometime
13218 1998-01-21 00:02 millert
13220 * parse.c: sudoers file open is now done only in check_sudoers() so
13221 we just do a rewind() instead of an open. May help people on
13222 solaris who were getting EAGAIN.
13224 1998-01-16 11:43 millert
13226 * INSTALL: mention that newer glibc is fixed
13228 1998-01-13 12:58 millert
13230 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13231 so ignore _RLD* instead of _RLD_*
13233 1998-01-13 10:32 millert
13237 1998-01-13 10:19 millert
13239 * parse.c: fix that bug for real
13241 1998-01-13 02:39 millert
13243 * INSTALL: document Linux's libc6 brokenness.
13245 1998-01-13 02:00 millert
13247 * parse.yacc: -Wall
13249 1998-01-13 01:22 millert
13253 1998-01-13 00:50 millert
13255 * TROUBLESHOOTING: remind people to HUP syslogd
13257 1998-01-13 00:05 millert
13259 * Makefile.in: add -O flag to tar
13261 1998-01-13 00:00 millert
13263 * TODO, RUNSON: updated
13265 1998-01-12 23:59 millert
13267 * sudo.pod: remove author's email addr. people should mail
13270 1998-01-12 23:49 millert
13272 * INSTALL: fix version
13274 1998-01-12 23:48 millert
13276 * README, check.c, compat.h, config.h.in, configure.in,
13277 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13278 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13279 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13280 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13281 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13282 visudo.c: ++version
13284 1998-01-12 23:44 millert
13288 1998-01-12 23:42 millert
13290 * INSTALL, Makefile.in: ++version
13292 1998-01-12 23:41 millert
13294 * CHANGES: updated fort 1.5.4
13296 1998-01-12 23:41 millert
13298 * check.c: exit(1) if user enters no passwd
13300 1998-01-12 23:37 millert
13304 1998-01-12 23:10 millert
13306 * parse.c: commands can start with ./* not just /* -- fixes a
13307 serious security hole.
13309 1997-12-21 18:17 millert
13311 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13312 leave it as "unknown".
13314 1997-11-23 13:29 millert
13316 * sample.sudoers: fix usage of (username) in conjunction with , and
13319 1997-11-23 13:28 millert
13321 * visudo.c: catch the case where the user is not in the passwd file
13323 1997-11-23 13:24 millert
13325 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13326 the nfds arg to select(2)
13328 1997-11-23 01:53 millert
13330 * sudo.c: define tty global to an initial value to avoid dumping
13331 core in logging functions when passwd file is unavailable.
13333 1997-11-23 01:51 millert
13335 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13336 gotten the passwd entry
13338 1997-11-23 00:21 millert
13340 * sudo.pod: talk about problem of ALL
13342 1997-10-10 00:54 millert
13344 * README: new web location
13346 1997-10-10 00:54 millert
13348 * INSTALL: fdesc bug is fixed in Open/Net BSD
13350 1997-10-10 00:52 millert
13352 * HISTORY: updates from Nieusma
13354 1997-10-09 18:37 millert
13356 * dce_pwent.c: move compat.h after the system includes
13358 1997-08-06 14:58 millert
13360 * logging.c: save errno from being clobbered by wait(). From Theo
13362 1997-05-21 11:57 millert
13364 * compat.h: fix an occurence of setresuid -> setreuid (typo)
13366 1997-03-19 17:45 millert
13368 * install-sh: check for path to strip
13370 1997-01-15 19:05 millert
13372 * logging.c: deal with maxfilelen < 0 case
13374 1997-01-15 19:05 millert
13376 * OPTIONS: fixed descriptin
13378 1996-12-11 23:10 millert
13380 * sudo.c: correct error message if mode/owner wrong and not
13381 statable by owner but is statable by root.
13383 1996-11-23 02:18 millert
13385 * config.guess, config.sub: autoconf 2.11
13387 1996-11-16 14:42 millert
13389 * CHANGES, RUNSON, TODO: sudo 1.5.3.
13391 1996-11-14 15:08 millert
13393 * sudo.h, parse.yacc: command_alias -> generic_alias
13395 1996-11-13 22:50 millert
13397 * sample.sudoers: added Runas_Alias example and fixed syntax errors
13399 1996-11-13 22:50 millert
13401 * OPTIONS, options.h: updated MAILSUBJECT
13403 1996-11-13 22:49 millert
13405 * logging.c: added %h expansion
13407 1996-11-13 21:37 millert
13409 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13410 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13411 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13412 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13413 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13414 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13415 visudo.c, INSTALL, README, configure.in: ++version
13417 1996-11-13 20:01 millert
13419 * emul/utime.h, BUGS: ++version
13421 1996-11-13 19:45 millert
13423 * sudoers.pod: document Runas_Alias
13425 1996-11-13 19:22 millert
13427 * visudo.pod: q (uid) -> Q
13429 1996-11-13 19:21 millert
13431 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13434 1996-11-13 19:05 millert
13436 * parse.yacc: add size params to sprintf
13438 1996-11-13 19:04 millert
13440 * parse.lex: allow trailing space after '\\' but before '\n'
13442 1996-11-13 19:04 millert
13444 * find_path.c: off by one error in path size check
13446 1996-11-13 19:03 millert
13448 * check.c: sprintf paranoia
13450 1996-11-12 11:59 millert
13452 * parse.yacc: fixed more_aliases
13454 1996-11-12 11:58 millert
13456 * visudo.c: now warns if killed by signal ./
13458 1996-11-11 10:49 millert
13460 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13461 expanded (but it is gross)
13463 1996-11-10 20:32 millert
13465 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13468 1996-11-10 20:08 millert
13470 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13473 1996-11-10 20:02 millert
13475 * parse.lex: Add Runas_Alias and simplify a rule.
13477 1996-11-10 19:15 millert
13479 * parse.yacc: always store User_Alias's since they can be used
13480 inside of a runas list. Sigh. Really need a Runas_Alias
13483 1996-10-30 18:04 millert
13485 * visudo.c: deal with case where there is no sudoers file
13487 1996-10-11 23:01 millert
13489 * TROUBLESHOOTING: added one
13491 1996-10-10 22:11 millert
13493 * HISTORY, testsudoers.c: developement -> development
13495 1996-10-10 22:08 millert
13497 * INSTALL: added a note
13499 1996-10-10 20:36 millert
13501 * RUNSON: for 1.5.2
13503 1996-10-10 20:36 millert
13507 1996-10-10 00:56 millert
13509 * PORTING: removed seteuid() notes
13511 1996-10-09 13:37 millert
13513 * compat.h: better seteuid() emulatino
13515 1996-10-09 13:36 millert
13517 * configure.in: added check for seteuid
13519 1996-10-09 13:36 millert
13521 * config.h.in: added HAVE_SETEUID
13523 1996-10-08 19:22 millert
13525 * configure.in: first stab at sequent support
13527 1996-10-08 19:21 millert
13529 * config.h.in: added HAVE_SYS_SELECT_H
13531 1996-10-08 19:21 millert
13533 * compat.h: sequent -> _SEQUENT_
13535 1996-10-08 19:11 millert
13537 * compat.h: added seteuid() macro for DYNIX
13539 1996-10-08 18:54 millert
13541 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13543 1996-10-07 01:05 millert
13545 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13546 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13547 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13548 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13549 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13550 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13551 visudo.c, tgetpass.c: ++version
13553 1996-10-07 00:59 millert
13555 * sudo.pod: added -H and SUDO_PS1
13557 1996-10-07 00:55 millert
13559 * configure.in: use SUDO_FUNC_FNMATCH
13561 1996-10-07 00:54 millert
13563 * aclocal.m4: added SUDO_FUNC_FNMATCH
13565 1996-10-07 00:53 millert
13567 * sudo.c: added -H flag
13569 1996-10-07 00:53 millert
13571 * sudo.h: added MODE_RESET_HOME /
13573 1996-10-05 00:00 millert
13575 * INSTALL: mention OPIE
13577 1996-10-04 23:59 millert
13579 * configure.in: added opie support
13581 1996-10-04 23:59 millert
13583 * check.c: added HAVE_OPIE and changed to *_OTP_*
13585 1996-10-04 23:58 millert
13587 * compat.h, config.h.in: added HAVE_OPIE
13589 1996-10-04 23:58 millert
13591 * OPTIONS, options.h: SKEY -> OTP
13593 1996-10-03 23:27 millert
13595 * check.c: moved fclose() in skey stuff.
13597 1996-10-03 19:53 millert
13599 * putenv.c: index -> strchr remove unnecesary stuff
13601 1996-10-03 19:43 millert
13603 * check.c: now call skeychallenge() to get challenge instead of
13604 making one up ourselves. this way, we get extra goodies in the
13607 1996-09-10 00:32 millert
13609 * CHANGES: added one
13611 1996-09-10 00:18 millert
13613 * parse.lex: allow logins to start with a number (YUCK!)
13615 1996-09-08 15:18 millert
13617 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13619 1996-09-08 15:15 millert
13621 * configure.in: DUNIX doesn't need -lnsl
13623 1996-09-07 20:22 millert
13625 * CHANGES: [no log message]
13627 1996-09-07 20:21 millert
13629 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13630 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13631 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13632 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13633 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13634 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13636 1996-09-07 20:13 millert
13638 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13641 1996-09-07 20:12 millert
13643 * visudo.pod: [no log message]
13645 1996-09-07 20:00 millert
13647 * sudo.pod, visudo.pod: courtesan
13649 1996-09-07 19:45 millert
13651 * HISTORY: added courtesan ./
13653 1996-09-06 00:12 millert
13655 * sudo.c: added $SUDO_PROMPT support
13657 1996-09-04 17:19 millert
13659 * check.c: print long skey challemged to stderr, not stdout
13661 1996-08-31 23:10 millert
13663 * CHANGES: updated for 1.5.1
13665 1996-08-31 23:07 millert
13667 * emul/utime.h: ++version
13669 1996-08-31 12:34 millert
13671 * RUNSON: updated for 1.5.1
13673 1996-08-30 10:49 millert
13675 * check.c: use shost, not host for tgetpass
13677 1996-08-30 00:21 millert
13679 * OPTIONS, sudo.pod: documented %u and %h
13681 1996-08-29 20:40 millert
13683 * configure.in: fixed typo
13685 1996-08-29 20:37 millert
13687 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13688 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13689 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13690 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13691 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13692 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13693 visudo.c: ++version
13695 1996-08-29 20:30 millert
13699 1996-08-29 18:32 millert
13701 * configure.in, Makefile.in, version.h: ++version
13703 1996-08-29 17:58 millert
13705 * sudo.h: new tgetpass() params
13707 1996-08-29 17:58 millert
13709 * check.c: pass use and host to tgetpass
13711 1996-08-29 17:57 millert
13713 * tgetpass.c: added %u and %h escapes
13715 1996-08-29 16:56 millert
13717 * OPTIONS, options.h, check.c: added NO_MESSAGE
13719 1996-08-29 16:23 millert
13721 * configure.in: added cray (unicos) support
13723 1996-08-27 11:36 millert
13725 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13727 1996-08-25 17:56 millert
13729 * INSTALL: added note about "make install"
13731 1996-08-25 17:50 millert
13733 * parse.yacc: changed length/size params from int to size_t
13735 1996-08-25 13:35 millert
13737 * OPTIONS: now get CSOPS insults as well by default
13739 1996-08-25 13:33 millert
13741 * insults.h: use csops insults too by default
13743 1996-08-25 13:31 millert
13745 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13746 version.h: version = 1.5
13748 1996-08-25 13:27 millert
13750 * sudo.c: added runas_homedir
13752 1996-08-25 13:27 millert
13754 * TODO: updated for 1.5
13756 1996-08-25 13:23 millert
13758 * RUNSON: updated for 1.5
13760 1996-08-25 13:19 millert
13762 * CHANGES: 1.5 release
13764 1996-08-25 13:17 millert
13766 * INSTALL: added "upgrading" notes
13768 1996-08-22 14:00 millert
13770 * visudo.c: now do chmod and chown after edit of temp file and
13773 1996-08-18 12:52 millert
13775 * Makefile.in: ++version added INSTALL.configure
13777 1996-08-18 12:52 millert
13779 * version.h, configure.in: ++version
13781 1996-08-18 12:51 millert
13783 * TROUBLESHOOTING: [no log message]
13785 1996-08-18 12:50 millert
13787 * parse.yacc: added missing cast
13789 1996-08-17 20:37 millert
13791 * sudo.c: sets $HOME to pw_dir of runas user
13793 1996-08-17 20:02 millert
13795 * sudo.pod: document $HOME change
13797 1996-08-17 19:43 millert
13799 * sudo.pod: fixed up some wording
13801 1996-08-17 19:25 millert
13803 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13804 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13805 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13806 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13808 1996-08-17 19:19 millert
13810 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13811 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13814 1996-08-17 19:18 millert
13816 * sudo.h: name nad type changes
13818 1996-08-17 19:17 millert
13820 * testsudoers.c: now works with new sudo
13822 1996-08-17 19:07 millert
13824 * parse.yacc: fixed some XXX
13826 1996-08-17 18:52 millert
13828 * parse.yacc: some variable name changes + comment headers for
13831 1996-08-17 18:41 millert
13833 * tgetpass.c: added extra paren's to make compilers happy
13835 1996-08-17 18:34 millert
13837 * sudo.c: [no log message]
13839 1996-08-17 18:30 millert
13841 * parse.c: now uses init_parser() if not in sudoers and tries
13842 "list" or "validate" scold but don't be nasty.
13844 1996-08-17 18:29 millert
13846 * TROUBLESHOOTING: now can use upper case login names
13848 1996-08-17 18:29 millert
13850 * visudo.c: now uses init_parser()
13852 1996-08-17 18:28 millert
13854 * PORTING: added info about PASSWORD_TIMEOUT
13856 1996-08-17 18:28 millert
13858 * INSTALL, README: updated
13860 1996-08-17 18:28 millert
13862 * INSTALL.configure: Initial revision
13864 1996-08-17 18:27 millert
13866 * BUGS: fixed a bug ,
13868 1996-08-17 18:27 millert
13870 * parse.yacc: now dynamically allocates memory for the stacks -- no
13873 1996-08-17 18:26 millert
13875 * sudo.pod: -l now explands command aliases
13877 1996-08-17 13:22 millert
13879 * parse.yacc: hacks to expand command aliases for `sudo -l'
13881 1996-08-17 13:22 millert
13883 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13886 1996-08-17 13:22 millert
13888 * sudo.h: added struct command_alias
13890 1996-08-17 13:20 millert
13892 * sudo.pod: fixed a bug
13894 1996-08-17 13:15 millert
13896 * lsearch.c: in compar() key should be first arg
13898 1996-08-15 15:48 millert
13900 * BUGS: fixed some bugs
13902 1996-08-15 15:47 millert
13904 * parse.yacc: can now deal with upcase HOST and USER names
13906 1996-08-15 15:47 millert
13908 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13910 1996-08-15 15:46 millert
13912 * sudo.pod: fixed thinko
13914 1996-08-15 15:46 millert
13916 * parse.c: fix comment
13918 1996-08-09 18:07 millert
13920 * parse.c, parse.yacc: added support for new `sudo -l' stuff
13922 1996-08-09 18:06 millert
13924 * sudo.c: now uses list_matches()
13926 1996-08-09 18:06 millert
13928 * sudo.h: added struct sudo_match
13930 1996-08-09 17:37 millert
13932 * configure.in: now more -lgnumalloc
13934 1996-08-01 13:12 millert
13936 * install-sh: added more paths for chown and whoami
13938 1996-07-31 10:41 millert
13942 1996-07-30 13:45 millert
13944 * aclocal.m4: fixed DUNIX check for shadow pw
13946 1996-07-30 13:41 millert
13948 * tgetpass.c: now only turn off echo if it is already on. this
13949 fixes a race when you use sudo in a pipelin
13951 1996-07-30 12:53 millert
13955 1996-07-29 22:29 millert
13957 * configure.in: changed "test -z $foo && do_this" to if; then
13960 1996-07-28 22:47 millert
13962 * configure.in: added missing defines of SHADOW_TYPE
13964 1996-07-26 14:10 millert
13966 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13967 they are only in dunix 4.x
13969 1996-07-26 14:09 millert
13971 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13973 1996-07-26 13:23 millert
13975 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13976 that didn't match. Now we can have runas stuff on more than one
13979 1996-07-25 23:45 millert
13981 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13982 defined to something
13984 1996-07-25 23:45 millert
13986 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13988 1996-07-25 23:44 millert
13990 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13991 instead of HAVE_C2_SECURITY
13993 1996-07-25 23:44 millert
13995 * check.c: SHADOW_TYPE is always defined so just against its value
13997 1996-07-25 23:44 millert
13999 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14001 1996-07-25 18:47 millert
14003 * sudoers.pod: * -> ?* in one example added another instance of
14004 (runas) and one of NOPASSWD:
14006 1996-07-24 13:02 millert
14008 * configure.in: added back check for config.cache from other host
14011 1996-07-24 12:49 millert
14013 * parse.lex: removed an instance of \"
14015 1996-07-24 12:49 millert
14017 * sample.sudoers: added an example
14019 1996-07-24 12:44 millert
14021 * sudoers.pod: updated wrt new wildcard matching
14023 1996-07-24 10:28 millert
14025 * configure.in: new check for shadow passwords if we don't know
14028 1996-07-24 10:28 millert
14030 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14032 1996-07-24 02:19 millert
14034 * configure.in: added back check for -lsocket (oops)
14036 1996-07-24 02:16 millert
14038 * configure.in: better (working) check for shadow passwd type if we
14041 1996-07-24 01:59 millert
14043 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14045 1996-07-24 01:59 millert
14047 * Makefile.in: added config.{guess,sub}
14049 1996-07-24 01:58 millert
14051 * aclocal.m4: removed unused stuff to figure out os type
14053 1996-07-23 22:58 millert
14055 * config.sub: added openbsd
14057 1996-07-23 22:54 millert
14059 * config.sub: Initial revision
14061 1996-07-23 22:40 millert
14063 * config.guess: Initial revision
14065 1996-07-23 21:18 millert
14067 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14068 it can only be a pathname. need to check against sudoers_args
14069 even if user_args is nil
14071 1996-07-23 21:18 millert
14073 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14074 can only be a pathname need to check against sudoers_args even if
14077 1996-07-23 18:52 millert
14079 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14081 1996-07-23 01:18 millert
14083 * testsudoers.c: now takes command line args and uses cmnd_args
14085 1996-07-23 01:10 millert
14087 * parse.lex: fill_args was adding an extra leading space
14089 1996-07-22 15:50 millert
14091 * visudo.c: fixed dummy command_matches()
14093 1996-07-22 15:50 millert
14095 * parse.yacc: fixed prototype
14097 1996-07-22 15:31 millert
14099 * sudo.h: added cmnd_args
14101 1996-07-22 15:31 millert
14103 * parse.yacc: now uses flat args string
14105 1996-07-22 15:30 millert
14107 * parse.c, parse.lex: now uses flat arg string
14109 1996-07-22 15:29 millert
14111 * visudo.c: added cmnd_args def
14113 1996-07-22 14:30 millert
14115 * sudo.c: now sets cmnd_args global
14117 1996-07-22 14:30 millert
14119 * logging.c: cmnd_args is now exported from sudo.[ch]
14121 1996-07-21 18:41 millert
14123 * parse.yacc: can't rely on cmnd_matches as much as I thought --
14124 added some $$ stuff back in to prevent namespace pollution
14127 1996-07-21 18:01 millert
14129 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14132 1996-07-20 00:45 millert
14134 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14135 starts a 'runas' if in the initial state to avoid collision with
14138 1996-07-20 00:23 millert
14140 * configure.in: added checks for specific shadow passwd schemes
14142 1996-07-20 00:18 millert
14144 * aclocal.m4: added routines to check for specific shadow passwd
14147 1996-07-18 18:27 millert
14149 * configure.in: added support for ncr boxen
14151 1996-07-18 18:26 millert
14153 * aclocal.m4: added support for detecting ncr boxen
14155 1996-07-16 14:57 millert
14157 * configure.in: added sinix support
14159 1996-07-13 22:29 millert
14161 * TROUBLESHOOTING: added info about "config.cache from other other"
14164 1996-07-13 22:22 millert
14166 * aclocal.m4: now makes sure you don't have a config.cache file
14169 1996-07-13 21:36 millert
14171 * configure.in: now sets $LIBS when needed to configure links with
14172 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14173 check for bigcrypt(3) if SPW_SECUREWARE
14175 1996-07-13 21:30 millert
14177 * getspwuid.c: fixed typo
14179 1996-07-13 21:05 millert
14181 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14182 AUTH_MAX_PASSWD_LENGTH
14184 1996-07-13 21:05 millert
14186 * getspwuid.c: no more SPW_HPUX10
14188 1996-07-13 21:04 millert
14190 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14192 1996-07-13 21:04 millert
14194 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14196 1996-07-13 21:04 millert
14198 * check.c: SPW_SECUREWARE now uses bigcrypt
14200 1996-07-13 18:24 millert
14202 * sample.sudoers: fixed 2 syntax errors
14204 1996-07-13 18:24 millert
14206 * sudoers: root may now run ALL as ALL
14208 1996-07-11 20:59 millert
14210 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14212 1996-07-08 16:08 millert
14214 * check.c, configure.in: updated AFS support
14216 1996-07-08 16:07 millert
14218 * TROUBLESHOOTING: added entry about /usr/ucb/cc
14220 1996-07-08 16:06 millert
14222 * INSTALL: prep no longer holds gcc binaries
14224 1996-07-08 15:48 millert
14226 * INSTALL: updated AFS note
14228 1996-07-08 15:43 millert
14230 * Makefile.in: added @AFS_LIBS@
14232 1996-07-08 15:33 millert
14234 * compat.h: AFS allows long passwords
14236 1996-07-08 14:16 millert
14238 * testsudoers.c: fixed -u user support
14240 1996-07-08 14:16 millert
14242 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14244 1996-07-08 13:30 millert
14246 * parse.yacc: fixed no_passwd vs. runas_matched
14248 1996-07-08 10:30 millert
14250 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14253 1996-07-08 10:30 millert
14255 * INSTALL: added --with-libraries > --with-libpath --with-incpath
14257 1996-07-08 10:21 millert
14259 * parse.yacc: was setting runas_matches to -1 in wrong place
14261 1996-07-08 09:58 millert
14263 * check.c: removed usersec.h which is not present in new AFS
14266 1996-07-08 09:55 millert
14268 * tgetpass.c: now deals with timeout <= 0
14270 1996-07-08 09:51 millert
14274 1996-07-08 00:04 millert
14276 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14278 1996-07-07 22:30 millert
14280 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14281 for root readable/writable filesystems
14283 1996-07-07 20:49 millert
14285 * Makefile.in: now gives INSTALL -c flag
14287 1996-07-07 20:34 millert
14289 * parse.yacc: slightly simpler initialization of no_passwd and
14292 1996-07-07 20:33 millert
14294 * testsudoers.c: added -u username support
14296 1996-07-07 20:32 millert
14298 * configure.in: improved --with-libraries support
14300 1996-07-07 16:27 millert
14302 * configure.in: added --with-incpath, --with-libpath,
14305 1996-07-07 16:01 millert
14307 * parse.yacc: now initializes some fields that weren't getting set
14308 to -1 pretty gross -- need a rewrite.
14310 1996-06-25 23:19 millert
14312 * alloca.c: removed emacs'isms
14314 1996-06-25 22:29 millert
14316 * configure.in: no longer add -lPW to *_LIBS since we include
14319 1996-06-25 22:29 millert
14321 * config.h.in: added HAVE_ALLOCA_H
14323 1996-06-25 22:28 millert
14325 * Makefile.in: added alloca.c
14327 1996-06-25 22:18 millert
14329 * alloca.c: Initial revision
14331 1996-06-25 21:58 millert
14333 * configure.in: ++version
14335 1996-06-25 19:32 millert
14337 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14338 nobody is not always set to a valid uid.
14340 1996-06-25 19:31 millert
14342 * OPTIONS: fixed entry for SUDO_MODE
14344 1996-06-25 18:02 millert
14346 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14347 *and* gid were being set to -2. Now beat NFS to the punch and
14348 set uid to "nobody" ourselves, preserving group 0 to read
14351 1996-06-25 18:02 millert
14353 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14355 1996-06-25 18:00 millert
14357 * logging.c: fixed a typo
14359 1996-06-25 18:00 millert
14361 * configure.in: no longer need AC_PROG_INSTALL
14363 1996-06-25 17:59 millert
14365 * Makefile.in: always use install-sh to avoid install(1)'s that use
14368 1996-06-25 16:07 millert
14370 * INSTALL: make clean -> make distclean
14372 1996-06-20 01:17 millert
14374 * parse.yacc: removed some unnecsary if's
14376 1996-06-20 01:16 millert
14378 * Makefile.in, version.h: ++version
14380 1996-06-20 01:16 millert
14382 * parse.c, testsudoers.c: now includes netgroup.h
14384 1996-06-20 00:45 millert
14386 * interfaces.c: removed cats of ioctl to int since they didn't shut
14389 1996-06-20 00:43 millert
14391 * interfaces.c: explicately cast ioctl() to int since it it not
14394 1996-06-20 00:41 millert
14396 * sudo.h: added declarations for yyparse() and yylex()
14398 1996-06-20 00:27 millert
14400 * parse.yacc: fixed an occurence of '==' -> '='
14402 1996-06-20 00:22 millert
14404 * config.h.in, configure.in: added check for netgroup.h
14406 1996-06-20 00:20 millert
14408 * sudo.c: fixed 2 compiler warnings
14410 1996-06-20 00:08 millert
14412 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14413 weren't being initialized
14415 1996-06-19 13:53 millert
14417 * sudo.pod: fixed a typo
14419 1996-06-17 12:19 millert
14421 * parse.yacc: fixed a formatting thingie
14423 1996-06-17 12:16 millert
14425 * parse.c, parse.yacc: fixed -u support with multiple user lists on
14428 1996-06-17 10:23 millert
14430 * configure.in: unixware needs -lgen
14432 1996-06-17 10:23 millert
14434 * README: updated ftp location
14436 1996-06-17 00:08 millert
14438 * sudoers.pod: add net_addr/netmask support
14440 1996-06-17 00:07 millert
14442 * sample.sudoers: added net_addr/mask example
14444 1996-06-17 00:02 millert
14446 * parse.lex, parse.c: added support for net_addr/netmask
14448 1996-06-15 20:13 millert
14450 * sudoers.pod: ^ -> !
14452 1996-06-15 18:12 millert
14454 * RUNSON: updated for 1.4.3
14456 1996-06-15 18:12 millert
14458 * CHANGES: udpated for 1.4.3
14460 1996-06-15 18:11 millert
14462 * TROUBLESHOOTING, TODO, BUGS: updated
14464 1996-06-15 18:11 millert
14466 * sample.sudoers: updated with examples of new stuff
14468 1996-06-15 18:10 millert
14470 * INSTALL, README: ++version
14472 1996-06-15 18:01 millert
14474 * sudoers.pod: updated wrt -u and NOPASSWD
14476 1996-06-15 17:58 millert
14478 * sudo.pod: updated wrt -u and CAVEATS
14480 1996-06-08 23:15 millert
14482 * sudo.c: fixed usage()
14484 1996-06-08 22:57 millert
14486 * parse.lex: now use :foo: character classes (makes no diff for
14489 1996-06-07 14:33 millert
14491 * check.c: fixed LONG_SKEY_PROMPT stuff
14493 1996-06-06 15:35 millert
14495 * visudo.c: fixed a comment
14497 1996-06-06 15:03 millert
14499 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14501 1996-06-06 15:02 millert
14503 * emul/search.h: fixed decls of lsearch()
14505 1996-06-05 22:20 millert
14507 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14509 1996-06-05 22:20 millert
14511 * check.c: hpux 10 uses bigcrypt() if C2
14513 1996-06-04 19:57 millert
14515 * parse.c: now always uses fnmatch to match args
14517 1996-06-04 19:40 millert
14519 * tgetpass.c: back to using stdio instead of raw i/o since that
14520 caused some problems
14522 1996-05-28 22:14 millert
14524 * sudo.c: now give usage warning if use -l,-v,-k with args
14526 1996-05-28 18:22 millert
14528 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14530 1996-05-28 12:50 millert
14532 * sudo.c: now sets sudoers to correct group if mode is 0400
14534 1996-05-28 12:02 millert
14536 * install-sh: updated to version used by inn and bind
14538 1996-05-28 00:08 millert
14540 * configure.in: now uses -lgnumalloc if it exists
14542 1996-05-28 00:02 millert
14544 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14547 1996-05-28 00:01 millert
14549 * sudo.c: rmeoved debugging statements
14551 1996-05-28 00:00 millert
14553 * parse.yacc: added a missing free()
14555 1996-05-27 23:58 millert
14557 * sudo.c: now uses user_gid instead of getegid (which was wrong
14558 anyway) to set SUDO_GID Now sets command line args in
14559 SUDO_COMMAND envariabled (logging.c depends on args being in the
14562 1996-05-27 23:57 millert
14564 * logging.c: now uses SUDO_COMMAND envariable to get command args
14565 rather than building it up again.
14567 1996-05-27 22:42 millert
14569 * parse.c: now uses user_gid
14571 1996-05-27 20:02 millert
14573 * sudo.c: fixed off by one error in allocation NewArgv
14575 1996-05-27 20:01 millert
14577 * parse.c: in sudoers, 'command ""' now means command with no args
14579 1996-05-27 20:01 millert
14581 * configure.in: added check for fnmatch(3) and fnmatch.h
14583 1996-05-27 20:01 millert
14585 * config.h.in: added HAVE_FNMATCH
14587 1996-05-27 20:00 millert
14589 * Makefile.in: replaced wildcat.* with fnmatch.*
14591 1996-05-27 20:00 millert
14593 * testsudoers.c: now uses fnmatch()
14595 1996-05-27 19:38 millert
14597 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14598 (*) by itself now matches multiple args added support for
14599 wildcards in the pathname in sudoers
14601 1996-05-25 19:23 millert
14603 * fnmatch.c: now includes compat.h and config.h
14605 1996-05-25 18:09 millert
14607 * config.h.in: added HAVE_FNMATCH_H
14609 1996-05-25 18:07 millert
14611 * configure.in: now checks for alloca() (if needed by bison or dce)
14612 and links with -lPW if it contains alloca() and libv and compiler
14615 1996-05-25 18:03 millert
14617 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14619 1996-04-28 22:38 millert
14621 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14624 1996-04-28 17:44 millert
14626 * Makefile.in: fixed pod2man usage
14628 1996-04-28 17:40 millert
14630 * configure.in, Makefile.in, version.h: ++version
14632 1996-04-28 17:20 millert
14634 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14636 1996-04-28 17:20 millert
14638 * sudo.h: removed PERM_FULL_ROOT
14640 1996-04-28 17:18 millert
14642 * sudo.c: runas_user defaults to "root" so no more need to
14645 1996-04-28 17:16 millert
14647 * parse.c: will now only running commands as root if there was no
14648 runas list (or if root is in the runas list)
14650 1996-04-28 17:15 millert
14652 * logging.c: now logs "USER=%s"
14654 1996-04-28 17:12 millert
14656 * parse.yacc: runas_matches is now set to false if we get a
14659 1996-04-28 15:01 millert
14661 * parse.lex: make #uid work + some minor cleanup
14663 1996-04-27 21:04 millert
14665 * sample.sudoers: added support for NOPASSWD and "runas" from
14668 1996-04-27 21:03 millert
14670 * visudo.c: added support for "runas" from garp@opustel.com
14671 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14672 support for SUDOERS_MODE
14674 1996-04-27 21:03 millert
14676 * testsudoers.c: added support for "runas" from garp@opustel.com
14678 1996-04-27 21:02 millert
14680 * sudo.h: added support for NO_PASSWD and runas from
14681 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14682 SUDOERS_GID and added support fro SUDOERS_MODE
14684 1996-04-27 21:00 millert
14686 * sudo.c: added support for NO_PASSWD and runas from
14687 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14688 SUDOERS_GID and added support fro SUDOERS_MODE
14690 1996-04-27 21:00 millert
14692 * parse.yacc: added support for NO_PASSWD and runas from
14695 1996-04-27 20:58 millert
14697 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14700 1996-04-27 20:56 millert
14702 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14704 1996-04-27 20:40 millert
14706 * configure.in: added --with-CC only link with -lshadow on linux
14707 (with shadow pw) if libc lacks getspnam()
14709 1996-04-27 20:39 millert
14711 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14712 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14713 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14715 1996-04-27 20:26 millert
14717 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14719 1996-04-27 11:20 millert
14721 * INSTALL: added --with-CC
14723 1996-04-06 16:31 millert
14725 * parse.lex: added double quote support
14727 1996-04-06 16:29 millert
14729 * sudoers.pod: documented double quoting
14731 1996-04-05 16:53 millert
14733 * mkinstalldirs: Initial revision
14735 1996-04-05 16:53 millert
14737 * check.c: fixed some indentation
14739 1996-04-05 16:48 millert
14741 * Makefile.in: fixed a typo
14743 1996-04-04 19:39 millert
14745 * Makefile.in: added install-dirs .
14747 1996-04-04 14:16 millert
14749 * dce_pwent.c: new version from "Jeff A. Earickson"
14750 <jaearick@colby.edu>
14752 1996-04-03 13:40 millert
14754 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14756 1996-04-03 13:40 millert
14760 1996-04-03 13:36 millert
14762 * parse.lex: FQHOST now has same constraints as non-FQHOST
14764 1996-04-02 19:00 millert
14766 * INSTALL: added note about OS's w/ shadow passwords turned on by
14769 1996-04-02 18:58 millert
14771 * configure.in: fixed a typo
14773 1996-04-02 18:48 millert
14775 * configure.in: added support for --without-THING sanitized shadow
14776 pw situtation by adding support for --without-C2
14778 1996-04-02 16:42 millert
14780 * tgetpass.c: fixed a typo wrt placement of an end paren
14782 1996-04-02 14:57 millert
14784 * check.c: was closing an fd that may not have been opened
14786 1996-03-21 19:55 millert
14788 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14790 1996-03-19 19:40 millert
14792 * configure.in: now always use shadow pw on some arches
14794 1996-03-19 17:07 millert
14796 * configure.in: added pyramid support
14798 1996-03-19 17:04 millert
14800 * configure.in: no longer check for C2 if alternate passwd method
14801 is used no longer check for some libs twice
14803 1996-03-19 17:00 millert
14805 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14807 1996-03-19 17:00 millert
14809 * parse.lex: added FQHOST rules
14811 1996-03-18 20:57 millert
14813 * tgetpass.c: now define TCSASOFT in necesary
14815 1996-03-18 20:31 millert
14817 * tgetpass.c: now uses read/write instead of stdio string goop to
14818 avoid problems with select(2)
14820 1996-03-18 19:37 millert
14822 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14825 1996-03-17 16:18 millert
14827 * INSTALL: added note about no shadow auto-detect if using
14828 alternate auth schemes
14830 1996-03-17 15:33 millert
14832 * configure.in: don't check for C2 if AFS or DCE (unless they said
14835 1996-03-17 15:08 millert
14837 * testsudoers.c: now groks shost
14839 1996-03-17 15:01 millert
14841 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14843 1996-03-16 14:43 millert
14845 * find_path.c: checkdot now works correctly
14847 1996-03-12 18:01 millert
14849 * configure.in: can't have DCE and C2 passwords both...
14851 1996-03-11 14:05 millert
14853 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14856 1996-03-11 14:04 millert
14858 * configure.in: now looks for skey in /usr/lib and doesn't require
14859 libskey to be in /usr/local/lib just because skey.h is (for my
14862 1996-03-11 02:00 millert
14864 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14867 1996-03-10 21:01 millert
14869 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14871 1996-03-10 20:59 millert
14873 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14875 1996-03-10 20:59 millert
14877 * OPTIONS: udpated FQDN
14879 1996-03-10 20:58 millert
14881 * config.h.in: added _SUDO_PATH_TIMEDIR
14883 1996-03-10 20:58 millert
14885 * aclocal.m4, configure.in: added SUDO_TIMEDIR
14887 1996-03-10 20:58 millert
14889 * sudo.pod: updated wrt /var/run/sudo
14891 1996-03-10 20:16 millert
14893 * sudo.c, sudo.h: added support for shost if FQDN
14895 1996-03-10 20:14 millert
14897 * parse.yacc, visudo.c: now uses shost if FQDN
14899 1996-03-10 20:12 millert
14901 * check.c: Now use skeylookup() instead off skeychallenge()
14903 1996-02-27 20:41 millert
14905 * logging.c: mail_argv should not contain ALERTMAIL as it includes
14908 1996-02-22 17:06 millert
14910 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14912 1996-02-22 16:27 millert
14914 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14916 1996-02-22 16:27 millert
14918 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14920 1996-02-05 19:20 millert
14922 * README, INSTALL: ++version
14924 1996-02-05 19:20 millert
14926 * Makefile.in: ++versoin
14928 1996-02-05 19:16 millert
14930 * Makefile.in: fixed a typo
14932 1996-02-05 19:16 millert
14934 * configure.in: ++version
14936 1996-02-05 18:53 millert
14940 1996-02-05 18:47 millert
14942 * CHANGES: done for 1.4.1 (I hope)
14944 1996-02-05 18:45 millert
14946 * sudoers.pod: added info on wildcards
14948 1996-02-05 18:39 millert
14950 * sample.sudoers: added wildcard example
14952 1996-02-05 17:03 millert
14954 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14956 1996-02-05 17:03 millert
14958 * configure.in: addedSUDO_PROG_BSHELL !ll
14960 1996-02-05 16:10 millert
14962 * visudo.pod: fixed up some formatting
14964 1996-02-05 16:10 millert
14966 * sudoers.pod: redid section describing sample sudoers stuff
14968 1996-02-05 16:10 millert
14970 * sudo.pod: fixed some formatting
14972 1996-02-04 22:50 millert
14974 * getspwuid.c: now treats "" as bourne shell
14976 1996-02-04 22:49 millert
14978 * Makefile.in: TESTOBJS nwo includes wildmat.o
14980 1996-02-04 22:48 millert
14982 * testsudoers.c: now works with NewArg[cv]
14984 1996-02-04 21:59 millert
14986 * sudo.c: removed an XXX (fixed it in getspwuid.c)
14988 1996-02-04 21:58 millert
14990 * aclocal.m4: added check for bourne shell
14992 1996-02-04 21:58 millert
14994 * pathnames.h.in: added _PATH_BSHELL
14996 1996-02-04 21:58 millert
14998 * config.h.in: added _SUDO_PATH_BSHELL
15000 1996-02-04 16:36 millert
15002 * visudo.c: unixware vi returns 256 instead of 0
15004 1996-02-04 16:24 millert
15006 * INSTALL: added Linux note
15008 1996-02-04 16:13 millert
15010 * logging.c: fixed up some XXX's. file log format now looks a
15011 little more like real syslog(3) format.
15013 1996-02-04 16:13 millert
15015 * README, TROUBLESHOOTING: updated wrt lex/flex
15017 1996-02-04 16:11 millert
15019 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15020 since we ship with a pre-flex'd parser
15022 1996-02-04 16:09 millert
15024 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15026 1996-02-04 02:28 millert
15028 * logging.c: eliminated some strcat()'s
15030 1996-02-04 02:10 millert
15032 * configure.in: no longer checks for lex/flex (now assumes flex)
15034 1996-02-04 02:08 millert
15036 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15037 just kerb_dir_candidate
15039 1996-02-02 20:48 millert
15041 * parse.yacc: now use a 'hook' expression instead of an iffy one
15044 1996-02-02 01:14 millert
15046 * visudo.c: now works with new sudo arg stuff
15048 1996-02-02 01:14 millert
15050 * parse.yacc: fixed dereferencing deadbeef
15052 1996-02-01 23:53 millert
15054 * sudo.c: changed an occurrence of Argv to NewArgv
15056 1996-02-01 23:53 millert
15058 * parse.lex: took out support for quoted commands since there is no
15061 1996-02-01 23:52 millert
15063 * parse.c: fixed a typo in a for() loop
15065 1996-02-01 23:52 millert
15067 * logging.c: protected against dereferencing rogue pointers
15069 1996-02-01 22:34 millert
15071 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15072 needed this also allows us to eliminate some kludges in
15073 parse_args() and eliminate superfluous code.
15075 1996-02-01 22:34 millert
15077 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15079 1996-02-01 22:32 millert
15081 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15082 cmnd_args (no longer used)
15084 1996-02-01 22:31 millert
15086 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15088 1996-02-01 22:30 millert
15090 * parse.yacc: COMMAND is now a struct containing the path and args
15092 1996-02-01 22:30 millert
15094 * parse.lex: replaced append() with fill_cmnd() and fill_args.
15095 command args from a sudoers entry are now stored in an arrary for
15098 1996-02-01 22:28 millert
15100 * parse.c: command line args from sudoers file are now in an array
15101 like ones passed in from the command line
15103 1996-01-31 20:59 millert
15105 * parse.c: wildwat stuff now works
15107 1996-01-29 00:44 millert
15109 * version.h: ++version
15111 1996-01-29 00:44 millert
15113 * Makefile.in: ++version added wildmat.*
15115 1996-01-28 17:55 millert
15117 * parse.lex: added support for quoted commands (w/ or w/o args)
15119 1996-01-22 01:55 millert
15121 * sudo.pod, visudo.pod: cleaned up formatting
15123 1996-01-21 20:53 millert
15125 * sudo.pod, visudo.pod: Initial revision
15127 1996-01-21 02:07 millert
15129 * sudoers.pod: looks reasonable, could be mroe readable
15131 1996-01-20 23:47 millert
15133 * sudoers.pod: Initial revision
15135 1996-01-16 14:38 millert
15139 1996-01-16 14:37 millert
15141 * OPTIONS: updated NO_ROOT_SUDO entry
15143 1996-01-15 11:37 millert
15145 * RUNSON: [no log message]
15147 1996-01-15 11:34 millert
15149 * sudo.c: fixed SECURE_PATH
15151 1996-01-14 20:55 millert
15153 * RUNSON: udpa`ted for 1.4
15155 1996-01-14 20:52 millert
15157 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15159 1996-01-14 20:32 millert
15161 * TROUBLESHOOTING: added entry for anal ansi compilers
15163 1996-01-14 16:13 millert
15165 * INSTALL: added info on libcrypt_i for SCO
15167 1996-01-14 16:05 millert
15169 * TODO: [no log message]
15171 1996-01-14 15:39 millert
15173 * sample.sudoers: added comments
15175 1996-01-14 15:25 millert
15177 * TODO: 1.4 release
15179 1996-01-14 15:22 millert
15181 * README, config.h.in, configure.in, CHANGES: ++version
15183 1996-01-14 15:21 millert
15185 * BUGS: ++version and fixed ISC
15187 1996-01-14 15:19 millert
15189 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15190 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15191 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15192 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15193 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15196 1996-01-14 15:16 millert
15198 * interfaces.c: added STUB_LOAD_INTERFACES ++version
15200 1996-01-14 15:14 millert
15202 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15203 emul/utime.h: ++version
15205 1996-01-14 15:13 millert
15207 * PORTING: added info about fd_set in tgetpass added info on
15210 1996-01-11 13:22 millert
15212 * dce_pwent.c: added sudo header
15214 1996-01-11 13:04 millert
15216 * tgetpass.c: fixed a typo
15218 1996-01-11 13:01 millert
15220 * Makefile.in: tgetpass.o is now only linked in with sudo (not
15223 1996-01-09 12:56 millert
15225 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15226 configure.in: ++version
15228 1996-01-09 12:54 millert
15230 * emul/utime.h: added copyright notice
15232 1996-01-09 12:52 millert
15234 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15235 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15236 interfaces.c, logging.c, options.h, parse.c, parse.lex,
15237 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15238 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15239 visudo.c: ++version
15241 1996-01-09 12:46 millert
15243 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15246 1996-01-09 12:42 millert
15248 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15250 1996-01-09 12:41 millert
15252 * config.h.in: added check for sys/bsdtypes.h
15254 1996-01-07 16:00 millert
15256 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15258 1996-01-07 15:55 millert
15260 * TROUBLESHOOTING: added 2 entries
15262 1996-01-07 15:55 millert
15264 * Makefile.in: added FAQ
15266 1996-01-07 14:26 millert
15268 * TROUBLESHOOTING: added section on syslog
15270 1996-01-07 14:25 millert
15272 * configure.in: added AC_ISC_POSIX for better ISC support
15274 1996-01-07 14:25 millert
15276 * config.h.in: fixed typo
15278 1996-01-07 14:25 millert
15280 * config.h.in: added define for _POSIX_SOURCE
15282 1996-01-04 00:41 millert
15284 * configure.in: fixed check for lsearch()
15286 1995-12-21 21:53 millert
15288 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15289 (should not happen)
15291 1995-12-20 17:02 millert
15293 * configure.in: now only define HAVE_LSEARCH if there is a
15294 corresponding search.h
15296 1995-12-20 15:52 millert
15298 * interfaces.c: works on ISC again
15300 1995-12-18 17:36 millert
15302 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15305 1995-12-18 17:32 millert
15307 * lsearch.c: char * -> const char *
15309 1995-12-18 17:29 millert
15311 * configure.in: now looks in -lcompat for lsearch()
15313 1995-12-18 17:23 millert
15315 * Makefile.in: remove sudo.core visudo.core for clan target
15317 1995-12-17 22:53 millert
15319 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15321 1995-12-17 22:36 millert
15323 * Makefile.in: fixed another occurence of sudo_getpwuid.*
15325 1995-12-17 22:30 millert
15327 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15329 1995-12-17 22:22 millert
15331 * configure.in: moved the "echo"
15333 1995-12-17 22:09 millert
15335 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15336 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15337 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15338 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15339 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15340 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15341 tgetpass.c, utime.c, version.h, visudo.c: ++version
15343 1995-12-17 22:04 millert
15345 * testsudoers.c: added group support
15347 1995-12-17 22:00 millert
15349 * sample.sudoers: added group entry
15351 1995-12-17 21:59 millert
15353 * sudoers.man: documented group support
15355 1995-12-17 21:50 millert
15357 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15359 1995-12-15 17:45 millert
15361 * check.c: tkfile was too short and overflowed the kerberos realm
15363 1995-12-11 17:09 millert
15365 * sudo.c: now copy command args directly from Argv
15367 1995-12-11 15:55 millert
15369 * sudo.c: replaced code to copy cmnd_args so that is does not use
15370 realloc since most realloc()'s really stink
15372 1995-12-08 14:11 millert
15374 * configure.in: syslog() fixed in hpux 10.01
15376 1995-12-06 17:45 millert
15378 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15381 1995-12-06 17:30 millert
15383 * configure.in: better error if cannot find skey incs or libs
15385 1995-12-06 17:26 millert
15387 * aclocal.m4: now use a temp file for determining max len of uid_t
15388 in string form. the old hacky way broke on netbsd
15390 1995-12-05 19:02 millert
15392 * sudo.c: added set of parens and a space
15394 1995-12-05 18:58 millert
15396 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15398 1995-12-05 18:58 millert
15400 * check.c: modified a comment
15402 1995-12-05 18:57 millert
15404 * Makefile.in: fixed up testsudoers target
15406 1995-12-05 18:56 millert
15408 * configure.in: DCE changes from Jeff Earickson
15409 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15410 SUDO_FDFLAGS and VISUDO_LDFLAGS
15412 1995-12-05 18:17 millert
15414 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15415 SUDO_LDFLAGS, VISUDO_LDFLAGS
15417 1995-11-27 23:32 millert
15419 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15421 1995-11-27 23:17 millert
15423 * check.c: LONG_SKEY_PROMPT is less of a klusge /
15425 1995-11-27 23:17 millert
15427 * configure.in: fixed typos w/ dce stuff
15429 1995-11-27 23:14 millert
15431 * Makefile.in: added dce_pwent.c
15433 1995-11-26 13:48 millert
15435 * INSTALL: amended section on combining authentication mechanisms
15437 1995-11-26 13:48 millert
15439 * PORTING: minor updates for 1.3.6
15441 1995-11-26 13:47 millert
15443 * TROUBLESHOOTING: added 2 more entries
15445 1995-11-26 13:39 millert
15447 * BUGS: updated for 1.3.6
15449 1995-11-26 13:39 millert
15451 * README: overhauled
15453 1995-11-25 21:23 millert
15455 * INSTALL: rewrote for sudo 1.3.6
15457 1995-11-25 21:23 millert
15459 * TROUBLESHOOTING: added 3 entries
15461 1995-11-25 13:53 millert
15463 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15464 since many includes don't prototype it. gag me.
15466 1995-11-25 13:23 millert
15468 * sudo.h: removed prototype for sudo_getpwuid() since convex C
15469 compiler choked on it.
15471 1995-11-25 13:23 millert
15473 * sudo.c: added prototype for sudo_getpwuid()
15475 1995-11-25 13:23 millert
15477 * lsearch.c: now compiles on strict ANSI compilers
15479 1995-11-24 23:56 millert
15481 * check.c: added LONG_SKEY_PROMPT support
15483 1995-11-24 23:55 millert
15485 * Makefile.in: added extra $'s for make to eat up, yum.
15487 1995-11-24 23:38 millert
15489 * OPTIONS, options.h: added LONG_SKEY_PROMPT
15491 1995-11-24 18:48 millert
15493 * check.c: s/key support now works with normal s/key as well as
15496 1995-11-24 18:46 millert
15498 * options.h, OPTIONS: added SKEY_ONLY
15500 1995-11-24 18:46 millert
15502 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15504 1995-11-24 00:42 millert
15506 * INSTALL: added DCE note added more AIX notes
15508 1995-11-24 00:39 millert
15510 * sudo.c: now include pthread.h for DCE support
15512 1995-11-23 22:22 millert
15514 * check.c: dce_pwent() is ok after all .,
15516 1995-11-23 22:21 millert
15518 * logging.c: now uses SYSLOG() macro that equates to either
15519 syslog() or syslog_wrapper
15521 1995-11-23 21:44 millert
15523 * dce_pwent.c: minor formatting changes. renamed check() to
15524 somthing less generic
15526 1995-11-23 21:27 millert
15528 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15529 visudo.c: now uses user_pw_ent and simple macros to get at the
15532 1995-11-22 20:35 millert
15534 * check.c: simpler dec unix C2 support
15536 1995-11-22 20:35 millert
15538 * getspwuid.c: now sets crypt_type for DEC unix C2
15540 1995-11-21 18:00 millert
15542 * configure.in: added csops paths for skey
15544 1995-11-21 16:27 millert
15546 * getspwuid.c: now includes string.h for strdup() prototype
15548 1995-11-21 01:47 millert
15550 * getspwuid.c: fixed a few typos
15552 1995-11-20 22:59 millert
15554 * check.c: now includes skey.h
15556 1995-11-20 22:10 millert
15558 * getspwuid.c: fixed up comments
15560 1995-11-20 22:04 millert
15562 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15564 1995-11-20 22:01 millert
15566 * sudo.c: now uses sudo_pw_ent
15568 1995-11-20 21:50 millert
15570 * testsudoers.c: now uses sudo_pw_ent
15572 1995-11-20 21:40 millert
15574 * visudo.c: now sets sudo_pw_ent
15576 1995-11-20 21:28 millert
15578 * getspwuid.c: Initial revision
15580 1995-11-20 21:28 millert
15582 * tgetpass.c: moved dce stuff into compat.h
15584 1995-11-20 21:27 millert
15586 * sudo.h, logging.c: now uses sudo_pw_ent
15588 1995-11-20 21:27 millert
15590 * Makefile.in: added sudo_getpwuid.c
15592 1995-11-20 21:25 millert
15594 * compat.h: added dce support
15596 1995-11-20 21:13 millert
15598 * parse.yacc: now uses sudo_pw_ent
15600 1995-11-20 14:40 millert
15602 * check.c: fixed exempt_group stuff for OS's that don't put base
15603 gid in group vector
15605 1995-11-20 01:39 millert
15607 * check.c: S/Key support now works with sunos4 shadow passwords
15609 1995-11-19 22:31 millert
15611 * Makefile.in: fixed clean rule
15613 1995-11-19 22:31 millert
15615 * config.h.in, configure.in: added DCE support
15617 1995-11-19 22:30 millert
15619 * tgetpass.c: DCE & KERB support
15621 1995-11-19 22:30 millert
15623 * check.c: first stab at dce support
15625 1995-11-19 22:24 millert
15627 * dce_pwent.c: now smells like sudo
15629 1995-11-19 22:11 millert
15631 * dce_pwent.c: Initial revision
15633 1995-11-19 21:36 millert
15635 * check.c: skey'd sudo now works w/ normal password as well
15637 1995-11-19 18:37 millert
15639 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15640 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15641 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15642 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15643 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15644 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15646 1995-11-19 18:32 millert
15648 * README: updated to reflect version change
15650 1995-11-19 18:27 millert
15652 * configure.in: --with options now line up ++version
15654 1995-11-19 18:26 millert
15656 * sudo.h: removed unecesary S/Key stuff
15658 1995-11-19 18:25 millert
15660 * configure.in: fixed S/Key support
15662 1995-11-19 18:24 millert
15664 * Makefile.in: -I stuff now goes in CPPFLAGS
15666 1995-11-19 18:23 millert
15668 * check.c: fixed SKey support
15670 1995-11-19 15:23 millert
15672 * README: updated version
15674 1995-11-19 13:59 millert
15676 * OPTIONS: fixed description of EXEMPTGROUP
15678 1995-11-19 10:47 millert
15680 * sudo.c: more people use _RLD_ than just alphas...
15682 1995-11-18 21:35 millert
15684 * Makefile.in: replaced $man_prefix with $mandir
15686 1995-11-18 21:30 millert
15688 * configure.in: fixed a typo
15690 1995-11-18 21:28 millert
15692 * Makefile.in: now use more GNU'ish dir names
15694 1995-11-18 21:27 millert
15696 * configure.in: now set *dir correctly (can override from command
15699 1995-11-18 19:17 millert
15701 * sudo.c: now deal with situations where we getwd() fails
15703 1995-11-17 00:37 millert
15705 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15707 1995-11-17 00:37 millert
15709 * configure.in: added sbin_dir
15711 1995-11-16 21:28 millert
15713 * Makefile.in: now ship a flex-generated lex.yy.c
15715 1995-11-16 21:09 millert
15717 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15720 1995-11-16 21:06 millert
15722 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15723 overridden via Makefile
15725 1995-11-16 21:05 millert
15727 * options.h: no more error for redefining SUDOERS_OWNER
15729 1995-11-16 21:05 millert
15731 * OPTIONS: expanded SUDOERS_OWNER section
15733 1995-11-16 03:05 millert
15735 * visudo.c: now warn if chown(2) failed
15737 1995-11-16 02:55 millert
15739 * logging.c: better default warning for NO_SUDOERS_FILE
15741 1995-11-16 02:54 millert
15743 * sudo.c: added missing set_perms() no more cryptic message if the
15744 sudoers file is zero length, now just give a parse error
15746 1995-11-16 02:42 millert
15748 * logging.c: better diagnostics if NO_SUDOERS_FILE
15750 1995-11-16 02:41 millert
15752 * sudo.c: check_sudoers() now catches sudoers files that are not
15753 readable (but are stat'able).
15755 1995-11-13 01:12 millert
15757 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15759 1995-11-13 00:52 millert
15761 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15764 1995-11-13 00:52 millert
15766 * Makefile.in: now uses exec_prefix & prefix from configure
15768 1995-11-13 00:16 millert
15770 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15771 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15772 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15773 so shadow build trees can have a custom copy of options.h
15775 1995-11-13 00:15 millert
15777 * check.c: user_is_exempt() is no longer a hack, it now uses
15780 1995-11-12 23:56 millert
15782 * options.h: EXEMPTGROUP is now "sudo"
15784 1995-11-12 22:25 millert
15786 * configure.in: MAN_POSTINSTALL now contains a leading space
15788 1995-11-12 22:25 millert
15790 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15791 now removes testsudoers in clean:
15793 1995-11-12 22:24 millert
15795 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15797 1995-10-30 15:51 millert
15799 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15800 don't get spoofed into using a bogus server
15802 1995-09-29 17:50 millert
15804 * parse.yacc: now explicately initialize match[] tp be FALSE
15806 1995-09-23 16:48 millert
15808 * sudo.c: removed unused variable now passes -Wall
15810 1995-09-23 16:48 millert
15812 * parse.yacc: yyerror and dumpaliases are now void's now passes
15815 1995-09-23 16:48 millert
15817 * parse.lex: added prototype for yyerror
15819 1995-09-23 16:47 millert
15821 * interfaces.c: rmeoved unused cruft now passes -Wall
15823 1995-09-23 16:47 millert
15825 * check.c, logging.c, parse.c: now passes -Wall
15827 1995-09-23 16:46 millert
15829 * Makefile.in: fixed headers that moved to emul dir
15831 1995-09-23 12:05 millert
15833 * logging.c: fixed deref of nil pointer if no args
15835 1995-09-15 19:18 millert
15837 * OPTIONS: added a caveat to FQDN section
15839 1995-09-13 19:48 millert
15841 * Makefile.in: more $srcdir support for install targets
15843 1995-09-13 17:17 millert
15845 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15846 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15847 visudo.c: don't include malloc.h if we include stdlib.h
15849 1995-09-12 21:44 millert
15851 * parse.yacc: local search.h now lives in emul
15853 1995-09-12 21:41 millert
15855 * lsearch.c: local search.h now lives in emul
15857 1995-09-12 21:41 millert
15859 * check.c, utime.c: local utime.h now lives in emul dir
15861 1995-09-12 21:38 millert
15863 * Makefile.in: added support for building in other than the
15866 1995-09-10 14:01 millert
15868 * OPTIONS: annotated CSOPS_INSULTS option
15870 1995-09-10 13:56 millert
15872 * TROUBLESHOOTING: updated shadow passwords blurb
15874 1995-09-09 21:00 millert
15876 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15877 shell and passes along foo as the arguments
15879 1995-09-09 18:52 millert
15881 * parse.lex: collapsed pathname and dir sections into one -- its
15884 1995-09-09 18:34 millert
15886 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15887 append() and fill() now take args to make the above work
15889 1995-09-08 20:51 millert
15891 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15892 a tty on fd 1 to erroneously have "none" as their tty
15894 1995-09-04 15:35 millert
15896 * check.c: timestampfile is now a global static removed decl of
15897 timestampfile in remove_timestamp since we can just use the
15900 1995-09-04 15:28 millert
15902 * check.c: created touch() to update timestamps added
15903 USE_TTY_TICKETS support (bit of a kludge)
15905 1995-09-04 15:28 millert
15907 * compat.h: added _S_IFDIR and S_ISDIR
15909 1995-09-04 15:22 millert
15911 * OPTIONS, options.h: added USE_TTY_TICKETS
15913 1995-09-04 00:38 millert
15915 * parse.yacc: removed const from casts for lsearch() & lfind() to
15916 placate irix 4.x C compiler
15918 1995-09-03 14:12 millert
15920 * sudo.c: now only strip '/dev/' off of a tty if it starts with
15923 1995-09-03 14:12 millert
15925 * pathnames.h.in: added _PATH_DEV
15927 1995-09-03 14:11 millert
15929 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15930 tcgetattr only if have termios.h
15932 1995-09-03 14:09 millert
15934 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15935 not int for c_?flag
15937 1995-09-03 13:19 millert
15939 * parse.lex, parse.yacc: fixed a spelling error
15941 1995-09-03 13:17 millert
15943 * Makefile.in: fixed typo
15945 1995-09-02 12:55 millert
15947 * Makefile.in: fixed a comment
15949 1995-09-02 12:54 millert
15951 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15952 now that we dynamically allocate strings they need to be free()'d
15954 1995-09-02 12:46 millert
15956 * parse.lex: dynamically allocates space for strings
15958 1995-09-02 12:34 millert
15960 * sudo.h: no more MAXCOMMANDLENGTH
15962 1995-09-01 22:25 millert
15964 * sudo.h: added decl of tty
15966 1995-09-01 22:25 millert
15968 * logging.c, sudo.c: moved tty stuff into sudo.c
15970 1995-09-01 14:18 millert
15972 * parse.c: fixed a logic bug. Was denying a command if user gave
15973 command line args but there were none in the sudoers file which
15976 1995-09-01 01:18 millert
15978 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15980 1995-09-01 01:13 millert
15982 * parse.lex: return foo; -> return(foo);
15984 1995-09-01 01:03 millert
15986 * parse.yacc: fixed netgr_matches() prototype
15988 1995-09-01 01:02 millert
15990 * parse.lex: added support for escaping "termination" characters
15992 1995-09-01 00:55 millert
15994 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15997 1995-09-01 00:50 millert
15999 * sudo.c: fixed comments
16001 1995-09-01 00:49 millert
16003 * goodpath.c: fixed negation problem (doh!)
16005 1995-09-01 00:25 millert
16007 * parse.yacc: fixed 2nd parameter to lfind()
16009 1995-09-01 00:24 millert
16011 * parse.lex: now do bounds checking in fill() and append()
16013 1995-09-01 00:23 millert
16015 * sudo.c: include netdb.h as we should added a missing void cast
16016 added SHELL_IF_NO_ARGS support now use realloc() properly. would
16017 fail if realloc actually moved the string instead of shrinking it
16019 1995-09-01 00:17 millert
16021 * sample.sudoers: updated with examples of new features
16023 1995-09-01 00:05 millert
16025 * goodpath.c: now set errno to EACCES if not a regular file or not
16028 1995-09-01 00:04 millert
16030 * find_path.c: if given a fully-qualified or relative path we now
16031 check it with sudo_goodpath() and error out with the appropriate
16032 error message if the file does not exist or is not executable
16034 1995-09-01 00:03 millert
16036 * lsearch.c, emul/search.h: now use correct args for lfind
16038 1995-09-01 00:03 millert
16040 * logging.c: added a comment
16042 1995-08-31 23:52 millert
16044 * insults.h: added in CSOps insults
16046 1995-08-31 23:51 millert
16048 * ins_csops.h: Initial revision
16050 1995-08-31 23:35 millert
16052 * tgetpass.c: added RCS id
16054 1995-08-31 22:56 millert
16056 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16059 1995-08-31 22:55 millert
16061 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16063 1995-08-31 22:54 millert
16065 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16066 -p now works with -s
16068 1995-08-31 22:54 millert
16070 * parse.c: don't try to stat() "pseudo commands" like "validate"
16072 1995-08-31 22:53 millert
16074 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16077 1995-08-31 22:53 millert
16079 * configure.in: added SecurID support added other insults to
16082 1995-08-31 22:52 millert
16084 * config.h.in: added HAVE_SECURID
16086 1995-08-31 22:52 millert
16088 * Makefile.in: added clobber target added ins_csops.h now gets
16089 CFLAGS from configure
16091 1995-08-31 22:46 millert
16093 * aclocal.m4: relaxed SUDO_FULL_VOID
16095 1995-08-31 22:44 millert
16097 * visudo.c: function comment blocks are now in same style as rest
16100 1995-08-31 22:44 millert
16102 * testsudoers.c: added support for command line args in
16105 1995-08-31 22:43 millert
16107 * sudoers.man: updated to have command args in the sudoers file
16109 1995-08-31 22:42 millert
16111 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16114 1995-08-19 19:32 millert
16116 * parse.yacc: PATH renamed to COMMAND
16118 1995-08-19 19:31 millert
16120 * parse.lex: it is now a parse error for directories to have args
16123 1995-08-19 19:30 millert
16125 * logging.c: now say command args if telling user to buzz off
16127 1995-08-19 19:30 millert
16129 * sudo.c: -s no longer indicates end of args sped up loading on
16130 cmnd_args in load_cmnd()
16132 1995-08-19 19:29 millert
16134 * parse.c: removed an unreachable statement
16136 1995-08-19 17:53 millert
16138 * parse.lex: made more efficient by pulling out the terminators
16139 when in GOTCMND state and making them their own rule
16141 1995-08-14 00:07 millert
16143 * sudo.h: removed MAXLOGLEN since it is no longer used
16145 1995-08-14 00:07 millert
16147 * parse.lex: now allows command args
16149 1995-08-14 00:06 millert
16151 * parse.c: now groks command arguments
16153 1995-08-13 23:39 millert
16155 * logging.c: now sets tty correctly when piped input
16157 1995-08-13 23:35 millert
16159 * sudo.c: fixed loading of cmnd_args (was including command name
16162 1995-08-13 23:34 millert
16164 * logging.c: fixed a core dump due to incorrect if construct
16166 1995-08-13 00:33 millert
16168 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16171 1995-08-13 00:33 millert
16173 * aclocal.m4: fixed check for ISC
16175 1995-08-13 00:32 millert
16177 * sudo.c: now sets cmnd_args used by log_error() and that will be
16178 used by the parse to check against command args
16180 1995-08-13 00:32 millert
16182 * sudo.h: added cmnd_args
16184 1995-08-13 00:31 millert
16186 * logging.c: now dynamically allocate logline since we can guess at
16189 1995-08-05 13:52 millert
16191 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16192 buffer remove "register" since the compiler knows more than I do
16193 now do a "basename" of the tty
16195 1995-07-31 18:20 millert
16197 * configure.in: ++version
16199 1995-07-30 22:37 millert
16201 * sudo.h: added shell extern changed MODE_* to be bit masks to
16202 allow for several options together
16204 1995-07-30 22:36 millert
16206 * sudo.c: added -s (shell) option made MODE_* masks so we can do
16207 bitwise & and | to see if multiple flags are set.
16209 1995-07-30 22:01 millert
16211 * check.c: added securid support
16213 1995-07-30 14:38 millert
16215 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16218 1995-07-29 17:17 millert
16220 * Makefile.in, version.h: ++version
16222 1995-07-27 06:52 millert
16224 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16226 1995-07-26 22:00 millert
16228 * testsudoers.c: added netgr_matches
16230 1995-07-26 21:29 millert
16232 * parse.c: cleaned up netgr_matches
16234 1995-07-26 00:26 millert
16236 * RUNSON: updated for 1.3.4
16238 1995-07-24 21:51 millert
16240 * Makefile.in: now installs sudoers.man -- really should clean this
16243 1995-07-24 21:18 millert
16245 * Makefile.in: added sudoers.cat and sudoers.man
16247 1995-07-24 21:15 millert
16249 * sudo.man: pulled out stuff on the sudoers file format into a
16252 1995-07-24 21:14 millert
16254 * sudoers.man: Initial revision
16256 1995-07-24 21:04 millert
16258 * HISTORY: fixed up my email address
16260 1995-07-24 20:03 millert
16262 * configure.in: added checks for innetgr and getdomainname
16264 1995-07-24 20:02 millert
16266 * visudo.c: added dummy netgr_matches function
16268 1995-07-24 20:01 millert
16270 * parse.c: added netgr_matches
16272 1995-07-24 20:01 millert
16274 * parse.lex, parse.yacc: added NETGROUP support
16276 1995-07-24 20:01 millert
16278 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16280 1995-07-24 18:07 millert
16282 * sudo.c: rewrote clean_env() that has rm_env() builtin
16284 1995-07-23 19:58 millert
16286 * check.c: now cast uid to long in sprintf
16288 1995-07-23 19:58 millert
16290 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16292 1995-07-23 19:57 millert
16294 * options.h: added _INSULTS suffix to HAL & GOONS
16296 1995-07-23 19:35 millert
16298 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16299 new scheme of insult "unions" end
16301 1995-07-23 17:48 millert
16303 * sudo.c: now uses MAX_UID_T_LEN
16305 1995-07-23 17:48 millert
16307 * configure.in: added SUDO_UID_T_LEN !l
16309 1995-07-23 17:48 millert
16311 * config.h.in: added MAX_UID_T_LEN
16313 1995-07-23 17:47 millert
16315 * check.c: now use MAX_UID_T_LEN
16317 1995-07-23 17:47 millert
16319 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16322 1995-07-19 19:05 millert
16324 * configure.in: corrected version
16326 1995-07-19 17:29 millert
16328 * configure.in: added sco support
16330 1995-07-19 17:29 millert
16332 * aclocal.m4: hack to check for sco
16334 1995-07-18 21:27 millert
16336 * interfaces.c: removed #include <net/route.h> since it was hosing
16339 1995-07-18 13:35 millert
16341 * find_path.c: fixed prreadlink() prototype
16343 1995-07-17 23:54 millert
16345 * check.c: added parens in #if's
16347 1995-07-17 23:53 millert
16349 * configure.in: added SPW_ prefix
16351 1995-07-17 23:20 millert
16353 * sudo.h: moved SPW_* to config.h.in
16355 1995-07-17 23:19 millert
16357 * sudo.c: added a set of parens
16359 1995-07-17 23:19 millert
16361 * config.h.in: added SPW_*
16363 1995-07-17 22:50 millert
16365 * sudo.h: added SPW_* reordered error codes
16367 1995-07-17 22:49 millert
16369 * check.c: moved SPW_* to sudo.h
16371 1995-07-17 14:29 millert
16373 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16375 1995-07-17 14:29 millert
16377 * configure.in: AUTH -> SECUREWARE
16379 1995-07-17 14:29 millert
16381 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16383 1995-07-17 00:22 millert
16385 * check.c: now uses SHADOW_TYPE to make shadow pw support more
16386 readable and modular. It's a start...
16388 1995-07-17 00:21 millert
16390 * configure.in: added autodetection of shadow passwords
16392 1995-07-17 00:20 millert
16394 * sudo.c: now uses SHADOW_TYPE define
16396 1995-07-17 00:19 millert
16398 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16401 1995-07-17 00:19 millert
16403 * aclocal.m4: added SUDO_CHECK_SHADOW
16405 1995-07-12 17:09 millert
16407 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16408 took out test for memmove() since we dno longer use it...
16410 1995-07-12 17:08 millert
16414 1995-07-12 17:05 millert
16416 * logging.c: added BROKEN_SYSLOG support
16418 1995-07-12 17:05 millert
16420 * config.h.in: added BROKEN_SYSLOG
16422 1995-07-12 17:04 millert
16424 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16425 allow for a machine udpating its time from a server
16427 1995-07-12 17:04 millert
16429 * sudo.man: added 2 security notes updated Nieusma's email addr
16431 1995-07-12 14:18 millert
16433 * lsearch.c: changed a memmove() to memcpy() since we don't have to
16434 worry about overlapping segments.
16436 1995-07-11 15:41 millert
16438 * interfaces.c: cleanup up the loop when interfaces are groped in
16439 so that it is readable
16441 1995-07-11 14:52 millert
16443 * Makefile.in, version.h: ++version
16445 1995-07-09 18:17 millert
16447 * CHANGES: annotated 124-126
16449 1995-07-07 16:06 millert
16451 * check.c: fixed permissions check on /tmp/.odus
16453 1995-07-06 19:35 millert
16455 * check.c: fixed some comments
16457 1995-07-06 14:49 millert
16459 * check.c: now checks owner & mode of timedir also checks for bogus
16460 dates on timestamp file
16462 1995-07-06 14:49 millert
16464 * OPTIONS: updated TIMEOUT info
16466 1995-07-06 14:48 millert
16468 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16470 1995-07-06 14:47 millert
16472 * compat.h: added definition of S_IRWXU
16474 1995-07-06 14:47 millert
16478 1995-07-03 14:16 millert
16480 * interfaces.c: added #ifdef to make it compile on strange arches
16482 1995-07-02 18:13 millert
16484 * aclocal.m4: fixed check for fulkl void impl.
16486 1995-07-02 09:56 millert
16488 * check.c: added mssing "static"
16490 1995-07-01 20:41 millert
16492 * insults.h: replaced #elif with #else #if constructs for ancient C
16495 1995-07-01 20:18 millert
16497 * INSTALL: updated irix c2 & kerb5 info
16499 1995-07-01 20:15 millert
16501 * configure.in: added shadow pw support for irix
16503 1995-07-01 16:07 millert
16505 * CHANGES: last changes for sudo 1.3.3
16507 1995-07-01 16:07 millert
16509 * TODO, BUGS: updated
16511 1995-07-01 16:04 millert
16513 * configure.in: now calls SUDO_SOCK_SA_LEN
16515 1995-07-01 16:04 millert
16517 * config.h.in: added HAVE_SA_LEN
16519 1995-07-01 16:04 millert
16521 * aclocal.m4: added SUDO_SOCK_SA_LEN
16523 1995-07-01 15:49 millert
16525 * interfaces.c: now works with ip implementations that use sa_len
16528 1995-07-01 14:26 millert
16530 * INSTALL: added note about buggy AIX compiler
16532 1995-07-01 14:24 millert
16534 * interfaces.c: now include sys/time.h for AIX
16536 1995-06-27 22:35 millert
16538 * Makefile.in: getcwd -> getwd
16540 1995-06-27 21:28 millert
16542 * interfaces.c: now works for ISC and others. yay.
16544 1995-06-26 14:24 millert
16546 * Makefile.in, version.h: version++
16548 1995-06-22 20:26 millert
16550 * aclocal.m4: fixed test for full void impl
16552 1995-06-22 20:25 millert
16554 * sudo.c: now check to see that st_dev is non-zero before assuming
16555 that we are being spoofed
16557 1995-06-20 16:56 millert
16559 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16562 1995-06-19 16:32 millert
16564 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16566 1995-06-19 16:10 millert
16568 * logging.c: added cast for ttyname()
16570 1995-06-19 15:23 millert
16572 * configure.in: fixed typo
16574 1995-06-19 15:19 millert
16576 * check.c: now deal correctly with all known variation of utime()
16579 1995-06-19 15:19 millert
16581 * configure.in: added SUDO_FUNC_UTIME_POSIX
16583 1995-06-19 15:19 millert
16585 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16587 1995-06-19 15:14 millert
16589 * config.h.in: added HAVE_UTIME_POSIX
16591 1995-06-19 13:38 millert
16593 * check.c: fixed a typo
16595 1995-06-19 13:29 millert
16597 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16599 1995-06-19 13:20 millert
16601 * check.c: fixed fascist C compiler warning
16603 1995-06-18 23:14 millert
16605 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16606 initialize num_interfaces to 0 (just to be anal)
16608 1995-06-18 18:06 millert
16610 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16612 1995-06-18 18:05 millert
16614 * logging.c: added tty logging
16616 1995-06-18 16:04 millert
16618 * interfaces.c: reworked the ISC code
16620 1995-06-18 15:27 millert
16622 * Makefile.in, version.h: updated version
16624 1995-06-18 15:24 millert
16626 * check.c: now expect old-style utime(3) if utime() can't take NULL
16629 1995-06-18 15:08 millert
16631 * configure.in: added check for utime.h
16633 1995-06-18 15:08 millert
16635 * config.h.in: added HAVE_UTIME_H
16637 1995-06-18 14:48 millert
16639 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16641 1995-06-18 13:58 millert
16643 * configure.in: now search for kerb libs and includes
16645 1995-06-18 13:03 millert
16647 * check.c: added support for utime(2)'s that can't take a NULL
16650 1995-06-18 13:03 millert
16652 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16655 1995-06-17 20:46 millert
16657 * configure.in: added utime(s) stuff
16659 1995-06-17 20:46 millert
16661 * check.c: now use utime()
16663 1995-06-17 20:46 millert
16665 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16667 1995-06-17 19:12 millert
16669 * utime.c: now use HAVE_UTIME_NULL
16671 1995-06-17 19:02 millert
16673 * utime.c, emul/utime.h: Initial revision
16675 1995-06-17 18:24 millert
16677 * check.c: need to setuid(0) to make kerb4 stuff work.
16679 1995-06-17 18:14 millert
16681 * tgetpass.c: no more special case for kerberos
16683 1995-06-17 18:13 millert
16685 * config.h.in: took out setreuid and setresuid stuff added kerb5
16686 stuff (use kerb4 emulation)
16688 1995-06-17 18:13 millert
16690 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16693 1995-06-17 18:12 millert
16695 * check.c: now use private ticket file for kerberos support to
16696 avoid trouncing on system one
16698 1995-06-15 00:48 millert
16700 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16702 1995-06-15 00:47 millert
16704 * sudo.c: added anti-spoofing support
16706 1995-06-15 00:47 millert
16708 * parse.c: now use global cmnd_st
16710 1995-06-15 00:47 millert
16712 * logging.c: added SPOOF_ATTEMPT suypport
16714 1995-06-14 23:41 millert
16716 * testsudoers.c, visudo.c: added void casts where appropriate
16718 1995-06-14 23:40 millert
16720 * parse.yacc: fixed up spacing and added void casts where
16723 1995-06-14 23:27 millert
16725 * sudo.c: fixed problem with "-p prompt" but no args
16727 1995-06-14 04:43 millert
16729 * sudo.man: added BUGS and annotated -l description
16731 1995-06-14 04:43 millert
16733 * sudo.h: validate() now takes a flag
16735 1995-06-14 04:43 millert
16737 * sudo.c: validate() now takes a flag added -l
16739 1995-06-14 04:42 millert
16741 * parse.yacc: added support for -l
16743 1995-06-14 04:41 millert
16745 * parse.c: validate() now takes a flag that says whether or not to
16748 1995-06-07 21:36 millert
16750 * logging.c: now deals with Argv == 1
16752 1995-06-07 21:34 millert
16754 * sudo.man: added -p option
16756 1995-06-07 21:27 millert
16758 * sudo.c: added prompt support reworked parse_args()
16760 1995-06-07 20:49 millert
16762 * sudo.h: added prompt
16764 1995-06-07 20:49 millert
16766 * options.h: added PASSPROMPT
16768 1995-06-07 20:48 millert
16770 * check.c: now use BUFSIZ as length of kerb password added kpass so
16771 pass is always a char * now use prompt global when asking for a
16774 1995-06-07 20:47 millert
16776 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16778 1995-06-07 20:43 millert
16780 * OPTIONS: added PASSPROMPT
16782 1995-06-07 01:44 millert
16784 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16787 1995-06-07 01:43 millert
16789 * check.c: don't exit on kerb error, just warn if k_errno ==
16790 KDC_PR_UNKNOWN (unknown user) silently fail
16792 1995-06-06 22:44 millert
16794 * INSTALL: added kerb4 note
16796 1995-06-06 22:43 millert
16798 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16800 1995-06-06 22:41 millert
16802 * check.c: removed debugging printf
16804 1995-06-06 22:33 millert
16806 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16809 1995-06-06 22:32 millert
16811 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16814 1995-06-06 22:32 millert
16816 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16817 setreuid emulation with setresuid if applic
16819 1995-06-06 22:31 millert
16821 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16822 chown() hack if no setreuid() or a broken one
16824 1995-06-05 23:44 millert
16826 * config.h.in: added HAVE_KERBEROS
16828 1995-06-05 23:43 millert
16830 * tgetpass.c: added KERBEROS support (long passwords)
16832 1995-06-05 23:42 millert
16834 * check.c, configure.in: added kerberos support
16836 1995-06-03 19:36 millert
16838 * sudo.h: added MODE_BACKGROUND
16840 1995-06-03 19:36 millert
16842 * sudo.man: escaped dashes added -b option
16844 1995-06-03 19:34 millert
16846 * sudo.c: added -b option
16848 1995-06-03 18:52 millert
16850 * check.c: added crypt() for osf/1 3.x enhanced secuiry
16852 1995-06-03 18:18 millert
16854 * configure.in: now check for -lcrypt
16856 1995-06-03 18:00 millert
16858 * interfaces.c: added ENXIO like EADDRNOTAVAIL
16860 1995-05-07 23:14 millert
16862 * configure.in: now emulate getwd(), not getcwd()
16864 1995-05-07 23:13 millert
16866 * sudo.c: getcwd() -> getwd()
16868 1995-05-07 23:12 millert
16870 * getwd.c: getcwd -> getwd
16872 1995-05-02 01:34 millert
16874 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16876 1995-05-02 01:34 millert
16878 * insults.h: broke out insults into separate include files
16880 1995-05-02 01:32 millert
16882 * options.h, OPTIONS: added GOONS
16884 1995-05-02 01:32 millert
16886 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16888 1995-05-01 23:34 millert
16890 * Makefile.in, version.h: ++version
16892 1995-05-01 23:34 millert
16894 * visudo.c: moved signal handler setup to setup_signals()
16896 1995-05-01 23:33 millert
16898 * sudo.h: added load_interfaces()
16900 1995-05-01 23:33 millert
16902 * sudo.c: moved load_interfaces to interfaces.c
16904 1995-05-01 23:33 millert
16906 * parse.yacc: added clearaliases
16908 1995-05-01 23:33 millert
16910 * OPTIONS, options.h: added FAST_MATCH
16912 1995-05-01 23:32 millert
16914 * parse.lex: now uses clearaliases variable
16916 1995-05-01 23:31 millert
16918 * interfaces.c: Initial revision
16920 1995-05-01 23:31 millert
16922 * Makefile.in: added interfaces.[co]
16924 1995-05-01 23:30 millert
16926 * testsudoers.c: now uses ip addrs and netmasks via
16929 1995-05-01 22:47 millert
16931 * sudo.c: now remove IFS instead of setting to "sane" value
16933 1995-05-01 16:30 millert
16935 * parse.c: added FAST_MATCH
16937 1995-04-29 20:19 millert
16939 * Makefile.in: sudo_goodpath.c-> goodpath.c
16941 1995-04-29 20:15 millert
16943 * sudo.c: added Andy's new ISC changes
16945 1995-04-14 14:06 millert
16947 * OPTIONS: added a sentence to SECURE_PATH info
16949 1995-04-14 13:57 millert
16953 1995-04-14 13:54 millert
16955 * RUNSON, CHANGES: updated
16957 1995-04-13 17:04 millert
16959 * RUNSON: updated for beta3
16961 1995-04-13 14:32 millert
16963 * Makefile.in, version.h: ++version
16965 1995-04-13 13:56 millert
16967 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
16969 1995-04-13 13:54 millert
16971 * sudo.c: fixed indentation
16973 1995-04-13 13:35 millert
16975 * aclocal.m4: fixed a typo
16977 1995-04-13 13:19 millert
16979 * sudo.c: updated ISC mods
16981 1995-04-13 13:19 millert
16983 * configure.in: added unixware case
16985 1995-04-13 13:19 millert
16987 * check.c: user_is_exempt is no longer hidden
16989 1995-04-13 13:19 millert
16993 1995-04-13 13:19 millert
16995 * aclocal.m4: isc and riscos changes
16997 1995-04-13 13:18 millert
16999 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17002 1995-04-13 13:18 millert
17004 * Makefile.in: fixed a typo and added testsudoers stuff
17006 1995-04-13 12:34 millert
17008 * testsudoers.c: Initial revision
17010 1995-04-12 19:31 millert
17012 * parse.yacc: applied fixed patch from Chris
17014 1995-04-11 14:30 millert
17016 * Makefile.in: fixed a typo
17018 1995-04-11 14:14 millert
17020 * parse.yacc: added a set of braces for bison
17022 1995-04-11 14:01 millert
17024 * parse.yacc: merged in Chris' changes to dekludge the parser.
17026 1995-04-11 00:38 millert
17028 * logging.c: send_mail() was calling find_path() which is wrong
17029 since find_path() stores cmnd in a static var. Anyhow, it
17030 doesn't make much sense since MAILER should always be fully
17033 1995-04-10 19:51 millert
17035 * sample.sudoers: added User_Alias stuff
17037 1995-04-10 19:50 millert
17039 * aclocal.m4: SUDO_NEXT now looks for
17040 /usr/lib/NextStep/software_version
17042 1995-04-10 19:50 millert
17044 * RUNSON: added DEC UNIX 3.0 w/ gcc
17046 1995-04-10 19:49 millert
17048 * visudo.c: Exit was being used in places where exit should be used
17050 1995-04-10 19:44 millert
17052 * sudoers: added "User alias specification"
17054 1995-04-10 18:04 millert
17056 * parse.yacc: fixed probs caused by making nslots and naliases a
17059 1995-04-10 15:09 millert
17061 * RUNSON: added KSR, upped rev to 1.3.1b2
17063 1995-04-10 15:07 millert
17065 * logging.c, parse.yacc: 1024 -> BUFSIZ
17067 1995-04-10 15:05 millert
17069 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17070 to appease lsearch on 64-bit machines
17072 1995-04-09 19:30 millert
17074 * TODO: did a bunch of things and added a bunch :-)
17076 1995-04-09 19:30 millert
17080 1995-04-09 19:24 millert
17082 * visudo.man: closer to BSD manpage style
17084 1995-04-09 19:15 millert
17086 * sudo.man: closer to standard BSD man format
17088 1995-04-09 18:58 millert
17090 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17091 sudo.h, version.h, emul/search.h: added RCS id
17093 1995-04-09 17:35 millert
17095 * sudo.h: removed crufty #defines that are no longer used
17097 1995-04-09 17:13 millert
17099 * BUGS: fixed a bug
17101 1995-04-09 17:12 millert
17103 * sudo.man: updated based on sudo changes
17105 1995-04-09 17:11 millert
17107 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17108 keyword as well as a NAME or ALIAS
17110 1995-04-09 17:11 millert
17114 1995-04-09 17:04 millert
17116 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17118 1995-04-09 15:24 millert
17120 * aclocal.m4: fixed bug with full void impl check
17122 1995-04-08 23:11 millert
17124 * parse.yacc: fixed User_Alias supoprt
17126 1995-04-08 22:27 millert
17128 * parse.yacc: added stubs for User_Alias support
17130 1995-04-08 22:27 millert
17132 * sudo.c: now sets removes # bogus interfaces from num_interfaces
17134 1995-04-08 22:26 millert
17136 * parse.lex: added User_Alias support
17138 1995-04-07 21:10 millert
17140 * Makefile.in: removed extraneous TODO
17142 1995-04-07 19:48 millert
17144 * visudo.c: ntwk_matches -> addr_matches
17146 1995-04-07 15:38 millert
17148 * parse.yacc: ntwk_matches -> addr_matches
17150 1995-04-07 15:37 millert
17152 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17153 inet_network() (which expects octet boundaries) fixes for OSF
17154 (sizeof(int) != sizeof(long))
17156 1995-04-07 15:08 millert
17158 * sudo.c: took out debugging info
17160 1995-04-06 23:45 millert
17162 * aclocal.m4: OS was being set to unknown before non-uname based
17163 host checks. This caused no checks to happen since $OS was not
17166 1995-04-06 23:30 millert
17168 * sudo.c: fixed loading of interfaces struct still has debugging
17171 1995-04-06 22:23 millert
17173 * parse.c: fixed typo
17175 1995-04-06 16:17 millert
17177 * Makefile.in: ++version
17179 1995-04-06 16:16 millert
17183 1995-04-06 16:16 millert
17185 * visudo.c: removed extraneous extern decl of "top
17187 1995-04-06 16:14 millert
17189 * visudo.c: now zeros "top"
17191 1995-04-06 16:13 millert
17193 * parse.yacc: removed parser_cleanup (no need for it now)
17195 1995-04-06 16:13 millert
17197 * parse.lex: now calls reset_aliases() directly
17199 1995-04-04 18:21 millert
17201 * OPTIONS: added a sentence to SECURE_PATH description
17203 1995-04-04 18:17 millert
17205 * parse.c: fixed my stupid bug where I used NAMLEN on something I
17206 wanted to just get the name from. argh.
17208 1995-04-03 16:58 millert
17210 * lsearch.c: fixed argument order of memmove() that i hosed when
17211 converting from bcopy(). arghh.
17213 1995-04-03 15:33 millert
17215 * Makefile.in: finally fixed DISTFILES line
17217 1995-04-03 15:21 millert
17219 * Makefile.in: tabs -> spaces
17221 1995-04-03 15:15 millert
17223 * Makefile.in: added missing files to DISTFILES
17225 1995-04-03 14:50 millert
17227 * Makefile.in: SUPPORTED -> RUNSON
17229 1995-04-01 03:12 millert
17233 1995-04-01 01:54 millert
17235 * RUNSON: updated for pl5b1 release
17237 1995-04-01 01:53 millert
17239 * BUGS, TODO: updated
17241 1995-04-01 01:52 millert
17243 * check.c: fixed bug where if you hit return at first sudo prompt
17244 it would still log as a failure
17246 1995-04-01 01:29 millert
17250 1995-04-01 01:25 millert
17252 * aclocal.m4: better test for bogus void * implementation
17254 1995-03-31 20:33 millert
17256 * logging.c: added PASSWORDS_NOT_CORRECT
17258 1995-03-31 20:32 millert
17260 * check.c: added PASSWORDS_NOT_CORRECT stuff]
17262 1995-03-31 20:30 millert
17264 * sudo.h: added PASSWORDS_NOT_CORRECT
17266 1995-03-31 19:16 millert
17268 * tgetpass.c: moved pathnames.h
17270 1995-03-31 19:16 millert
17272 * sudo.c: removed some unused vars and fixed up uid2str
17274 1995-03-31 19:15 millert
17276 * putenv.c: moved compat.h
17278 1995-03-31 19:14 millert
17280 * getcwd.c, getwd.c: added pathnames.h
17282 1995-03-31 18:18 millert
17284 * parse.yacc: fixed a typo I introduced in the last checkin :-(
17286 1995-03-31 18:11 millert
17288 * parse.lex: can't have #ifdef's where N is defined so just do this
17289 the broken way for AIX
17291 1995-03-31 18:08 millert
17293 * parse.yacc: better hack from Chris (but still a hack)
17295 1995-03-31 18:05 millert
17297 * parse.lex: stupid hack for broken aix lex
17299 1995-03-31 17:47 millert
17301 * tgetpass.c: now includes compat.h
\ 6
17303 1995-03-31 17:27 millert
17305 * visudo.c: now includes fcntl.h
17307 1995-03-31 17:27 millert
17309 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17311 1995-03-31 16:12 millert
17313 * parse.yacc: dirty hack to fix parser bug. i don't really like
17314 this but it works for now...
17316 1995-03-31 16:12 millert
17318 * sudo.c: uid2str is now static like the prototype says
17320 1995-03-29 23:48 millert
17322 * RUNSON: Initial revision
17324 1995-03-29 23:47 millert
17326 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17328 1995-03-29 23:46 millert
17330 * sudo.c: check_sudoers now returns an error code and sudo calls
17331 inform_user and log_error based on the return value.
17333 1995-03-29 23:45 millert
17335 * logging.c, sudo.h: added entries for new errors
17337 1995-03-29 23:03 millert
17339 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17342 1995-03-29 22:52 millert
17344 * Makefile.in: took out testsudoers
\ 6
17346 1995-03-29 22:36 millert
17348 * sudo.c: now explicately checks that it is setuid root
17350 1995-03-29 22:28 millert
17352 * sudo.c: If a user has no passwd entry sudo would segv (writing to
17353 a garbage pointer). Now allocate space before writing :-)
17355 1995-03-29 22:06 millert
17357 * configure.in: reordered AC_CHECK_FUNCS
17359 1995-03-29 22:06 millert
17361 * config.h.in: fixed memset macro
17363 1995-03-29 21:47 millert
17365 * logging.c: bzero -> memset when a parse error is logged the line
17366 number of the error is now logged too
17368 1995-03-29 21:46 millert
17370 * tgetpass.c, visudo.c: bzero -> memset
17372 1995-03-29 21:46 millert
17374 * INSTALL: added Sunos to blurb about c2 security
17376 1995-03-29 21:45 millert
17378 * configure.in: added a SUN4 define for C2 security
17380 1995-03-29 21:44 millert
17382 * config.h.in: bcopy -> memmove bzero -> memset
17384 1995-03-29 21:43 millert
17386 * lsearch.c: bcopy -> memmove char * -> VOID *
17388 1995-03-29 21:30 millert
17390 * check.c: added support for sunos with C2 security
17392 1995-03-29 21:12 millert
17394 * OPTIONS, options.h: reordered
17396 1995-03-29 21:12 millert
17398 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17400 1995-03-29 21:12 millert
17402 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17404 1995-03-29 21:12 millert
17406 * config.h.in: added _SUDO_PATH_LOGFILE
17408 1995-03-29 21:11 millert
17410 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17411 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17412 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17414 1995-03-29 18:17 millert
17416 * TROUBLESHOOTING: Initial revision
17418 1995-03-29 17:59 millert
17420 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17421 load_global() to work around a problem is trusted hpux shadow
17424 1995-03-29 17:41 millert
17426 * parse.yacc: backed out a change in malloc/realloc
17428 1995-03-29 17:38 millert
17430 * parse.yacc: now include stdlib.h
17432 1995-03-29 17:22 millert
17434 * visudo.c: now do an freopen() of the stmp file so that yyin will
17435 always point to the same thing. This is important for flex since
17436 we are doing a YY_NEWFILE
17438 1995-03-29 17:20 millert
17440 * parse.yacc: replaced yywrap() with parser_cleanup() since
17441 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17444 1995-03-29 17:18 millert
17446 * parse.lex: now have a rule that matches anything that doesn't
17447 match an explicite rule. well, you know what i mean (. matches
17448 anything not yet matched). However, this means that there is
17449 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17450 So, yywrap has moved into parse.lex and it calls parser_cleanup()
17451 which is most of the old yywrap() sigh.
17453 1995-03-29 17:17 millert
17455 * SUPPORTED: no longer used
17457 1995-03-29 16:13 millert
17459 * getcwd.c, getwd.c: moved compat.h to be the last include file
17461 1995-03-29 16:11 millert
17463 * parse.yacc: fixed type of aliascmp() args
17465 1995-03-29 15:58 millert
17467 * find_path.c: NULL -> '\0'
17469 1995-03-29 15:42 millert
17471 * parse.yacc: added casts to lfind and lsearch args for irix
17473 1995-03-29 08:20 millert
17475 * Makefile.in: bsdinstall -> install-sh
17477 1995-03-29 08:20 millert
17479 * INSTALL: added info about make realclean
17481 1995-03-29 08:17 millert
17483 * Makefile.in: updated VERSION added dependencies for visudo.cat
17485 1995-03-29 08:17 millert
17487 * version.h: -> pl5b1
17489 1995-03-29 08:16 millert
17491 * sudo.c: took out -l
17493 1995-03-29 00:03 millert
17495 * Makefile.in: now there is a real visudo.man and visudo.cat
17497 1995-03-28 23:54 millert
17499 * sudo.man: took out visudo stuff
17501 1995-03-28 23:54 millert
17503 * visudo.man: Initial revision
17505 1995-03-28 23:12 millert
17507 * parse.c, parse.lex, parse.yacc: updated copyright
17509 1995-03-28 23:05 millert
17511 * README: updated for pl5
17513 1995-03-28 20:02 millert
17515 * sudo.man: updated Nieusma & Hieb email addresses
17517 1995-03-28 19:57 millert
17519 * INSTALL: updated to include options.h and OPTIONS
17521 1995-03-28 19:35 millert
17523 * CHANGES, TODO: updated
17525 1995-03-28 19:35 millert
17527 * BUGS: eliminated bug #1 (yay)
17529 1995-03-28 19:31 millert
17531 * configure.in: sunos no longer gets linked statically
17533 1995-03-28 18:58 millert
17535 * parse.lex: prototype now uses __P()
17537 1995-03-28 18:49 millert
17539 * parse.lex: make fill() non-ansi
17541 1995-03-28 15:26 millert
17543 * parse.c: made -v (validate) work
17545 1995-03-28 15:26 millert
17547 * logging.c: now gives host
17549 1995-03-28 10:34 millert
17551 * find_path.c: don't check for execute/statable if fq or relative
17554 1995-03-28 01:07 millert
17556 * parse.c: added a cast
17558 1995-03-28 00:49 millert
17560 * visudo.c: now include ctype.h for islower and tolower macros
17562 1995-03-28 00:48 millert
17564 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17566 1995-03-28 00:48 millert
17568 * sudo.c: moved a set of parens
17570 1995-03-28 00:48 millert
17572 * strdup.c: now include compat.h
17574 1995-03-28 00:47 millert
17576 * parse.yacc: now cast malloc & realloc return vals added search
17577 for HAVE_LSEARCH now use strcmp if no strcasecmp available
17579 1995-03-28 00:46 millert
17581 * lsearch.c, emul/search.h: void * -> VOID *
17583 1995-03-28 00:45 millert
17585 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17586 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17588 1995-03-28 00:44 millert
17590 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17592 1995-03-28 00:44 millert
17594 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17595 echo and results to most SUDO_* macros
17597 1995-03-28 00:43 millert
17599 * Makefile.in: no more -I.
17601 1995-03-28 00:22 millert
17603 * configure.in: various 1.x ro 2.x autoconf changes now check for
17604 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17605 check for fully woorking void implementation
17607 1995-03-28 00:02 millert
17609 * Makefile.in: added lsearch & search.h visudo links into
17612 1995-03-27 23:43 millert
17614 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17616 1995-03-27 23:40 millert
17618 * visudo.c: whatnow_help was prototyped to be static be was not
17621 1995-03-27 21:15 millert
17623 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17624 used) added check for dirent/dir/ndir.h
17626 1995-03-27 21:09 millert
17628 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17630 1995-03-27 20:38 millert
17632 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17634 1995-03-27 20:23 millert
17636 * emul/search.h, lsearch.c: Initial revision
17638 1995-03-27 18:26 millert
17640 * parse.yacc: eliminated bison warnings
17642 1995-03-27 17:10 millert
17644 * parse.lex: added missing case
17646 1995-03-27 17:04 millert
17648 * visudo.c: now iincludes signal.h
17650 1995-03-27 15:16 millert
17652 * parse.yacc: only clear data structures on a parse error
17654 1995-03-27 15:01 millert
17656 * visudo.c: whatnow() now gives help on invalid input
17658 1995-03-27 14:54 millert
17660 * visudo.c: added a whatnow() function (sort of like mh)
17662 1995-03-27 14:53 millert
17664 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17665 by calling reset_aliases() and clearing top took reset stuff out
17666 of yyerror() since it doesn't beling there (and doesn't work
17667 anyway). errorlineno is now initially set to -1 so we can set it
17668 to the first error that occurrs (it was getting set to the last)
17670 1995-03-27 14:53 millert
17672 * parse.lex: added a void cast
17674 1995-03-27 13:26 millert
17676 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17678 1995-03-26 01:33 millert
17680 * sudo.c, sudo.h: removed ocmnd
17682 1995-03-26 01:19 millert
17684 * sudo.h: no more sudo_realpath() and find_path() changed params
17686 1995-03-26 01:19 millert
17688 * sudo.c: find_path() changed since no more realpath()
17690 1995-03-26 01:18 millert
17692 * parse.yacc: on error, errorlineno is set to the line where the
17693 error occurred added kill_aliases() to free the aliases struct
17694 now clean up in yyerror() so we can reparse cleanly
17696 1995-03-26 01:17 millert
17698 * logging.c: changed to use new find_path()
17700 1995-03-26 01:17 millert
17702 * options.h, parse.c: no more USE_REALPATH
17704 1995-03-26 01:16 millert
17706 * find_path.c: removed all the realpath() stuff
17708 1995-03-26 01:16 millert
17710 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17712 1995-03-26 01:12 millert
17714 * visudo.c: now works correctly with utk parser
17716 1995-03-26 00:04 millert
17718 * goodpath.c: Initial revision
17720 1995-03-25 23:23 millert
17722 * sudo_realpath.c: eliminated a compiler warning
17724 1995-03-25 21:56 millert
17726 * sudo.c: elinated compiler warning
17728 1995-03-25 20:40 millert
17730 * sudo_realpath.c: added sudo_goodpath()
17732 1995-03-25 20:40 millert
17734 * sudo.h: added prototype for sudo_goodpath
17736 1995-03-25 20:39 millert
17738 * parse.c: added support for /sys/dir.h
17740 1995-03-25 20:39 millert
17742 * options.h: USE_REALPATH turned off
17744 1995-03-25 20:39 millert
17746 * find_path.c: added calls to sudo_goodpath()
17748 1995-03-25 20:39 millert
17750 * configure.in: added check for dirent.h
17752 1995-03-25 20:38 millert
17754 * config.h.in: added HAVE_DIRENT_H
17756 1995-03-25 19:27 millert
17758 * configure.in: added in linux shadow pass stuff
\ 6
17760 1995-03-24 14:43 millert
17762 * visudo.c: added back host, user, cmnd, parse_error
17764 1995-03-24 14:19 millert
17766 * visudo.c: added in utk changes plus some minor cosmetic changes
17768 1995-03-24 14:17 millert
17770 * sudo.c, sudo_realpath.c: added void casts for printf's
17772 1995-03-24 14:17 millert
17774 * options.h: added a define of USE_REALPATH
17776 1995-03-24 14:17 millert
17778 * configure.in: there is no more visudoers/Makefile
17780 1995-03-24 14:16 millert
17782 * Makefile.in: added in utk changes (visudo is now built from the
17785 1995-03-24 14:15 millert
17787 * find_path.c: added (void) casts to printf's
17789 1995-03-23 22:32 millert
17791 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17794 1995-03-22 23:13 millert
17796 * find_path.c: now check to see that what we are trying to run is a
17797 file (or a link to a file, we do a stat(2) so there is no diff)
17799 1995-03-13 15:56 millert
17803 1995-03-13 15:56 millert
17805 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17808 1995-03-13 15:11 millert
17810 * sudo.man: added myself as maintainer
17812 1995-02-16 23:31 millert
17814 * sudo.c: changed setegid -> setgid
17816 1995-02-06 17:43 millert
17818 * configure.in: fixed the test for irix 5.x to skip bad libs
17820 1995-02-06 17:43 millert
17822 * aclocal.m4: now initialize OS and OSREV
17824 1995-01-26 20:52 millert
17826 * configure.in: irix5 changes
17828 1995-01-26 20:28 millert
17830 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17831 for autoconf 2.1 compatibility
17833 1995-01-18 19:49 millert
17835 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17836 do the righ thing wrt yyrestart (grrrr)
17838 1995-01-16 18:44 millert
17840 * Makefile.in: added visudoers/compat.h to DISTFILES
17842 1995-01-16 17:01 millert
17844 * configure.in: fixed an echo
17846 1995-01-16 16:36 millert
17848 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17851 1995-01-16 16:35 millert
17853 * sudo.h: added ocmnd extern adjusted find_path() prototype
17855 1995-01-16 16:34 millert
17857 * parse.c: cmndcmp() now takes 3 arguments and checks against the
17858 qualified as well as the unqualified pathname. more code that
17859 should use cmndcmp() but did not, now does
17861 1995-01-16 16:34 millert
17863 * options.h: added to a comment
17865 1995-01-16 16:33 millert
17867 * logging.c: changed to use new find_path() parameter passing
17869 1995-01-16 16:32 millert
17871 * find_path.c: find_path() now takes 2 copyout parameters (one for
17872 the qualified pathname and one for the unqualified pathname).
17873 The third parameter may be NULL.
17875 1995-01-16 16:31 millert
17877 * configure.in: no longer munge pathnames.h
17879 1995-01-16 16:30 millert
17881 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17882 defined in config.h) as a result, pathnames.h does not need to be
17883 run through configure and the user can override the configured
17886 1995-01-16 16:30 millert
17888 * config.h.in: added _SUDO_PATH_* entries
17890 1995-01-16 16:30 millert
17892 * aclocal.m4: _PATH* -> _SUDO_PATH_*
17894 1995-01-16 16:28 millert
17896 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17899 1995-01-13 12:52 millert
17901 * compat.h: removed extraneous #endif
17903 1995-01-13 12:48 millert
17905 * aclocal.m4: added SUDO_PROG_MV
17907 1995-01-13 12:47 millert
17909 * configure.in: added SUDO_PROG_MV added riscos and isc os types
17910 took out -DSHORT_MESSAGE from --with-csops since it is now the
17913 1995-01-13 12:46 millert
17915 * sudo.c: move the include of id.h to compat.h now includes
17918 1995-01-13 12:45 millert
17920 * sudo.h: moved compatibility #defines to compat.h
17922 1995-01-13 12:45 millert
17924 * pathnames.h.in: added _PATH_MV
17926 1995-01-13 12:43 millert
17928 * config.h.in: move __P to compat.h
17930 1995-01-13 12:39 millert
17932 * getcwd.c, getwd.c, putenv.c: now includes compat.h
17934 1995-01-13 12:39 millert
17936 * compat.h: Initial revision
17938 1995-01-11 19:11 millert
17940 * sudo.h: pull user-configurable stuff out and put in options.h
17942 1995-01-11 18:43 millert
17944 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17945 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17948 1995-01-11 18:41 millert
17950 * Makefile.in: added visudoers/options.h
17952 1995-01-11 18:40 millert
17954 * options.h, OPTIONS: Initial revision
17956 1995-01-11 18:39 millert
17958 * Makefile.in: added OPTIONS and options.h
17960 1995-01-11 18:36 millert
17962 * logging.c: changed #ifdef's to use LOGGING and
17963 SLOG_SYSLOG/SLOG_FILE
17965 1995-01-11 11:02 millert
17967 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17969 1994-12-17 18:18 millert
17971 * visudo.c: now only do Editor +line_num if line_num != 0
17973 1994-12-15 21:06 millert
17975 * visudo.c: now use mv if rename(2) fails
17977 1994-12-15 20:32 millert
17979 * BUGS: added a visudo bug
17981 1994-12-15 19:46 millert
17983 * check.c: expanded comment
17985 1994-11-12 18:33 millert
17987 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17990 1994-11-09 19:49 millert
17992 * sudo.c: added mips & isc support
17994 1994-11-09 19:49 millert
17996 * parse.c: added support for non-root owned sudoers file
17998 1994-11-09 19:48 millert
18000 * check.c: added exempt group support
18002 1994-11-09 19:47 millert
18004 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18005 non-root own sudoers file added exempt group support added isc
18008 1994-11-09 19:46 millert
18010 * visudo.c: now copy sudoers to temp file via read/write (not
18011 stdio) now chown new sudoers file to SUDOERS_OWNER
18013 1994-11-07 20:40 millert
18015 * configure.in: added skey support
18017 1994-11-07 20:39 millert
18019 * sudo.h: fixed typo added set_perms support added skey support
18020 added seteuid()/setegid() emulation for AIX
18022 1994-11-07 20:38 millert
18024 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18025 owned by root nread/write by only root
18027 1994-11-07 20:38 millert
18029 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18031 1994-11-07 20:38 millert
18033 * check.c: be_* -> set_perms() added skey support
18035 1994-11-06 18:59 millert
18037 * Makefile.in: ++version
18039 1994-11-06 18:59 millert
18043 1994-10-21 13:16 millert
18045 * sudo.c: now sets IFS
18047 1994-10-21 12:02 millert
18049 * insults.h: fixed typo
18051 1994-10-15 15:48 millert
18053 * config.h.in: added HAVE_SKEY
18055 1994-10-04 13:00 millert
18059 1994-10-04 12:57 millert
18061 * Makefile.in: ++version
18063 1994-10-04 12:57 millert
18067 1994-10-04 12:56 millert
18069 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18071 1994-10-04 12:56 millert
18073 * configure.in: added function check for tcgetattr(3)
18075 1994-10-04 12:55 millert
18077 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18079 1994-10-04 12:53 millert
18081 * config.h.in: added check for tcgetattr
18083 1994-09-26 17:38 millert
18087 1994-09-22 13:30 millert
18089 * parse.lex: now only include unistd.h for linux
18091 1994-09-21 14:29 millert
18093 * Makefile.in: added visudo.8 generation
18095 1994-09-21 14:07 millert
18097 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18099 1994-09-20 19:39 millert
18103 1994-09-20 19:39 millert
18107 1994-09-20 19:38 millert
18109 * README: added mailing list info
18111 1994-09-20 19:37 millert
18113 * parse.yacc: now use sudolineno instead of yylineno fixed bison
18116 1994-09-20 19:37 millert
18118 * configure.in: now use -no_library_replacement for osf don't make
18119 a static binary for hpux >= 9.0
18121 1994-09-20 19:21 millert
18123 * tgetpass.c: added string.h/strings.h inclusion
18125 1994-09-20 19:21 millert
18127 * config.h.in: added ssize_t def
18129 1994-09-20 19:18 millert
18131 * parse.lex: added inclusion of string.h/strings.h
18133 1994-09-20 18:48 millert
18135 * aclocal.m4: fixed uname | sed (needed to quote the '[')
18137 1994-09-20 18:42 millert
18139 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18142 1994-09-20 18:13 millert
18144 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18147 1994-09-20 18:10 millert
18151 1994-09-20 17:52 millert
18153 * parse.c: added code to support command listings
18155 1994-09-20 17:36 millert
18157 * sudo.c: added code for -l flag
18159 1994-09-20 17:35 millert
18161 * sudo.man: fixed typo added info for -l flag
18163 1994-09-20 14:45 millert
18165 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18167 1994-09-20 14:45 millert
18169 * aclocal.m4: added SUDO_SSIZE_T
18171 1994-09-20 14:44 millert
18173 * sudo.h: added MODE_LIST
18175 1994-09-20 14:43 millert
18177 * configure.in: added AC_SSIZE_T
18179 1994-09-19 20:53 millert
18181 * find_path.c, sudo_realpath.c: readlink() is now declared as
18184 1994-09-19 20:44 millert
18186 * configure.in: added -laud for OSF c2
18188 1994-09-02 15:55 millert
18190 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18191 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18192 sudo-bugs@cs.colorado.edu
18194 1994-09-02 15:54 millert
18196 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18197 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18198 sudo_setenv.c, tgetpass.c, version.h: changed
18199 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18201 1994-09-01 15:56 millert
18203 * Makefile.in: ++version
18205 1994-09-01 15:55 millert
18209 1994-09-01 15:55 millert
18211 * logging.c: added host to alertmail messages
18213 1994-09-01 15:55 millert
18215 * CHANGES, TODO: udpated
18217 1994-09-01 15:26 millert
18219 * logging.c: fixed logging problem where mail would not say which
18222 1994-09-01 13:45 millert
18224 * configure.in: added -laud for gcc if osf & c2
18226 1994-09-01 13:39 millert
18228 * check.c: moved set_auth_parameters to sudo.c
18230 1994-09-01 13:38 millert
18232 * sudo.c: added set_auth_parameters for osf
18234 1994-09-01 13:22 millert
18236 * configure.in: cleaned up -static stuff
18238 1994-09-01 13:15 millert
18240 * Makefile.in: ++version
18242 1994-09-01 13:15 millert
18246 1994-09-01 13:15 millert
18248 * sudo.c: changed setenv() to sudo_setenv()
18250 1994-09-01 13:12 millert
18252 * check.c: fixed osf problem
18254 1994-08-31 22:17 millert
18256 * configure.in: added OSF C2 stuff
18258 1994-08-31 22:00 millert
18262 1994-08-31 21:56 millert
18264 * check.c: added osf auth support & removed some extra spaces
18266 1994-08-31 21:52 millert
18268 * INSTALL, SUPPORTED: added osf C2 stuff
18270 1994-08-31 19:52 millert
18272 * TODO: added 2 suggestions
18274 1994-08-31 19:33 millert
18276 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18278 1994-08-31 18:48 millert
18282 1994-08-30 18:31 millert
18284 * version.h: 1.3.1final
18286 1994-08-30 18:30 millert
18288 * Makefile.in: added HISTORY
18290 1994-08-30 18:30 millert
18292 * sudo.man: mention HISTPRY file
18294 1994-08-30 18:30 millert
18296 * sudo.c: use sizeof instead of a constant in 1 place
18298 1994-08-30 18:30 millert
18300 * parse.yacc: added unistd.h
18302 1994-08-30 18:29 millert
18304 * parse.lex: added unistd.h
18306 1994-08-30 18:27 millert
18310 1994-08-30 18:15 millert
18312 * HISTORY: Initial revision
18314 1994-08-17 12:45 millert
18318 1994-08-17 12:39 millert
18322 1994-08-17 12:36 millert
18324 * sudo_setenv.c: added unistd.h include
18326 1994-08-16 15:46 millert
18328 * sudo.c: added sys/time.h for AIX
18330 1994-08-14 21:22 millert
18332 * configure.in: added check for -lsocket and sys/sockio.h
18334 1994-08-14 21:21 millert
18336 * config.h.in: took out libshadow check and added in sys/sockio.h
18339 1994-08-14 21:21 millert
18341 * sudo.c: now include sockio.h instead of ioctl.h if it exists
18342 "sudo -" now gets a better error message
18344 1994-08-14 20:47 millert
18346 * sample.sudoers: now has a dir and subnet entry
18348 1994-08-13 18:15 millert
18350 * sudo.c: removed if_ether.h
18352 1994-08-13 17:16 millert
18354 * TODO: added an item
18356 1994-08-13 17:15 millert
18358 * sudo.man: added network and ip addresses to man page
18360 1994-08-13 17:09 millert
18362 * sudo.c: no error if can't get interfaces or netmask since
18363 networking may not be in the kernel.
18365 1994-08-13 17:08 millert
18367 * parse.c: nwo check for interfaces == NULL
18369 1994-08-12 21:22 millert
18371 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18372 to fail if the last entry in the spec failed (ie: it was only
18373 looking at the last entry). CLeaned things up by adding the
18374 cmndcmp() function--all neat & tidy
18376 1994-08-12 21:21 millert
18378 * CHANGES: added one
18380 1994-08-11 23:42 millert
18382 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18384 1994-08-11 21:58 millert
18386 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18389 1994-08-11 21:58 millert
18391 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18392 visudo.c: added include of netinet/in.h
18394 1994-08-11 21:57 millert
18398 1994-08-11 21:57 millert
18400 * sudo.h: added interfaces global
18402 1994-08-11 21:56 millert
18404 * parse.c: now uses new interfaces global
18406 1994-08-11 21:56 millert
18408 * sudo.c: now ip addresses are gleaned fw/o dns
18410 1994-08-10 19:21 millert
18412 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18414 1994-08-10 19:21 millert
18416 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18419 1994-08-10 19:20 millert
18421 * sudo.h: added ip_addrs def added load_ip_addrs prototype
18423 1994-08-08 16:03 millert
18427 1994-08-08 15:57 millert
18429 * Makefile.in: removed multiple entries in DISTFILES
18431 1994-08-08 13:05 millert
18433 * visudo.c: ansified the !STDC_HEADERS decls
18435 1994-08-08 13:05 millert
18437 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18438 malloc decl if gnuc
18440 1994-08-08 13:04 millert
18442 * sudo.c: can't use getopt(3) since it munges args to the command
18443 to be run as root don't do malloc decl if gnuc
18445 1994-08-08 00:41 millert
18447 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18448 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18451 1994-08-08 00:27 millert
18453 * getcwd.c, getwd.c: added missing paren
18455 1994-08-08 00:23 millert
18457 * Makefile.in: added putenv.c to DISTFILES
18459 1994-08-08 00:08 millert
18461 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18462 not defined now can count on putenv() being there
18464 1994-08-08 00:08 millert
18466 * sudo_realpath.c: took out errno decl since sudo.h does it for us
18467 fixed up a next cc warning added params to func decls when
18468 STDC_HEADERS is not defined
18470 1994-08-08 00:07 millert
18472 * sudo.h: took out environ extern added local declaratio of
18473 putenv() if local version is needed
18475 1994-08-08 00:05 millert
18477 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18478 func decls when STDC_HEADERS is not defined
18480 1994-08-08 00:04 millert
18482 * config.h.in: added memcpy check check to see that ansi vs bsd
18483 macros are ntot already defiend before defining (ie: avoid
18486 1994-08-08 00:03 millert
18488 * configure.in: removed fluff setenv check plus check w/ replace
18489 for putenv if also no setenv
18491 1994-08-08 00:01 millert
18493 * putenv.c: Initial revision
18495 1994-08-06 19:19 millert
18497 * sudo_setenv.c: Initial revision
18499 1994-08-06 19:19 millert
18501 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18503 1994-08-06 19:19 millert
18505 * sudo.c: now use sudo_setenvc
18507 1994-08-06 19:18 millert
18509 * configure.in: added puteenv and setenv, removed realpath
18511 1994-08-06 19:18 millert
18513 * config.h.in: added putenv & setenv
18515 1994-08-06 19:18 millert
18517 * Makefile.in: added sudo_setenv
18519 1994-08-06 19:16 millert
18523 1994-08-05 19:43 millert
18525 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18528 1994-08-05 19:43 millert
18530 * Makefile.in: added MAN_POSTINSTALL
18532 1994-08-05 19:43 millert
18536 1994-08-05 19:10 millert
18538 * sudo.man: added SUDO_* plus new options
18540 1994-08-05 19:10 millert
18542 * CHANGES: added one
18544 1994-08-05 19:07 millert
18546 * configure.in: took out shadow lib
18548 1994-08-05 18:35 millert
18552 1994-08-05 17:52 millert
18554 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18556 1994-08-05 17:49 millert
18558 * Makefile.in: support for installing a cat page instead of a man
18561 1994-08-05 17:48 millert
18563 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18564 looks for nroff to determine whether or not to install a cat or
18567 1994-08-05 17:48 millert
18569 * config.h.in: added HAVE_FLEX
18571 1994-08-05 16:14 millert
18573 * sudo.c: not set ret to MODE_RUN initially
18575 1994-08-05 16:12 millert
18577 * find_path.c: made command (and therefor cmnd dynamically
18580 1994-08-04 20:25 millert
18584 1994-08-04 20:24 millert
18588 1994-08-04 20:24 millert
18590 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18592 1994-08-04 20:24 millert
18594 * sudo.h: added MODE_ removed validate_only and added
18597 1994-08-04 20:22 millert
18599 * sudo.c: usage() now takes an int (exit value) added parse_args()
18600 to parse command line arguments moved call to find_path() from
18601 load_globals to new function load_cmnd() removed validate_only
18602 global -- now use the concept of "modes" added -h and -k options
18604 1994-08-04 20:21 millert
18606 * parse.c: no longer use global validate_only now checks for
18607 command called "validate" removed check for non-fully qualified
18608 commands since that is done by find_path
18610 1994-08-04 20:20 millert
18612 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18614 1994-08-04 20:17 millert
18616 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18619 1994-08-04 20:17 millert
18621 * check.c: check_timestamp no longer runs reminder(), it is implied
18622 in the return val added remove_timestamp()
18624 1994-08-04 20:16 millert
18628 1994-08-04 16:38 millert
18632 1994-08-04 16:38 millert
18634 * sudo_realpath.c: took out old_errno
18636 1994-08-04 16:37 millert
18640 1994-08-03 12:08 millert
18642 * logging.c: moved send_mail to after syslog
18644 1994-08-02 22:41 millert
18646 * sudo.c: now set SUDO_ envariables
18648 1994-08-01 13:40 millert
18652 1994-08-01 13:39 millert
18654 * sudo_realpath.c: now print error if chdir fails
18656 1994-08-01 13:39 millert
18658 * find_path.c: removed an XXX
18660 1994-07-25 20:40 millert
18664 1994-07-25 20:36 millert
18666 * configure.in: no more static binaries for aix
18668 1994-07-25 18:37 millert
18670 * INSTALL: fixed typo
18672 1994-07-25 18:33 millert
18674 * sudo_realpath.c: took out stuff not needed for sudo now does
18675 be_root/be_user itself now uses cwd global
18677 1994-07-25 18:32 millert
18681 1994-07-25 18:31 millert
18683 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18685 1994-07-25 18:26 millert
18687 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18689 1994-07-25 18:25 millert
18691 * find_path.c: now use sudo_realpath()
18693 1994-07-25 18:25 millert
18695 * config.h.in: took out realpth() stuff since we now use
18698 1994-07-25 18:25 millert
18700 * configure.in: ultrix enhanced sec
18702 1994-07-25 18:25 millert
18704 * SUPPORTED: added ultrix enhanced sec.
18706 1994-07-25 18:24 millert
18710 1994-07-25 18:21 millert
18712 * check.c: ultrix enhanced security suport
18714 1994-07-25 18:20 millert
18716 * Makefile.in: added sudo_realpath.c
18718 1994-07-25 18:18 millert
18722 1994-07-25 14:28 millert
18724 * tgetpass.c: increased passwd len to 24 for c2 security
18726 1994-07-25 13:17 millert
18728 * BUGS: updated BUGS
18730 1994-07-15 11:49 millert
18732 * check.c: now use user global var
18734 1994-07-15 11:48 millert
18736 * configure.in: took out -ls
18738 1994-07-14 19:11 millert
18740 * configure.in: added AFS libs
18742 1994-07-14 17:45 millert
18744 * sudo.h: user is now a char * added epasswd
18746 1994-07-14 17:43 millert
18748 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18749 password) global made user dynamically allocated
18751 1994-07-14 17:43 millert
18753 * configure.in: added tzset test
18755 1994-07-14 17:43 millert
18757 * config.h.in: added HAVE_TZSET
18759 1994-07-14 17:42 millert
18761 * check.c: cleaned up encrypted passwd grab somewhat
18763 1994-07-14 12:34 millert
18765 * configure.in: fixed AFS typo
18767 1994-07-14 12:34 millert
18769 * INSTALL: added AFS not
18771 1994-07-14 12:34 millert
18775 1994-07-14 12:33 millert
18777 * logging.c: can now log to both syslog & a file
18779 1994-07-14 12:12 millert
18781 * sudo.h: added BOTH_LOGS
18783 1994-07-14 11:34 millert
18787 1994-07-14 11:32 millert
18789 * configure.in: --with-AFS
18791 1994-07-14 11:32 millert
18793 * config.h.in: added HAVE_AFS
18795 1994-07-14 11:31 millert
18797 * check.c: added afs changes
18799 1994-07-14 11:21 millert
18801 * sudo.h: removed AFS stuff :-)
18803 1994-07-14 11:19 millert
18805 * tgetpass.c: include sys/select for AIX
18807 1994-07-14 11:17 millert
18809 * sudo.h: added AFS
18811 1994-07-14 11:16 millert
18815 1994-07-07 14:45 millert
18817 * SUPPORTED, CHANGES: updated
18819 1994-07-07 14:44 millert
18821 * logging.c: can now have MAILER undefined
18823 1994-07-07 14:37 millert
18825 * INSTALL: new sub-note about MAILER
18827 1994-07-06 23:11 millert
18829 * sudo.man: added blurb about password timeout
18831 1994-07-06 20:52 millert
18833 * configure.in: convex c2 changes
18835 1994-07-06 20:52 millert
18837 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18839 1994-07-06 20:51 millert
18841 * Makefile.in: added OSDEFS
18843 1994-07-06 20:46 millert
18845 * config.h.in: added spaces
18847 1994-07-06 20:08 millert
18849 * tgetpass.c: added a goto if fgets fails
18851 1994-07-06 20:08 millert
18853 * sudo.h: use __hpux not hpux convex c2 stuff
18855 1994-07-06 20:08 millert
18857 * sudo.c: use __hpux not hpux
18859 1994-07-06 20:08 millert
18861 * logging.c: convex c2 stuff
18863 1994-07-06 20:07 millert
18865 * config.h.in: define ansi-ish cpp os defines if non-ansi are
18866 defined for hpux & convex
18868 1994-07-06 20:07 millert
18870 * INSTALL: updated to say we support sonvex C2
18872 1994-07-06 20:05 millert
18874 * check.c: added convex c2 support
18876 1994-07-01 12:06 millert
18878 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18879 select() to timeout
18881 1994-06-29 17:04 millert
18883 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18885 1994-06-29 16:39 millert
18887 * tgetpass.c: now works + uses fgets()
18889 1994-06-28 18:25 millert
18891 * tgetpass.c: select doesn't seem to recognize a single '\n' as
18892 input waiting so we can;t use it, sigh.
18894 1994-06-26 16:38 millert
18896 * PORTING: updated tgetpass() blurb
18898 1994-06-26 16:35 millert
18900 * configure.in: added --with-getpass
18902 1994-06-26 16:35 millert
18904 * Makefile.in: added tgetpass stuff
18906 1994-06-26 15:25 millert
18908 * tgetpass.c: now uses stdio
18910 1994-06-26 15:17 millert
18914 1994-06-24 19:48 millert
18916 * PORTING: updated ,.
18918 1994-06-24 19:46 millert
18920 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18922 1994-06-24 19:45 millert
18924 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18926 1994-06-24 19:45 millert
18928 * check.c: added hpux C2 shit
18930 1994-06-24 19:45 millert
18932 * Makefile.in: took out tgetpass.*
18934 1994-06-24 19:45 millert
18936 * INSTALL: added C2 blurb
18938 1994-06-13 15:54 millert
18940 * configure.in: no termio(s) for ultrix since it is broken
18942 1994-06-13 15:41 millert
18944 * check.c: added a space (yeah, anal)
18946 1994-06-13 15:17 millert
18948 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18950 1994-06-08 14:34 millert
18952 * config.h.in: took out bsd signal stuff for irix
18954 1994-06-08 14:26 millert
18956 * visudo.c: comments in #endif
18958 1994-06-08 14:09 millert
18960 * configure.in: don't define BSD signals for irix
18962 1994-06-08 12:57 millert
18964 * TODO: did some...
18966 1994-06-08 12:57 millert
18970 1994-06-08 12:56 millert
18972 * realpath.c, sudo_realpath.c: took out unneeded code by changing
18973 where a strings was terminated
18975 1994-06-07 19:21 millert
18977 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18980 1994-06-07 17:40 millert
18982 * sudo.h: move __P to config.h
18984 1994-06-07 17:40 millert
18986 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18989 1994-06-07 17:40 millert
18991 * config.h.in: added __P
18993 1994-06-07 17:21 millert
18995 * config.h.in: added HAVE_FCHDIR
18997 1994-06-07 17:18 millert
18999 * strdup.c: now include stdio
19001 1994-06-07 14:55 millert
19003 * realpath.c, sudo_realpath.c: now works if no fchdir
19005 1994-06-07 14:55 millert
19007 * visudo.c: define SA_RESETHAND to null if not defined
19009 1994-06-07 14:54 millert
19011 * configure.in: added check & replace
19013 1994-06-06 20:05 millert
19015 * configure.in: took out -static for nextstep -- it doesn't work
19017 1994-06-06 19:59 millert
19019 * logging.c: moved #endif to where it belongs
19021 1994-06-06 19:54 millert
19023 * SUPPORTED: correction
19025 1994-06-06 19:42 millert
19027 * configure.in: now checks for strdup realpath getcwd bzero
19029 1994-06-06 19:31 millert
19031 * config.h.in: emulate bzero
19033 1994-06-06 16:57 millert
19035 * visudo.c: added posic signals
19037 1994-06-06 16:57 millert
19039 * tgetpass.c: bzero cast
19041 1994-06-06 16:57 millert
19043 * logging.c: added posix signals
19045 1994-06-06 16:56 millert
19047 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19050 1994-06-06 16:56 millert
19052 * config.h.in: added posix signal stuff
19054 1994-06-06 16:56 millert
19056 * Makefile.in: added new srcs
19058 1994-06-06 12:53 millert
19060 * visudo.c: updated useag
19062 1994-06-06 12:39 millert
19064 * tgetpass.c: now uses posix signals
19066 1994-06-05 20:17 millert
19068 * PORTING: updated sto reflect major changes
19070 1994-06-05 20:05 millert
19072 * TODO, CHANGES: updated
19074 1994-06-05 20:04 millert
19076 * tgetpass.c: uses sysconf() if available
19078 1994-06-05 20:04 millert
19080 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19082 1994-06-05 20:04 millert
19084 * realpath.c, sudo_realpath.c: for those w/o this in libc
19086 1994-06-05 20:03 millert
19088 * getcwd.c, getwd.c: Initial revision
19090 1994-06-05 20:03 millert
19092 * find_path.c: rewrote to use realpath(3) - nis now all my code
19094 1994-06-05 20:02 millert
19096 * config.h.in: added HAVE_REALPATH
19098 1994-06-05 20:02 millert
19100 * check.c: now use tgetpass
19102 1994-06-05 20:02 millert
19104 * Makefile.in: added LIBOBJS use tgetpass.c
19106 1994-06-05 18:55 millert
19108 * tgetpass.c: works now :-)
19110 1994-06-05 18:27 millert
19112 * tgetpass.c: Initial revision
19114 1994-06-05 17:17 millert
19116 * pathnames.h.in: added /dev/tty
19118 1994-06-04 17:12 millert
19120 * version.h: incremented
19122 1994-06-04 15:29 millert
19124 * sudo.c: always use getcwd
19126 1994-06-04 14:49 millert
19128 * config.h.in: added check for getwd
19130 1994-06-04 14:48 millert
19132 * configure.in: replace strdup & realpath & getcwd if missing
19134 1994-06-04 14:47 millert
19136 * pathnames.h.in: added _PATH_PWD
19138 1994-06-04 14:46 millert
19140 * aclocal.m4: added SUDO_PROG_PWD
19142 1994-06-04 14:37 millert
19144 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19146 1994-06-03 11:31 millert
19148 * configure.in: quoted quare brackets
19150 1994-06-02 17:49 millert
19152 * sudo.c: no need to strdup() a constant
19154 1994-06-02 15:45 millert
19158 1994-06-02 15:44 millert
19160 * sudo.man: added validate
19162 1994-06-02 15:42 millert
19164 * sudo.c: added -v to usage
19166 1994-06-02 15:41 millert
19168 * parse.c, sudo.c, sudo.h: added validate_only stuff
19170 1994-05-29 21:29 millert
19172 * configure.in: now finds sed
19174 1994-05-29 21:28 millert
19176 * aclocal.m4: $OSREV is now an int
19178 1994-05-29 19:13 millert
19180 * configure.in: added mtxinu to caser
19182 1994-05-29 18:37 millert
19184 * sudo.h: added EXEC macro
19186 1994-05-29 18:36 millert
19188 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19191 1994-05-29 18:36 millert
19193 * logging.c: changed mail_argv[] def now use EXEC() macro
19195 1994-05-29 18:35 millert
19197 * check.c: took out crypt() definition
19199 1994-05-29 17:23 millert
19201 * version.h: upped the version
19203 1994-05-29 15:52 millert
19205 * configure.in: always look for -lnsl
19207 1994-05-29 15:29 millert
19209 * aclocal.m4: added an echo
19211 1994-05-29 15:25 millert
19213 * sudo.h: SHORT_MESSAGE is now the default
19215 1994-05-29 15:18 millert
19217 * config.h.in: fixed typo
19219 1994-05-29 01:29 millert
19221 * configure.in: added missing AC_DEFINE(SVR4) for solaris
19223 1994-05-28 20:42 millert
19225 * sudo.man: documented the -v flag
19227 1994-05-28 20:34 millert
19229 * SUPPORTED: updated
19231 1994-05-28 20:31 millert
19233 * check.c: proto-ized crypt()
19235 1994-05-28 20:28 millert
19237 * config.h.in: added LIBSHADOW undef
19239 1994-05-28 20:18 millert
19241 * configure.in: nwo set OS to be lowercase
19243 1994-05-28 19:36 millert
19245 * configure.in: now use SUDO_OSTYPE to set $OS
19247 1994-05-28 19:36 millert
19249 * aclocal.m4: now use uname to determine os
19251 1994-05-28 16:23 millert
19253 * visudo.c: added prototypes & moved sig handler around
19255 1994-05-28 15:13 millert
19257 * sudo.h: added prototyppes
19259 1994-05-28 15:13 millert
19261 * parse.c: added comment
19263 1994-05-28 15:12 millert
19265 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19267 1994-05-28 15:11 millert
19269 * check.c, logging.c, sudo.c: added prototypes
19271 1994-05-28 15:11 millert
19273 * aixcrypt.exp: Initial revision
19275 1994-05-28 15:11 millert
19277 * Makefile.in: added aixcrypt.exp
19279 1994-05-28 13:21 millert
19281 * parse.lex, parse.yacc: moved config.h to top of includes
19283 1994-05-25 15:48 millert
19285 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19287 1994-05-24 23:08 millert
19289 * visudo.c: added -v flag and usage()
19291 1994-05-24 23:08 millert
19293 * version.h: fixed a typo
19295 1994-05-24 23:08 millert
19297 * sudo.c: cast Argv to a const for exec added -v flag
19299 1994-05-24 23:07 millert
19301 * logging.c: mail_argv is now a const
19303 1994-05-24 23:07 millert
19305 * configure.in: only set RETSIGTYPE if it is not set already
19307 1994-05-24 23:07 millert
19309 * aclocal.m4: now defines & STDC_HEADERS for Irix
19311 1994-05-24 23:07 millert
19313 * Makefile.in: added version.h
19315 1994-05-24 21:25 millert
19317 * insults.h, sudo.h: prevent multiple inclusion
19319 1994-05-24 21:20 millert
19321 * version.h: Initial revision
19323 1994-05-24 21:09 millert
19325 * parse.lex, parse.yacc: now includes config.h
19327 1994-05-24 20:54 millert
19329 * aclocal.m4: now talks about sunos 4.x
19331 1994-05-24 20:23 millert
19333 * visudo.c: calls to Exit now pass an arg
19335 1994-05-24 18:00 millert
19337 * visudo.c: signal handler now takes an int argument
19339 1994-05-24 18:00 millert
19343 1994-05-24 17:44 millert
19345 * sudo.c: ok, the getcwd() is now *really* done as the user
19347 1994-05-24 17:44 millert
19349 * configure.in: changed AIX STATIC_FLAGS
19351 1994-05-24 16:27 millert
19353 * aclocal.m4: solaris now defines SVR4
19355 1994-05-24 16:18 millert
19357 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19360 1994-05-24 16:18 millert
19362 * sudo.c: moved getcwd stuff into load_globals
19364 1994-05-24 16:18 millert
19366 * parse.c: took out externs that are in suod.h
19368 1994-05-24 16:18 millert
19370 * logging.c: moved cwd into load_globals
19372 1994-05-24 16:17 millert
19374 * find_path.c: moved cwd stuff
19376 1994-05-24 15:55 millert
19378 * Makefile.in: fixed make distclean & realclean
19380 1994-05-24 12:51 millert
19384 1994-05-24 12:51 millert
19386 * CHANGES: added solaris changes
19388 1994-05-24 12:51 millert
19390 * aclocal.m4: added solaris changes, need to rework
19392 1994-05-24 12:50 millert
19394 * configure.in: cleaned up for solaris
19396 1994-05-24 12:13 millert
19398 * logging.c: reinstall reapchild signal handler for non-bsd signals
19400 1994-05-24 12:03 millert
19402 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19405 1994-05-24 12:03 millert
19407 * sudo.c: support for HAVE_SYSCONF
19409 1994-05-24 12:02 millert
19411 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19412 minor prettying up /
19414 1994-05-23 20:26 millert
19416 * config.h.in: added HAVE_SYSCONF
19418 1994-05-16 18:57 millert
19420 * configure.in: now tells you what os you are running /.
19422 1994-05-16 18:56 millert
19424 * aclocal.m4: took out extra ','
19426 1994-05-14 17:56 millert
19428 * config.h.in: added _BSD_COMPAT
19430 1994-05-14 17:56 millert
19432 * aclocal.m4: fixed for irix5
19434 1994-05-14 17:55 millert
19438 1994-05-14 17:27 millert
19440 * sudo.c: uid seinitialized to -2
19442 1994-04-28 12:36 millert
19444 * sudo.c: now removes LIBPATH for AIX
19446 1994-03-12 20:41 millert
19448 * configure.in: now uses ufc if it finds it
19450 1994-03-12 17:42 millert
19452 * sudo.h: no longer define yyval & yylval since yacc does it
19454 1994-03-12 17:42 millert
19456 * parse.lex: now defines yylval as extenr
19458 1994-03-12 17:41 millert
19460 * configure.in: BROKEN_GETPASS is now an OPTION
19462 1994-03-12 17:41 millert
19464 * config.h.in: took out BROKEN_GETPASS
19466 1994-03-12 17:20 millert
19468 * Makefile.in: took out big comment
19470 1994-03-12 16:24 millert
19474 1994-03-12 16:20 millert
19476 * Makefile.in: took out README.beta
19478 1994-03-12 16:19 millert
19480 * SUPPORTED: Initial revision
19482 1994-03-12 16:19 millert
19484 * INSTALL: now reference SUPPORTED .,
19486 1994-03-12 16:17 millert
19488 * config.h.in: now check for convex OR __convex__
19490 1994-03-12 16:16 millert
19492 * aclocal.m4: now check for convex or __convex__
19494 1994-03-12 16:15 millert
19496 * Makefile.in: added dist target
19498 1994-03-12 15:19 millert
19500 * aclocal.m4: use __convex__
19502 1994-03-12 14:33 millert
19504 * find_path.c: now use _S_* stat stuff to be ansi-like
19506 1994-03-12 14:11 millert
19508 * INSTALL: updated for configure directions
19510 1994-03-12 14:05 millert
19512 * Makefile.in: distclean now removes config.h and pathnames.h
19514 1994-03-12 14:03 millert
19518 1994-03-12 14:00 millert
19520 * TODO: fixed typoe
19522 1994-03-12 13:57 millert
19524 * Makefile.in, visudo.c: updated version
19526 1994-03-12 13:57 millert
19528 * config.h.in, pathnames.h.in: added copyright header
19530 1994-03-12 13:55 millert
19532 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19533 parse.yacc, sudo.c, sudo.h: udpated version
19535 1994-03-12 13:39 millert
19537 * visudo.c: udpated to use configure + pathnames.h
19539 1994-03-12 13:37 millert
19541 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19543 1994-03-12 13:37 millert
19545 * sudo.h: now works with configure
19547 1994-03-12 13:36 millert
19549 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19550 updated to work with configure + pathnames.h
19552 1994-03-12 10:40 millert
19554 * Makefile.in: added LEXLIB
19556 1994-03-10 03:18 millert
19558 * COPYING: updated gnu general licence to versio 2
19560 1994-03-10 02:44 millert
19562 * pathnames.h.in, config.h.in: Initial revision
19564 1994-03-10 01:43 millert
19566 * sudo.h: changed to work with configure
19568 1994-03-09 18:51 millert
19570 * Makefile.in, aclocal.m4, configure.in: Initial revision
19572 1994-03-09 17:36 millert
19574 * visudo.c: now uses defines used by configure
19576 1994-03-01 16:31 millert
19578 * find_path.c: sudo won't bitch about EPERM now, for real
19580 1994-02-28 00:36 millert
19582 * logging.c: renamed exec_argv to eliminate a libc name clash with
19585 1994-02-28 00:28 millert
19587 * CHANGES: corrected
19589 1994-02-28 00:27 millert
19591 * logging.c, sudo.c, sudo.h: execve -> execv
19593 1994-02-27 23:27 millert
19597 1994-02-27 23:19 millert
19599 * PORTING: added 2 mroe items
19601 1994-02-27 23:12 millert
19605 1994-02-27 23:11 millert
19607 * sudo.h: added UMASK and mode_t declaration
19609 1994-02-27 23:11 millert
19611 * sudo.c: added UMASK
19613 1994-02-27 20:55 millert
19615 * logging.c: now opens log file with mode 077
19617 1994-02-27 20:55 millert
19619 * check.c: saved current umask ans restores it
19621 1994-02-27 20:36 millert
19623 * sudo.h: added MAXLOGFILELEN
19625 1994-02-27 20:35 millert
19627 * logging.c: split long log lines. FOr syslog, split into multiple
19628 entries, for a log file, indent the extra for readability
19630 1994-02-27 17:22 millert
19632 * CHANGES: added changes
19634 1994-02-27 17:18 millert
19636 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19639 1994-02-25 16:04 millert
19641 * TODO: added input from Brett M Hogden <hogden@rge.com>
19643 1994-02-16 13:35 millert
19645 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19646 execvp() OR execve() becuase of this.
19648 1994-02-16 13:35 millert
19650 * logging.c: now uses execvp() OR execve()
19652 1994-02-16 13:31 millert
19654 * sudo.h: added USE_EXECVE
19656 1994-02-16 13:27 millert
19658 * sudo.h: added environ
19660 1994-02-16 12:53 millert
19662 * find_path.c: now ignore EPERM
19664 1994-02-15 23:52 millert
19666 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19669 1994-02-15 23:52 millert
19673 1994-02-15 23:40 millert
19675 * sudo.h: took out Envp
19677 1994-02-14 12:28 millert
19679 * BUGS: Initial revision
19681 1994-02-10 14:29 millert
19683 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19685 1994-02-10 14:05 millert
19687 * sudo.h: added SECURE_PATH
19689 1994-02-10 13:50 millert
19691 * INSTALL: added sample.sudoers note
19693 1994-02-10 13:47 millert
19695 * sudoers: Initial revision
19697 1994-02-09 14:54 millert
19699 * find_path.c: fixed typo
19701 1994-02-08 23:06 millert
19703 * PORTING: took out SAVED_UID garbage
19705 1994-02-08 22:55 millert
19707 * INSTALL: mentioned HAL
19709 1994-02-08 22:50 millert
19711 * sudo.h: added HAL line
19713 1994-02-08 22:48 millert
19715 * insults.h: added HAL insults
19717 1994-02-08 22:48 millert
19721 1994-02-08 22:02 millert
19723 * logging.c: more verbose error if mailer not found
19725 1994-02-08 22:02 millert
19727 * check.c: now do getpwent as root for soem shadow password systems
19730 1994-02-08 13:22 millert
19732 * sudo.h: took out SAVED_UID garbade
19734 1994-02-08 13:21 millert
19736 * sudo.c: took out SAVED_UID garbage since it don't work
19738 1994-02-06 17:43 millert
19742 1994-02-06 17:40 millert
19744 * insults.h: added a missing space :-)
19746 1994-02-05 19:48 millert
19748 * sudo.c, sudo.h: took out multimax cruft
19750 1994-02-05 19:30 millert
19752 * INSTALL: minor update
19754 1994-02-05 19:30 millert
19756 * PORTING: finished
19758 1994-02-05 19:19 millert
19760 * sudo.c: fixed a typo + indentation
19762 1994-02-05 18:43 millert
19764 * sudo.h: took outumoved some defines to the config file ,. ,.
19766 1994-02-05 15:17 millert
19768 * PORTING: Initial revision
19770 1994-02-05 15:17 millert
19774 1994-02-05 15:16 millert
19776 * sudo.h: added HAS_SAVED_UID
19778 1994-02-05 15:16 millert
19780 * sudo.c: put back AIX cruft
19782 1994-02-03 00:44 millert
19784 * sudo.c: aix changes
19786 1994-02-02 01:31 millert
19790 1994-02-02 01:30 millert
19792 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19795 1994-02-01 22:21 millert
19797 * check.c: added missing %s\n
19799 1994-01-31 02:06 millert
19801 * install-sh: Initial revision
19803 1994-01-31 01:58 millert
19805 * CHANGES, TODO: updated
19807 1994-01-31 01:56 millert
19809 * sudo.c: now removed _RLD_* for alphas
19811 1994-01-31 01:50 millert
19813 * INSTALL: updated for new config scheme
19815 1994-01-30 19:42 millert
19817 * find_path.c: more verbose eror messages
19819 1994-01-27 14:08 millert
19821 * TODO: now have solaris
19823 1994-01-27 14:07 millert
19825 * sudo.h: define __svr4__ for SOLARIS
19827 1994-01-27 14:07 millert
19829 * check.c: added svr4 junk for shadow pws for solaris 2.x
19831 1994-01-27 13:19 millert
19833 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19834 Its not needed since we start out setuid with the correct perms.
19836 1994-01-26 19:51 millert
19838 * check.c, sudo.c, sudo.h: now use setreuid()
19840 1994-01-26 18:58 millert
19842 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19845 1994-01-26 18:52 millert
19847 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19849 1994-01-26 18:52 millert
19851 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19854 1993-12-07 01:33 millert
19856 * README: minor update + spell fix
19858 1993-12-07 01:33 millert
19860 * INSTALL: rewrote most of this
19862 1993-12-07 01:13 millert
19864 * sudo.h: added all options that are in the Makefile
19866 1993-12-07 00:23 millert
19868 * getpass.c: now use USE_TERMIO #define for sgi & hpux
19870 1993-12-06 23:19 millert
19872 * TODO: todo: posix sigs
19874 1993-12-06 01:12 millert
19876 * check.c, find_path.c: always include strings.h
19878 1993-12-05 20:34 millert
19880 * visudo.c: added STATICEDITOR
19882 1993-12-05 20:30 millert
19884 * sudo.h: sgi has vi in /usr/bin too
19886 1993-12-05 20:23 millert
19888 * sudo.man: added VISUAL
19890 1993-12-02 22:20 millert
19892 * sudo.h: sue /usr/bin/vi on some systems
19894 1993-12-02 22:19 millert
19896 * sudo.c: fixed warning (include strings.h)
19898 1993-12-02 22:06 millert
19900 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19903 1993-12-02 21:38 millert
19905 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19907 1993-12-02 21:35 millert
19909 * visudo.c: added EDITOR envar
19911 1993-12-02 21:34 millert
19913 * check.c, find_path.c, parse.c, sudo.c: added patches from
19914 John_Rouillard directory spec uses EDITOR
19916 1993-12-01 19:32 millert
19918 * getpass.c: added flush for hpux
19920 1993-11-30 13:37 millert
19922 * sudo.c: no longer assume malloc returns a char *
19924 1993-11-29 20:35 millert
19926 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19927 stuff -- now gets removed correctly
19929 1993-11-29 19:31 millert
19931 * sudo.h: added STD_HEADERS macro
19933 1993-11-29 19:14 millert
19935 * sudo.c: now uses STD_HEADERS macor for ansi
19937 1993-11-29 19:14 millert
19939 * find_path.c: now uses STD_HEADERS macro
19941 1993-11-29 19:13 millert
19943 * check.c: niceties for C compiler bitches -- no real change
19945 1993-11-29 13:04 millert
19947 * visudo.c: now doesn't fclose a file never opened.
19949 1993-11-28 16:35 millert
19951 * sudo.man: added visudo line
19953 1993-11-28 16:31 millert
19955 * sudo.man: added error stuff added me in there...
19957 1993-11-28 03:12 millert
19959 * CHANGES: noted insults
19961 1993-11-28 03:01 millert
19963 * INSTALL: added blurb about reading stuff
19965 1993-11-28 03:00 millert
19967 * sudo.h: added insults
19969 1993-11-28 03:00 millert
19971 * insults.h: corrected somments and removed newlines
19973 1993-11-28 03:00 millert
19975 * check.c: now uses insults
19977 1993-11-28 02:45 millert
19979 * insults.h: Initial revision
19981 1993-11-27 19:46 millert
19983 * INSTALL: added dec syslog note
19985 1993-11-27 19:25 millert
19987 * sample.sudoers: added real stuff in there
19989 1993-11-27 19:24 millert
19991 * TODO: added a todo
19993 1993-11-27 19:10 millert
19997 1993-11-27 18:59 millert
19999 * sample.sudoers: Initial revision
20001 1993-11-27 18:59 millert
20003 * sudo.man: updated with changes
20005 1993-11-27 18:52 millert
20007 * sudo.man: Initial revision
20009 1993-11-27 18:48 millert
20011 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20014 1993-11-27 18:46 millert
20016 * visudo.c: updated version number and took out jeff's old addr
20017 since it is no good
20019 1993-11-27 18:42 millert
20021 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20022 parse.yacc, sudo.c: updated version number and took out jeff's
20023 email (since it is invalid)
20025 1993-10-28 09:36 millert
20027 * check.c: added fflush()
20029 1993-10-22 20:46 millert
20031 * find_path.c: now return NULL instead pf
\b\bof exiting for
20032 nopn
\b\bn-fatal errors
20034 1993-10-21 16:57 millert
20036 * check.c: new banner
20038 1993-10-21 16:42 millert
20040 * parse.lex: now sudo.h gets included first
20042 1993-10-17 20:31 millert
20044 * parse.lex: now can use flex
20046 1993-10-17 20:31 millert
20048 * sudo.h: linux patch
20050 1993-10-17 20:30 millert
20052 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20054 1993-10-17 20:30 millert
20056 * check.c: linux diff
20058 1993-10-15 16:03 millert
20060 * find_path.c: stat now ignores EINVAL
20062 1993-10-05 21:48 millert
20064 * find_path.c, sudo.c: now declare strdup as extern
20066 1993-10-04 15:23 millert
20068 * visudo.c: reformatted with indent + by hand
20070 1993-10-04 15:10 millert
20072 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20073 sudo.h: used indent to "fix" coding style
20075 1993-10-03 20:12 millert
20077 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20078 LAST should maybe move the code that does this into the loop
20079 body. makes it messier tho. hmmm.
20081 1993-09-08 11:53 millert
20083 * find_path.c: redid the fix for non-executable files in an easier
20084 to read way plus some minor aethetic changes
20086 1993-09-08 11:39 millert
20088 * find_path.c: fixed bug with non-executable tings of same name in
20089 path introduced by checkig errno after stat(2).
20091 1993-09-05 10:02 millert
20093 * sudo.c: fixed off by one error
20095 1993-09-05 09:55 millert
20097 * find_path.c: now handles decending below '/' correctly
20099 1993-09-05 08:35 millert
20101 * sudo.c: now actually builds Envp instead of munging envp
20103 1993-09-04 15:42 millert
20105 * parse.yacc: now includes sys/param.h
20107 1993-09-04 15:41 millert
20109 * visudo.c: now includes sys/param.h
20111 1993-09-04 15:30 millert
20113 * sudo.h: fixed ifndef -> ifdef
20115 1993-09-04 15:19 millert
20117 * qualify.c: make more like find_path.c
20119 1993-09-04 15:18 millert
20121 * find_path.c: rewritten by millert
20123 1993-09-04 15:17 millert
20125 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20126 added info about new defines in the comment
20128 1993-09-04 15:15 millert
20130 * logging.c: now uses USE_CWD
20132 1993-09-04 14:10 millert
20134 * sudo.h: added delc for clean_envp() and Envp
20136 1993-09-04 14:09 millert
20138 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20141 1993-09-04 14:09 millert
20143 * logging.c: now uses execve()
20145 1993-09-04 14:08 millert
20147 * find_path.c: ENOTDIR is ok now too (in case part of the path is
20150 1993-09-04 08:17 millert
20152 * qualify.c: now works correctly (ttaltotal rewrite)
20154 1993-09-04 07:59 millert
20156 * parse.lex: now includes sys/param.h didn't match trailing / --
20157 fix from rouilj@cs.umb.edu
20159 1993-06-11 18:04 millert
20161 * sudo.c: moved around the #ifndef _AIX
20163 1993-06-11 18:03 millert
20165 * check.c, logging.c, parse.c: Initial revision
20167 1993-03-20 07:57 millert
20169 * qualify.c: Initial revision
20171 1993-03-13 15:09 millert
20173 * find_path.c: now works if you do sudo bin/test
20175 1993-03-13 14:20 millert
20177 * find_path.c: works
20179 1993-03-02 18:28 millert
20181 * sudo.h: Initial revision
20183 1993-03-02 11:35 millert
20185 * visudo.c: Initial revision
20187 1993-03-02 11:32 millert
20189 * parse.lex, parse.yacc: Initial revision
20191 1993-02-16 13:24 millert
20193 * sudo.c: took out errno.h
20195 1993-02-16 13:22 millert
20197 * sudo.c: now spews error if exec fails and exits with -1
20199 1993-02-16 12:07 millert
20201 * sudo.c: Initial revision
20203 1993-02-15 22:27 millert
20205 * find_path.c: now only execs files with (an) executable bit set.
20207 1993-02-15 22:01 millert
20209 * find_path.c: Initial revision
20211 1993-02-15 14:32 millert
20213 * getpass.c: added nice comment
20215 1993-02-15 14:19 millert
20217 * getpass.c: now works on sgi's
20219 1993-02-15 13:57 millert
20221 * getpass.c: Initial revision