1 2010-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
3 * match.c: Check for pseudo-command by looking at the first
4 character of the command in sudoers instead of checking the
5 user-supplied command for a slash.
7 2010-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
9 * toke.l: Fix size arg when realloc()ing include stack.
12 * toke.l: Avoid a duplicate fclose() of the sudoers file.
14 2010-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
16 * aix.c, config.h.in, configure, configure.in: Use setrlimit64(),
17 if available, instead of setrlimit() when setting AIX resource
18 limits since rlim_t is 32bits.
20 * logging.c: Fix use after free when sending error messages.
21 From Timo Juhani Lindfors
23 2009-12-17 15:02 millert
25 * parse.c: Fix printing of entries with multiple host entries on
28 2009-12-09 16:05 millert
30 * logging.c: fix typo in last commit
32 2009-12-08 22:19 millert
34 * logging.c: Convert fmt_first and fmt_confd into macros.
36 2009-11-23 10:56 millert
38 * match.c: cmnd_matches() already deals with negation so
39 _cmndlist_matches() does not need to do so itself. Fixes a bug
40 with negated entries in a Cmnd_List.
42 2009-11-22 11:12 millert
44 * sudo.c: Don't exit() from open_sudoers, just return NULL for all
47 2009-11-22 09:54 millert
49 * toke.c, toke.l: Add missing extern def for parse_error
51 2009-11-20 19:11 millert
53 * toke.c, toke.l: Avoid a parse error when #includedir doesn't find
54 any files. Closes bug #375
56 2009-11-20 19:03 millert
58 * Makefile.in: Include sudo.man.pl and sudoers.man.pl in the
61 2009-11-04 09:42 millert
63 * configure, configure.in: Fix a few typos in the descriptions;
64 from Jeff Makey Only do the check for
65 krb5_get_init_creds_opt_free() taking two arguments if we find
66 krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
67 positive when using our own krb5_get_init_creds_opt_free which
68 takes only a single argument.
70 2009-11-03 09:58 millert
72 * configure, configure.in: Remove a spurious comma in the kerb5
75 2009-11-03 09:51 millert
77 * auth/kerb5.c: Call krb5_get_init_creds_opt_init() in our emulated
78 krb5_get_init_creds_opt_alloc() for MIT kerberos.
80 2009-09-30 09:50 millert
82 * sudo_edit.c: Always update the stashed mtime of the temp file
83 instead of using what we have for the original because the time
84 resolution of the filesystem the temporary is on may not match
85 that of the filesystem that holds the original. Should fix bz
86 #371 found by Philippe Levan.
88 2009-09-24 21:11 millert
90 * configure, configure.in, sudoers.man.pl, sudoers.pod: Substitute
91 in default value for secure_path
93 2009-09-24 20:31 millert
95 * sudo.pod: Mention that the password must be followed by a newline
98 2009-08-07 10:21 millert
100 * auth/pam.c: Set PAM_RUSER and PAM_RHOST early so they can be used
101 during authentication. Based on a patch from Jamie Beverly.
103 2009-08-07 09:25 millert
105 * match.c: Close dir before returning if strlcpy() reports
106 overflow. From Martynas Venckus.
108 2009-07-18 09:55 millert
110 * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
113 2009-07-12 17:17 millert
115 * mkdefaults: If no arg assume def_data.in
117 2009-07-11 21:27 millert
119 * README, WHATSNEW: Update for 1.7.2
121 2009-07-11 21:12 millert
125 2009-06-30 08:41 millert
127 * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
128 quotes around a colon in Runas_Spec definition. From Elias
131 2009-06-29 09:36 millert
133 * redblack.c: In rbrepair, re-color the root or the first non-block
134 node we find to be black. Re-coloring the root is probably not
135 needed but won't hurt.
137 2009-06-29 09:35 millert
139 * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
141 2009-06-26 16:40 millert
143 * redblack.c: When repairing the tree, don't touch the root node.
145 2009-06-25 08:44 millert
147 * set_perms.c: Protect call to setegid in runas_setup with #ifdef
148 HAVE_SETEUID. Reported by Josef Schmid.
150 2009-06-23 14:29 millert
152 * sudoers.pod: Document that we accept env_pam-style environment
155 2009-06-23 14:24 millert
157 * env.c: Adapt to accept pam_env-style /etc/environment which
158 allows shell-style lines such as: export EDITOR="/usr/bin/vi"
160 2009-06-23 12:22 millert
162 * sudoers.pod: Make it clear that env_delete only works when
163 !env_reset. From Loïc Minier
165 2009-06-15 17:19 millert
167 * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
170 2009-06-15 17:18 millert
172 * Makefile.in: build the .cat page in the current working dir, not
175 2009-06-15 09:10 millert
177 * env.c: Return EINVAL in setenv() if var is NULL or the empty
178 string to match glibc behavior.
180 2009-06-13 16:52 millert
182 * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
185 2009-06-11 16:29 millert
187 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
188 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
191 2009-06-09 10:08 millert
193 * INSTALL: Document --with-libvas and --with-libvas-rpath
195 2009-05-29 09:43 millert
197 * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
198 and key paths may be a directory or a file. However, version 5.0
199 of the SDK only seems to support using a directory. If
200 ldapssl_clientauth_init fails and the cert or key paths look like
201 they could be files, strip off the last path element and try
204 2009-05-29 09:40 millert
206 * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
209 2009-05-26 20:49 millert
211 * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
212 non-Unix group support from Quest, as reworked by me.
214 2009-05-26 20:47 millert
218 2009-05-26 20:46 millert
220 * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
223 2009-05-25 08:02 millert
225 * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
226 fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
227 logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
228 pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
229 sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
230 testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
231 auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
234 2009-05-24 08:33 millert
236 * interfaces.c, lbuf.c: Minor fixes for Minix-3
238 2009-05-22 06:37 millert
240 * set_perms.c: Handle getgroups() returning 0. Also add missing
241 check for HAVE_GETGROUPS.
243 2009-05-19 17:24 millert
245 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
246 version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
247 via AC_INIT in configure.
249 2009-05-18 06:33 millert
251 * set_perms.c: Remove group setting code in setusercontext case, we
252 will do it ourselves later on in runas_setup. Set the gid after
253 initgroups/setgroups is called, since on Mac OS X it seems to
256 2009-05-17 18:19 millert
258 * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
259 vasgroups.c: Initial bits of non-unix group support using Quest
260 Authentication Services
262 2009-05-17 16:52 millert
264 * toke.c, toke.l: Accept %:foo as a non-Unix group
266 2009-05-17 16:22 millert
268 * toke.c, toke.l: Allow user/group to be double quoted in the case
269 of non-Unix groups which contain spaces.
271 2009-05-11 12:47 millert
273 * match.c: Don't allow the user to specify the default runas user
274 if their sudoers entry only allows them to run as a group.
276 2009-05-10 07:59 millert
278 * sudo.c: Must call audit_success before we change uids.
280 2009-05-10 07:52 millert
282 * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
283 set_perm to not exit on failure and use this in the logging
286 2009-05-10 07:33 millert
288 * parse.c: In -l mode, if the user is only allowed to run as a
289 group, display the user's name, not root's before the allowed
292 2009-05-09 21:00 millert
294 * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
295 effect of setting the runas user to root unilaterally.
297 2009-05-08 16:19 millert
299 * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
302 2009-05-08 13:07 millert
304 * pwutil.c: Only cache by the method we fetched for pwd and grp
305 lookups. Previously we cached both by namd and id but this can
306 cause problems for entries that share the same id. Also add more
307 info in the error message in case the insert fails (which should
310 2009-04-30 15:04 millert
312 * sudoers.pod: Add a clarification from Nick Sieger
314 2009-04-25 12:49 millert
316 * env.c: Inline the setting of the environment string.
318 2009-04-24 14:53 millert
320 * env.c: setenv(3) in Linux treats a NUL value as the empty string
321 setenv(3) in BSD doesn't return an error if the name has '=' in
322 it, it just treats the '=' as end of string.
324 2009-04-22 16:32 millert
326 * toke.c, toke.l: Not all systems have d_namlen
328 2009-04-20 13:53 millert
330 * sudoers.pod: Fix up some pod2html issues.
332 2009-04-19 14:09 millert
334 * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
335 from a diff from Quest Software.
337 2009-04-19 09:01 millert
339 * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
342 2009-04-19 08:56 millert
344 * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
347 2009-04-18 19:37 millert
349 * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
350 #includedir, ignore any file containing a dot
352 2009-04-18 19:25 millert
354 * Makefile.in, version.h: Bump version
356 2009-04-18 19:25 millert
358 * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
359 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
360 visudo.c: Implement #includedir directive. Files in an
361 includedir are not edited by visudo unless they contain a syntax
364 2009-04-18 12:06 millert
368 2009-04-18 10:27 millert
370 * WHATSNEW: Forgot umask_override
372 2009-04-18 09:25 millert
374 * ChangeLog, TODO: sync
376 2009-04-16 08:22 millert
378 * visudo.c: Rewind stream if we fdopen sudoers since it may not be
379 at the beginning. Set the keepopen flag on already-open files
380 too so the lexer doesn't close them out from under us.
382 2009-04-16 08:18 millert
384 * visudo.c: Print the proper file name when there is a parse error
387 2009-04-11 07:45 millert
391 2009-04-10 16:59 millert
393 * configure, configure.in: Fix a warning when --without-ldap is
396 2009-04-05 12:25 millert
398 * alias.c, parse.h, visudo.c: Store aliases that we remove during
399 check_aliases in a freelist and free them at the end so we don't
402 2009-03-28 09:30 millert
404 * visudo.c: Check aliases in -c mode too.
406 2009-03-28 09:09 millert
408 * alias.c, parse.h, visudo.c: Make alias_remove return the alias
409 struct instead of freeing it directly. Fixes a use after free in
410 alias_remove_recursive, the only consumer.
412 2009-03-28 09:07 millert
414 * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
415 -> alias_find for consistency.
417 2009-03-27 19:29 millert
419 * visudo.c: When checking for unused aliases, recurse if the alias
420 points to another alias.
422 2009-03-16 12:11 millert
424 * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
425 support will be done later after some refactoring.
427 2009-03-14 12:02 millert
429 * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
431 2009-03-13 21:04 millert
433 * configure, configure.in: Only check for
434 ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
435 compilation with ldapux.
437 2009-03-11 20:03 millert
439 * fileops.c: fix char subscript
441 2009-03-11 19:19 millert
443 * Makefile.in: remove errant carriage returns
445 2009-03-11 19:01 millert
447 * audit.c, env.c: fix K&R compilation
449 2009-03-11 12:12 millert
451 * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
452 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
455 2009-03-10 17:34 millert
457 * config.h.in: Add missing HAVE_BSM_AUDIT
459 2009-03-10 17:21 millert
461 * WHATSNEW: Add 1.7.1 features
463 2009-03-10 17:10 millert
465 * INSTALL: Mention --with-netsvc
467 2009-03-10 17:08 millert
469 * sudoers.ldap.pod: Document netsvc.conf support
471 2009-03-10 16:44 millert
473 * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
474 sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
476 2009-03-08 16:57 millert
478 * configure, config.h.in, configure.in, env.c: Add
479 --enable-env-debug flag to enable environment sanity checks.
481 2009-03-08 11:51 millert
483 * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
485 2009-03-07 17:10 millert
487 * env.c: Only sync environ for putenv, setenv, and unsetenv. We
488 need to make sure that sudo_putenv and sudo_setenv only modify
489 env.envp, not environ.
491 2009-03-02 14:19 millert
493 * env.c: Really fix UNSETENV_VOID
495 2009-03-02 14:18 millert
497 * env.c: Fix unsetenv when UNSETENV_VOID
499 2009-03-02 08:00 millert
501 * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
503 2009-03-02 07:36 millert
505 * ldap.c: tivoli-based ldap does not have ldapssl_err2string
507 2009-03-02 07:30 millert
511 2009-03-01 16:20 millert
513 * config.h.in, configure, configure.in, ldap.c: Add support for
514 Tivoli-based LDAP start TLS as seen in AIX. Untested.
516 2009-03-01 08:52 millert
518 * env.c: Add sanity checks for setenv/unsetenv
520 2009-02-28 20:17 millert
522 * Makefile.in: Include bsm_audit.h in the tarball
524 2009-02-28 20:00 millert
526 * Makefile.in, version.h: bump version for sudo 1.7.1
528 2009-02-28 19:58 millert
530 * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
531 sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
532 calls to setenv/unsetenv and provide our own
533 setenv/unsetenv/putenv that operates on own env pointer. Make
534 sync_env() inline in setenv/unsetenv/putenv functions.
536 2009-02-25 07:33 millert
538 * sudo.c: Make "sudoedit -h" work as expected
540 2009-02-25 07:21 millert
542 * auth/pam.c: Make sure def_prompt is always defined. This is a
543 workaround for pam configs that prompt for a password in the
544 session but don't have an auth line. A better fix is to expand
545 the sudo prompt earlier and set def_prompt to that when
548 2009-02-25 06:17 millert
550 * sudo.pod: Mention that the helper for -A may be graphical.
552 2009-02-25 06:16 millert
554 * TROUBLESHOOTING: Document what happens if there is no tty.
556 2009-02-25 06:05 millert
558 * sudo.c: cosmetic changes
560 2009-02-25 05:47 millert
562 * term.c: Fix term_restore
564 2009-02-24 20:23 millert
566 * sudo.c: Fix "sudo -k" with no other args
568 2009-02-24 08:04 millert
570 * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
571 be specified in conjunction with a command or another option that
572 may require authentication.
574 2009-02-23 09:18 millert
576 * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
577 from Diego E. 'Flameeyes'
579 2009-02-23 09:15 millert
581 * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
583 2009-02-21 17:03 millert
585 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
586 Implement umask_override
588 2009-02-21 16:51 millert
592 2009-02-21 16:49 millert
594 * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
597 2009-02-21 08:43 millert
599 * audit.c: Need to include compat.h
601 2009-02-21 08:37 millert
603 * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
604 sudo.c: Make audit_success and audit_failure generic functions in
605 preparation for integrating linux audit support.
607 2009-02-21 08:06 millert
609 * term.c: remove duplicate include
611 2009-02-20 16:13 millert
613 * bsm_audit.c: Add missing include
615 2009-02-20 15:55 millert
617 * sudo.c: May need to update the runas user after parsing
618 command-based defaults.
620 2009-02-18 10:53 millert
622 * glob.c: Add missing pair of braces introduced with character
625 2009-02-15 15:53 millert
627 * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
628 Rename pwstars to pwfeedback
630 2009-02-10 20:25 millert
632 * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
634 2009-02-10 20:18 millert
636 * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
637 sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
640 2009-02-10 19:58 millert
642 * term.c: This is new code, no DARPA notice.
644 2009-02-10 14:04 millert
646 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
647 simple_glob -> fast_glob
649 2009-02-10 09:39 millert
651 * match.c: g/c unused var
653 2009-02-10 08:09 millert
655 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
656 simple_glob option to use fnmatch() instead of glob(). This is
657 useful when you need to specify patterns that reference network
660 2009-02-10 07:58 millert
662 * tgetpass.c: add term_* proto
664 2009-02-10 07:51 millert
666 * sudoers.pod: mention glob()
668 2009-02-09 07:59 millert
670 * tgetpass.c: Delete any pwstars we wrote after the user hits
671 return. That way there is no record on screen as to the user's
674 2009-02-08 10:27 millert
676 * term.c: Move terminal setting bits from tgetpass.c to term.c
678 2009-02-07 19:50 millert
680 * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
681 tgetpass.c: Add pwstars sudoers option that causes sudo to print
682 a star every time the user presses a key.
684 2009-02-03 10:10 millert
686 * Makefile.in: Fix up F<> brokenness for visudo.man.in and
689 2009-01-27 11:54 millert
691 * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
692 not -1, to indicate no limit. From Mark Janssen.
694 2009-01-17 17:36 millert
696 * toke.c, toke.l: Comments that begin with #- should not be parsed
699 2009-01-08 19:13 millert
701 * sudo.c: Do not try to set the close on exec flag if we didn't
702 actually open sudoers.
704 2008-12-19 12:40 millert
708 2008-12-14 17:40 millert
712 2008-12-09 18:48 millert
714 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
715 enters ^C at the password prompt.
717 2008-12-09 16:13 millert
719 * configure.in, configure: Don't try to build sudo_noexec.so on
720 HP-UX with the bundled compiler as it cannot generate shared
723 2008-12-09 15:55 millert
725 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
728 2008-12-09 08:49 millert
730 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
731 it clear that we are not short-circuiting on last match. When
732 pwcheck is 'all', initialize nopass to TRUE and override it with
733 the first non-TRUE entry.
735 2008-12-08 10:02 millert
737 * parse.c: Do not short circuit pseudo commands when we get a match
738 since, depending on the settings, we may need to examine all
741 2008-12-03 15:58 millert
743 * sudoers.cat, sudoers.man.in: regen
745 2008-12-03 15:57 millert
747 * sudoers.pod: hostnames may also contain wildcards
749 2008-12-03 15:40 millert
751 * Makefile.in: remove stamp-* files and linux core files in clean
754 2008-12-02 12:30 millert
756 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
757 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
759 2008-11-26 15:10 millert
761 * configure, configure.in: correctly enable SIA on Digital UNIX
763 2008-11-25 20:06 millert
767 2008-11-25 20:05 millert
771 2008-11-25 12:01 millert
773 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
774 ttys we may still have /dev/tty available to us.
776 2008-11-24 10:09 millert
778 * sudoers.cat, sudoers.man.in: regen
780 2008-11-24 10:08 millert
782 * sudoers.pod: fix typos; Markus Lude
784 2008-11-24 07:08 millert
788 2008-11-23 19:42 millert
792 2008-11-23 19:41 millert
794 * toke.l: Fix matching of a line that only consists of a comment
797 2008-11-22 13:17 millert
799 * auth/pam.c: MacOS pam will retry conversation function if it
800 fails so just treat ^C as an empty password.
802 2008-11-22 10:12 millert
804 * visudo.c: When checking for alias use, also check defaults
807 2008-11-22 10:01 millert
809 * redblack.c: unused var
811 2008-11-22 09:42 millert
813 * redblack.c: Replace my rbdelete with Emin's version (which
816 2008-11-19 12:01 millert
818 * testsudoers.c: malloc debugging
820 2008-11-19 07:37 millert
822 * visudo.c: malloc options in devel mode for visudo too
824 2008-11-18 10:57 millert
826 * sudo.c: fix compilation on non-C99; from Theo
828 2008-11-18 10:50 millert
830 * visudo.c: fix check_aliases
832 2008-11-18 08:29 millert
834 * alias.c: when destroying an alias, free the correct data pointer
836 2008-11-18 07:54 millert
838 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
840 2008-11-15 13:34 millert
842 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
845 2008-11-15 13:34 millert
847 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
848 'option' for command line options (not flag)
850 2008-11-14 06:18 millert
852 * INSTALL: Add note on configuring HP-UX pam
854 2008-11-11 13:28 millert
856 * check.c, sudo.c: Move tty checks into check_user() so we only do
857 them if we actually need a password.
859 2008-11-11 12:34 millert
861 * sudo.c: Don't error out if no tty or askpass unless we actually
862 need to authenticate.
864 2008-11-10 15:20 millert
868 2008-11-10 08:07 millert
870 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
873 2008-11-09 15:18 millert
875 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
877 2008-11-09 09:15 millert
879 * gram.c, toke.c: regen
881 2008-11-09 09:13 millert
883 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
884 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
885 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
886 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
887 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
888 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
889 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
890 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
891 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
892 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
893 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
896 2008-11-09 08:48 millert
898 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
900 2008-11-08 10:40 millert
902 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
903 far past the end, resulting in a NUL being written immediately
904 after the buffer end.
906 2008-11-08 10:31 millert
908 * UPGRADE, WHATSNEW: add sections on tgetpass changes
910 2008-11-08 10:30 millert
912 * tgetpass.c: Treat EOF w/o newline as an error.
914 2008-11-07 17:42 millert
916 * parse.c: Fix "sudo -v" when NOPASSWD is set.
918 2008-11-07 12:45 millert
920 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
921 longer treat an empty password at the prompt as special. To quit
922 out of sudo you now need to hit ^C at the password prompt.
924 2008-11-06 21:07 millert
926 * sudoers.cat, sudoers.man.in: regen
928 2008-11-06 21:06 millert
930 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
931 will now refuse to run if no tty is present unless the new
932 visiblepw sudoers flag is set.
934 2008-11-05 19:42 millert
936 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
937 RLIM_SAVED_MAX not defined
939 2008-11-05 19:40 millert
941 * aix.c: fix fallback value for RLIM_SAVED_MAX
943 2008-11-05 19:14 millert
945 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
948 2008-11-05 19:08 millert
950 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
951 authenticate() as it may not be correct for the user we are
952 running the command as.
954 2008-11-05 19:05 millert
956 * isblank.c: Add isblank() function for systems without it. Needed
957 for POSIX character class matching in fnmatch.c and glob.c.
959 2008-11-05 11:02 millert
961 * TROUBLESHOOTING: expound on sudo and cd
963 2008-11-04 15:52 millert
967 2008-11-04 15:46 millert
969 * sudoers.cat, sudoers.man.in: regen
971 2008-11-04 15:45 millert
973 * sudoers.pod: mention defauts parse order
975 2008-11-03 13:19 millert
977 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
978 function for systems without it. Needed for POSIX character
979 class matching in fnmatch.c and glob.c.
981 2008-11-03 12:54 millert
983 * Makefile.in: add emul/charclass.h to HDRS
985 2008-11-02 14:08 millert
989 2008-11-02 14:06 millert
991 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
992 update_defaults into defaults.c and call it properly from visudo
995 2008-11-02 09:51 millert
997 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
998 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
1001 2008-11-02 09:45 millert
1003 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
1004 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
1005 has non-standard entries.
1007 2008-11-02 09:35 millert
1009 * match.c: quiet gcc
1011 2008-11-02 09:28 millert
1013 * match.c: Short circuit glob() checks if basename(pattern) !=
1014 basename(command). Refactor code that checks for a command in a
1015 directory and use it in the glob case if the resolved pattern
1018 2008-11-01 09:20 millert
1020 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
1021 setting runas defaults until after runaspw/gr is setup.
1023 2008-10-29 13:26 millert
1025 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
1026 allocating host/domain name since some systems do not include
1027 space for the NUL in the size. Also manually NUL-terminate
1028 buffer from gethostname() since POSIX is wishy-washy on this.
1030 2008-10-26 17:13 millert
1032 * sudo.c, sudoers.pod: When setting the umask, use the union of the
1033 user's umask and the default value set in sudoers so that we
1034 never lower the user's umask when running a command.
1036 2008-10-26 16:43 millert
1038 * sudo.c: Don't try to read from a zero-length sudoers file.
1039 Remove the bogus Solaris work-around for EAGAIN. Since we now
1040 use fgetc() it should not be a problem.
1042 2008-10-25 09:22 millert
1044 * parse.c: In update_defaults() check the return value of
1045 user*_matches against ALLOW so we don't inadvertantly match on
1048 2008-10-24 09:52 millert
1050 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1051 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1052 regen man pages; no more hyphenation
1054 2008-10-24 09:49 millert
1056 * sudo.c: Don't error out on a zero-length sudoers file. With the
1057 advent of #include the user could create a situation where sudo
1060 2008-10-23 12:06 millert
1062 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
1063 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
1064 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
1065 Add configure tests to handle all the cases.
1067 2008-10-08 17:28 millert
1069 * sudo.pod: resort ENVIRONMENT
1071 2008-10-08 17:09 millert
1073 * sudoers.pod: document sudoers_locale
1075 2008-10-08 16:56 millert
1077 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
1078 uses in preference to VISUAL or EDITOR
1080 2008-10-08 14:27 millert
1082 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
1083 sudo-specific characters. Allows character classes to be used in
1086 2008-10-03 16:02 millert
1088 * lbuf.c: fix typo in non-C89 function declaration
1090 2008-10-03 15:56 millert
1092 * sudoers.pod: Mention POSIX characters classes now that out
1093 fnmatch() and glob() support them.
1095 2008-10-03 15:55 millert
1097 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
1098 UTF8) with [A-Za-z] which is locale agnostic.
1100 2008-10-03 10:02 millert
1102 * parse.h: use __signed char if we are going to assign a negative
1103 value since on Power, char is unsigned by default
1105 2008-10-03 09:59 millert
1107 * configure, configure.in, config.h.in: Add tests for __signed char
1110 2008-10-03 09:19 millert
1112 * aix.c: Fix AIX limit setting. getuserattr() returns values in
1113 disk blocks rather than bytes. The default hard stack size in
1114 newer AIX is RLIM_SAVED_MAX. From Dale King.
1116 2008-09-26 17:13 millert
1118 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1119 to included glob(3) and fnmatch(3).
1121 2008-09-16 08:28 millert
1123 * emul/fnmatch.h: Remove UCB advertising clause and some
1124 compatibility defines.
1126 2008-09-14 16:07 millert
1128 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1129 re-invoking itself or sudo. This allows one to set EDITOR to
1130 sudoedit without getting into an infinite loop of sudoedit
1131 running itself until the path gets too big.
1133 2008-09-13 20:45 millert
1135 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1136 sudoers_locale Defaults option to override the default sudoers
1139 2008-09-13 14:09 millert
1141 * sudo.c: Set locale to system default except for during sudoers
1144 2008-09-12 09:34 millert
1146 * match.c: Redo change in 1.34 to use pointer arithmetic.
1148 2008-09-11 07:06 millert
1150 * match.c: Fix a dereference (read) of a freed pointer. Reported
1151 by Patrick Williams.
1153 2008-08-23 19:09 millert
1155 * sudo.c: Set locale to "C" to avoid interpretation issues with
1156 character ranges in sudoers. May want to make the locale a
1157 sudoers option in the future.
1159 2008-08-20 07:45 millert
1161 * config.h.in: we no longer use setproctitle
1163 2008-08-20 07:41 millert
1165 * sudo.h: remove #if 1
1167 2008-08-20 07:40 millert
1169 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1172 2008-07-12 08:53 millert
1174 * gram.c: regen with yacc skeleton bug fixed
1176 2008-07-12 08:48 millert
1178 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1180 2008-07-02 06:27 millert
1182 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1183 passwd entry used for running commands as a uid not listed in the
1184 passwd database. Fixes an issue with some PAM modules.
1186 2008-07-01 07:57 millert
1188 * sudo.c: Error out in -i mode if the user has no shell. This can
1189 happen when running commands as a uid with no password entry.
1191 2008-06-26 07:49 millert
1193 * toke.c, toke.l: Better fix for line continuation inside double
1194 quotes. Now accepts whitespace between the backslash and the
1195 newline like the main lexer.
1197 2008-06-25 14:31 millert
1199 * toke.c, toke.l: Fix line continuation in strings. It was only
1200 being honored if preceded by whitespace.
1202 2008-06-22 16:19 millert
1204 * config.h.in, configure, configure.in, logging.c: Replace the
1205 double fork with a fork + daemonize.
1207 2008-06-21 14:59 millert
1209 * env.c, sudo.c: The -i flag should imply env_reset. This got
1210 broken in sudo 1.6.9.
1212 2008-06-20 20:34 millert
1214 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1215 is waited for. Instead of having a SIGCHLD handler, use the
1216 double fork trick to orphan the child that opens the pipe to
1217 sendmail. Fixes a problem running su on some Linux distros.
1219 2008-06-20 17:16 millert
1221 * configure, configure.in: Fix configure test for dirfd() on Linux
1222 where DIR is opaque.
1224 2008-06-17 17:42 millert
1226 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1227 QNX still has this problem we'll need to revisit this again.
1229 2008-06-10 21:13 millert
1231 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1232 the mailer. If we only block the signal it may be delivered
1233 later when we unblock. Also, there is no need to block SIGCHLD
1234 since we no longer do the double fork. The normal SIGCHLD
1235 handler is sufficient.
1237 2008-06-08 17:37 millert
1239 * configure, configure.in: Add description for NO_PAM_SESSION, from
1242 2008-06-06 09:36 millert
1244 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1246 2008-05-18 13:54 millert
1248 * configure, configure.in: Redo the test for dgettext() in a way
1249 that hopefully will work around the libintl_dgettext() undefined
1252 2008-05-11 09:21 millert
1254 * schema.ActiveDirectory: change filename in comment
1256 2008-05-10 09:18 millert
1258 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1259 sudoers.ldap.pod: Reference schema.ActiveDirectory
1261 2008-05-09 14:49 millert
1263 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1265 2008-05-09 14:48 millert
1267 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1269 2008-05-09 14:01 millert
1271 * schema.ActiveDirectory: Active Directory schema by Chantal
1272 Paradis and Eric Paquet
1274 2008-05-08 17:54 millert
1276 * parse.c: remove an XXX that was fixed
1278 2008-05-08 12:53 millert
1282 2008-05-08 12:49 millert
1284 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1285 mode. This fixes a problem where the tag value printed was
1286 influenced by defaults set in the first pass through the parser.
1288 2008-05-03 21:29 millert
1290 * Makefile.in, sudo.psf: No point in packaging the TODO file
1292 2008-05-03 21:24 millert
1296 2008-05-02 20:53 millert
1298 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1299 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1300 Defaults option that is similar to /etc/environment on some
1303 2008-05-02 16:38 millert
1305 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1306 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1307 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1310 2008-05-02 16:37 millert
1312 * UPGRADE: initial valgrind pass done
1314 2008-04-23 08:30 millert
1316 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1319 2008-04-11 10:03 millert
1321 * ldap.c: define LDAPS_PORT if the system headers do not
1323 2008-04-10 14:54 millert
1325 * gram.c, gram.y: Fix another memory leak in init_parser().
1327 2008-04-10 12:51 millert
1329 * configure, configure.in: There was a missing space before the
1330 ldap libs in SUDO_LIBS for some configurations.
1332 2008-04-10 11:28 millert
1334 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1335 leaks pointed out by valgrind.
1337 2008-04-07 14:39 millert
1339 * sudo.c: fix "sudo -s" broken by mode/flags breakout
1341 2008-04-07 14:26 millert
1343 * configure, configure.in: remove duplicate check for dgettext
1345 2008-04-05 15:54 millert
1347 * aix.c: Fall back to default stanza if no user-specific limit is
1350 2008-04-02 15:56 millert
1352 * snprintf.c: include stdint.h if present
1354 2008-04-02 15:28 millert
1356 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1358 2008-04-01 19:18 millert
1360 * sudoers.ldap.pod: fix cut and pasto
1362 2008-03-31 11:24 millert
1364 * pwutil.c: Add #ifdef PURITY
1366 2008-03-30 17:36 millert
1368 * auth/bsdauth.c: remove useless cast
1370 2008-03-27 19:07 millert
1374 2008-03-27 19:04 millert
1378 2008-03-27 19:01 millert
1380 * sudo.h: Split MODE_* defines into primary and flags.
1382 2008-03-26 13:11 millert
1384 * aix.c: It turns out the logic for getting AIX limits is more
1385 convoluted than I realized and differs depending on whether the
1386 soft and/or hard limits are defined.
1388 2008-03-23 10:18 millert
1390 * Makefile.in, configure, configure.in: Back out AIX-specific
1391 change to set the sudo_noexec path to the .a file, we do really
1392 want to use the .so file. Since libtool doesn't do that
1393 correctly, just install the .so file ourselves in the Makefile.
1395 2008-03-23 10:12 millert
1397 * install-sh: If the file given to install is a path, only use the
1398 basename of the file when building the destination path.
1400 2008-03-18 16:08 millert
1402 * sudo.c: parse_args() cleanup: Sort command line options in the
1403 getopt() switch The -U option requires a parameter Normalize a
1404 few ISSET calls Split mode into mode and flags and retire the
1405 now-obsolete excl variable
1407 2008-03-18 16:04 millert
1409 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1410 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1412 2008-03-18 15:59 millert
1414 * sudo.c: Move version printing, etc. into a separate function.
1416 2008-03-18 15:57 millert
1418 * sudo.c: Don't try to cleanup nsswitch if it has not been
1421 2008-03-17 11:09 millert
1423 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1424 a problem executing the mailer.
1426 2008-03-14 08:11 millert
1428 * configure.in, configure: AIX shared libs end in .a, not .so.
1430 2008-03-13 07:34 millert
1432 * env.c: Preserve HOME by default too. Matches documentation and
1435 2008-03-12 19:42 millert
1437 * sudo.c: Use getopt() to parse the command line. We need to be
1438 able to intersperse env variables and options yet still honor
1439 "--"" which complicates things slightly.
1441 2008-03-06 14:46 millert
1445 2008-03-06 14:43 millert
1447 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1449 2008-03-06 14:32 millert
1451 * config.guess, config.sub: update from libtool-1.5.26 distribution
1453 2008-03-06 13:18 millert
1455 * aix.c, sudo.h: attempt to fix compilation errors on AIX
1457 2008-03-06 13:08 millert
1459 * Makefile.in: fix typo in last commit
1461 2008-03-06 13:07 millert
1463 * Makefile.in: Add WHATSNEW file to the distribution
1465 2008-03-06 12:43 millert
1467 * visudo.c: use warningx instead of fprintf(stderr, ...)
1469 2008-03-06 12:31 millert
1471 * list.c: add DEBUG to list2tq
1473 2008-03-06 12:28 millert
1475 * ChangeLog, TODO: sync
1477 2008-03-06 12:21 millert
1479 * WHATSNEW: mention mailfrom
1481 2008-03-06 12:19 millert
1483 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1484 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1485 using a combination of getuserattr() and setrlimit(). Currently
1488 2008-03-05 16:52 millert
1490 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1491 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1492 sets the value of the From: field in the warning/error mail. If
1493 unset the login name of the invoking user is used.
1495 2008-03-05 16:18 millert
1497 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1500 2008-03-05 15:19 millert
1502 * gram.c, gram.y: When adding a default, only call list2tq() once
1503 to do the list to tq conversion. It is not legal to call list2tq
1504 multiple times on the same list since list2tq consumes and
1505 modifies the list argument.
1507 2008-03-05 09:38 millert
1509 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1512 2008-03-05 09:36 millert
1514 * WHATSNEW: mention askpass
1516 2008-03-04 17:20 millert
1518 * sudo.c: Error out if both -A and -S are specified Error out if -A
1519 is specified but no askpass is configured
1521 2008-03-04 17:16 millert
1523 * configure, configure.in: we are not going to ship a sudo-specific
1526 2008-03-03 14:30 millert
1528 * sudo.h: fix definition of TGP_ASKPASS
1530 2008-03-03 13:54 millert
1532 * def_data.c, def_data.in: make askpass boolean-capable
1534 2008-03-03 13:53 millert
1536 * INSTALL: document --with-askpass
1538 2008-03-02 19:27 millert
1540 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1541 sudoers.ldap.cat, visudo.cat: regen
1543 2008-03-02 17:31 millert
1545 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1547 2008-03-02 09:31 millert
1549 * check.c, configure, configure.in, def_data.c, def_data.h,
1550 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1551 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1552 running a helper program to read the password when no tty is
1553 present (or when specified with the -A flag). TODO: docs.
1555 2008-03-02 08:38 millert
1557 * def_data.c, def_data.in: add missing printf format to SELinux
1558 role and type strings
1560 2008-02-27 09:26 millert
1562 * INSTALL, configure, configure.in: Disable use of
1563 gss_krb5_ccache_name() by default and add
1564 --enable-gss-krb5-ccache-name configure option to enable it. It
1565 seems that gss_krb5_ccache_name() doesn't work properly with some
1566 combinations of Heimdal and OpenLDAP.
1568 2008-02-22 15:33 millert
1570 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1571 add a call to setkeycreatecon() (though this is probably
1572 insufficient). From Dan Walsh.
1574 2008-02-22 15:19 millert
1576 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1577 conversation function may be called for non-password reading
1578 purposes so we must be careful not to use def_prompt in cases
1579 where it may not be set.
1581 2008-02-20 12:00 millert
1583 * selinux.c: Don't free the new tty context, we need to keep it
1584 around when we restore the tty context after the command
1587 2008-02-19 16:04 millert
1589 * selinux.c: s/newrole/sudo/
1591 2008-02-19 13:21 millert
1593 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1594 if we have login.conf support
1596 2008-02-18 11:05 millert
1598 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1599 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1602 2008-02-18 10:53 millert
1604 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1605 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1606 lines partaining to login.conf, BSD auth and SELinux and only
1607 enable them if pertinent.
1609 2008-02-18 10:42 millert
1611 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1612 Remove the =cut on the first line (above the copyright notice) to
1613 quiet pod2man. Also remove the hackery in the FILES section and
1614 just deal with the fact that there will a newline between each
1617 2008-02-17 08:19 millert
1619 * Makefile.in: run sudo.man.pl when generating sudo.man.in
1621 2008-02-17 08:11 millert
1623 * configure, configure.in, sudo.man.pl: comment out SELinux manual
1624 bits unless --with-selinux was specified
1626 2008-02-17 08:04 millert
1628 * sudoers.pod: document role and type defaults for SELinux
1630 2008-02-16 20:26 millert
1632 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1633 Document "sudo -ll" and make "sudo -l -l" be equivalent.
1635 2008-02-15 15:23 millert
1637 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1638 Fixes compilation problems on Debian GNU/kFreeBSD.
1640 2008-02-13 17:17 millert
1642 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1643 rewrite of verify_krb_v5_tgt()
1645 2008-02-13 07:28 millert
1647 * logging.c, logging.h, sudo.c: Remove dependence on
1648 VALIDATE_NOT_OK in logging functions. Split log_auth() into
1649 log_allowed() and log_denial() Replace mail_auth() with
1650 should_mail() and a call to send_mail()
1652 2008-02-10 18:06 millert
1654 * ldap.c: Add debugging so we can tell if the krb5 ccache is
1657 2008-02-10 17:34 millert
1659 * INSTALL: mention --with-selinux
1661 2008-02-09 09:48 millert
1665 2008-02-09 09:43 millert
1667 * selinux.c: add Sudo tag
1669 2008-02-09 09:30 millert
1671 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1672 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1673 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1674 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1675 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1676 toke.l: Add support for SELinux RBAC. Sudoers entries may
1677 specify a role and type. There are also role and type defaults
1678 that may be used. To make sure a transition occurs, when using
1679 RBAC commands are executed via the new sesh binary. Based on
1680 initial changes from Dan Walsh.
1682 2008-02-08 08:18 millert
1684 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1685 list (sudo -ll) support for printing verbose LDAP and sudoers
1686 file entries. Still need to update manual.
1688 2008-02-03 10:43 millert
1690 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1691 output for file and ldap based sudoers and use lbufs for both.
1692 The ldap output does not currently include options that cannot be
1693 represented as tags. This will be remedied in a long list output
1696 2008-01-27 16:37 millert
1698 * set_perms.c: Use a specific error message for errno == EAGAIN
1699 when setuid() et al fails. On Linux systems setuid() will fail
1700 with errno set to EAGAIN if changing to the new uid would result
1701 in a resource limit violation.
1703 2008-01-27 16:34 millert
1705 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1706 family of syscalls causes the nroc resource limit to be checked.
1707 The limits will be reset by pam_limits.so when PAM is used. In
1708 the non-PAM case the nproc limit will remain unlimited but there
1709 doesn't seem to be a way around that other than having sudo parse
1710 /etc/security/limits.conf directly.
1712 2008-01-27 16:31 millert
1714 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1717 2008-01-23 06:33 millert
1719 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1720 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1721 from going into config.h. Avoid single quotes in variable
1722 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1723 of bash they will end up literally in the resulting define.
1725 2008-01-21 13:22 millert
1727 * README.LDAP: mention --with-nsswitch=no
1729 2008-01-21 11:43 millert
1731 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1734 2008-01-21 11:07 millert
1736 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1737 if we can find it. Needed for the ldapssl_set_strength defines
1740 2008-01-21 10:02 millert
1742 * TODO, sudoers.ldap.pod: sync
1744 2008-01-21 10:01 millert
1746 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1747 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1750 2008-01-21 10:00 millert
1752 * Makefile.in: Use 78n line length when formatting cat pages.
1754 2008-01-21 09:50 millert
1756 * README.LDAP: Remove redundant info that is now in
1759 2008-01-20 16:18 millert
1761 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1762 Reorganize the first section a bit. Substitute the proper path
1765 2008-01-20 10:17 millert
1767 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1768 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1769 Move schema into EXAMPLES
1771 2008-01-20 10:15 millert
1773 * configure.in, configure: Substitute values for ldap.conf,
1774 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1776 2008-01-19 20:35 millert
1778 * configure, configure.in: substitute for sudoers.ldap.man
1780 2008-01-19 20:34 millert
1782 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1785 2008-01-19 20:25 millert
1787 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1788 some of the missing pieces. Still needs some reorganization and
1791 2008-01-19 15:06 millert
1793 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1794 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1795 Currently, much of the information is adapted from README.LDAP.
1797 2008-01-18 17:32 millert
1799 * pwutil.c: When copying gr_mem we must guarantee that the storage
1800 space for gr_mem is properly aligned. The simplest way to do
1801 this is to simply store gr_mem directly after struct group. This
1802 is not a problem for gr_passwd or gr_name as they are simple
1805 2008-01-18 16:47 millert
1807 * ldap.c: Fix a typo/thinko in one of the calls to
1808 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1810 2008-01-17 15:44 millert
1812 * config.h.in, configure, configure.in, ldap.c: include
1813 <mps/ldap_ssl.h> in ldap.c if available
1815 2008-01-16 18:20 millert
1817 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1820 2008-01-16 13:03 millert
1822 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1823 echo) to guarantee that any pending output is discarded
1825 2008-01-15 17:18 millert
1827 * sudoers: no longer need to specify SETENV when user has sudo ALL
1829 2008-01-15 09:40 millert
1831 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1832 group option, renaming old -g to -G Add set_runasgr() and
1833 set_runaspw() and use them
1835 2008-01-15 09:23 millert
1837 * sudo.h, sudo.c: Make set_runaspw static void
1839 2008-01-15 09:17 millert
1841 * testsudoers.c, visudo.c: g/c set_runaspw stub
1843 2008-01-15 07:28 millert
1845 * configure, configure.in: Don't add -llber twice.
1847 2008-01-14 06:40 millert
1851 2008-01-13 15:39 millert
1855 2008-01-13 14:57 millert
1857 * configure, configure.in: Fix check that determines whether -llber
1860 2008-01-13 14:22 millert
1862 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1863 netscape-based LDAP, use ldapssl_set_strength() to implement the
1864 checkpeer ldap.conf option.
1866 2008-01-13 09:49 millert
1868 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1869 to use the cred cache, which is what krb5_verify_user() does.
1870 Better cleanup on failure.
1872 2008-01-12 12:40 millert
1874 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1875 krb5_verify_user() does.
1877 2008-01-09 14:58 millert
1879 * gram.c: The U suffix on constants is an ANSI feature
1881 2008-01-09 12:08 millert
1883 * configure.in, configure: Add check for ber_set_option() in -llber
1885 2008-01-06 19:02 millert
1887 * README.LDAP: default if no nsswitch.conf is files only
1889 2008-01-06 17:28 millert
1891 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1893 2008-01-06 12:32 millert
1895 * README.LDAP: timelimit and bind_timelimit
1897 2008-01-06 08:54 millert
1901 2008-01-06 07:56 millert
1903 * ldap.c: Move ldap.secret reading into a separate function.
1905 2008-01-05 19:09 millert
1907 * check.c: user_runas -> runas_pw
1909 2008-01-05 18:59 millert
1913 2008-01-05 18:59 millert
1915 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1916 the password prompt. Based on a patch from Patrick Schoenfeld.
1918 2008-01-05 18:25 millert
1920 * ldap.c: Check strlcpy() return values.
1922 2008-01-05 18:12 millert
1924 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1926 2008-01-05 16:35 millert
1928 * README.LDAP: Make it clear that host and uri can take multiple
1929 parameters. URI is now supported for more than just openldap
1930 nsswitch.conf does't accept "compat"
1932 2008-01-05 16:27 millert
1934 * sudo.c: comment cleanup and update (c) year
1936 2008-01-05 16:25 millert
1938 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1939 parse.c to sudo_nss.c. This should make it possible to build an
1940 LDAP-only sudo binary.
1942 2008-01-05 13:27 millert
1944 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1945 multiple sudoers sources by passing in the previous return value
1946 to the next in the chain
1948 2008-01-05 13:26 millert
1950 * gram.y: Free up parser data structures in sudo_file_close().
1952 2008-01-05 08:13 millert
1954 * gram.c, parse.c: Free up parser data structures in
1957 2008-01-05 07:59 millert
1959 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1960 ldap_create() instead of deprecated ldap_init() Use
1961 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1963 2008-01-05 07:56 millert
1965 * config.h.in, configure, configure.in: Add check for
1966 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1968 2008-01-04 09:56 millert
1970 * configure.in, configure, config.h.in: add check for ldap_create
1972 2008-01-03 16:11 millert
1974 * config.h.in, configure, configure.in, ldap.c: Add
1975 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1976 dn using the mechanism appropriate for the LDAP SDK in use. Use
1977 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1978 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1981 2008-01-03 16:02 millert
1983 * lbuf.c: include unistd.h
1985 2008-01-03 11:05 millert
1987 * config.h.in, configure.in: fix typo in mtim_getnsec
1989 2008-01-02 15:29 millert
1991 * config.h.in, configure.in, configure: add check for st__tim in
1992 struct stat as used by SCO
1994 2008-01-02 11:05 millert
1996 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1998 2008-01-02 10:09 millert
2000 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
2002 2008-01-01 19:04 millert
2004 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
2005 ldap_str2dn() and ldap_rdn2str().
2007 2008-01-01 18:37 millert
2009 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
2010 of the deprecated ldap_get_values()/ldap_value_free().
2012 2008-01-01 17:07 millert
2014 * TODO, ChangeLog: sync
2016 2008-01-01 17:06 millert
2018 * gettime.c, sudo.c: Remove some already fixed XXXs
2020 2008-01-01 17:03 millert
2022 * ldap.c: Same return value as non-existent sudoers if LDAP was
2025 2008-01-01 16:52 millert
2027 * sudo.pod: mention /etc/environment
2029 2008-01-01 16:42 millert
2031 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
2034 2008-01-01 16:42 millert
2036 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
2039 2008-01-01 16:25 millert
2041 * ldap.c: When building up a query don't list groups in the aux
2042 group vector that are the same as the passwd file group. On most
2043 systems the first gid in the group vector is the same as the
2046 2008-01-01 14:01 millert
2048 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
2049 to disable user ldaprc and system defaults that could affect how
2052 2008-01-01 13:21 millert
2054 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
2055 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
2056 --with-nsswitch to allow users to specify nsswitch.conf path or
2057 disable it. If --with-nsswitch=no but --with-ldap, order is
2058 LDAP, then sudoers. Fix --with-ldap-conf-file and
2059 --with-ldap-secret-file
2061 2008-01-01 13:12 millert
2063 * parse.c: Honor def_ignore_local_sudoers
2065 2007-12-31 16:44 millert
2067 * ldap.c: no longer need to check def_ignore_local_sudoers here
2069 2007-12-31 16:36 millert
2071 * parse.c: Refactor group vector resetting into a function and also
2072 call it from display_cmnd. Stop after the first sucessful match
2073 in display_cmnd. Print a newline between each display_privs
2076 2007-12-31 16:23 millert
2078 * parse.c: fix double free introduced in rev 1.218
2080 2007-12-31 16:10 millert
2082 * ldap.c: belt and suspenders; zero out result after freeing it
2084 2007-12-31 15:04 millert
2086 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
2087 reading into a separate function, sudo_parseln(), which removes
2088 comments, leading/trailing whitespace and newlines. May want to
2089 rethink the use of sudo_parseln() for /etc/ldap.secret
2091 2007-12-31 14:26 millert
2093 * parse.c, sudo.c: Make the inability to read the sudoers file a
2094 non-fatal error if there are other sudoers sources available.
2095 sudoers_file_lookup now returns "not OK" if sudoers was not
2098 2007-12-31 14:24 millert
2100 * ldap.c: make it clear that the global options are from LDAP
2102 2007-12-31 14:13 millert
2104 * logging.c: allocate proper amount of space for error string
2106 2007-12-31 10:24 millert
2108 * sudo_nss.c, sudo_nss.h: actual sudo nss code
2110 2007-12-31 10:08 millert
2112 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2115 2007-12-31 07:54 millert
2117 * defaults.c, parse.c, testsudoers.c, visudo.c: move
2118 update_defaults() to parse.c
2120 2007-12-31 07:39 millert
2122 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2123 Use nsswitch to hide some sudoers vs. ldap implementation details
2124 and reduce the number of #ifdef LDAP TODO: fix display routines
2127 2007-12-28 11:20 millert
2129 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2130 First cut at nsswitch.conf support. Further reorganizaton and
2131 related changes are forthcoming.
2133 2007-12-21 16:53 millert
2135 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2136 and /etc/environment file. Still needs to be documented and
2137 should probably only applies to OSes that have it (AIX and Linux,
2140 2007-12-21 16:20 millert
2142 * ldap.c: include limits.h
2144 2007-12-20 10:02 millert
2146 * WHATSNEW: reword LDAP SASL
2148 2007-12-19 16:40 millert
2152 2007-12-19 16:39 millert
2154 * README.LDAP: Add an example sudoRole, clarify netscape vs.
2157 2007-12-19 14:42 millert
2159 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2161 2007-12-19 14:28 millert
2163 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2164 for ldaps support instead of trying to do it manually with
2165 ldap_init() + ldapssl_install_routines(). Use tls_cert and
2166 tls_key for cert7.db and key3.db respectively. Don't print
2167 debugging info for options that are not set. Add warning if
2168 start_tls specified when not supported.
2170 2007-12-19 14:25 millert
2172 * ldap.c: fix compilation on solaris
2174 2007-12-19 14:23 millert
2176 * Makefile.in: add missing .h and .c files for missing lib objs
2178 2007-12-18 09:54 millert
2180 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2182 2007-12-17 20:10 millert
2184 * ldap.c: fix compilation on Solaris
2186 2007-12-17 10:14 millert
2188 * configure, configure.in: fix typo
2190 2007-12-17 08:08 millert
2192 * README.LDAP: try to clear up which variables are for OpenLDAP and
2193 which are for netscape-derived SDKs
2195 2007-12-17 07:31 millert
2197 * config.h.in, configure, configure.in, ldap.c: Add support for
2198 "ssl on" in both netscape and openldap flavors. Only the
2199 OpenLDAP flavor has been tested.
2201 2007-12-17 07:28 millert
2203 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2204 log_error() instead of calling sudo_ldap_close() directly.
2205 ldap_conn can now be static to sudo.c
2207 2007-12-16 20:02 millert
2209 * sudo.c: ld -> ldap_conn
2211 2007-12-16 14:42 millert
2213 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2215 2007-12-16 14:08 millert
2217 * ldap.c: Distinguish between LDAP conf settings that are
2218 connection-specific (which take an ld pointer) and those that are
2219 default settings (which do not).
2221 2007-12-14 16:46 millert
2223 * ldap.c: Improved warnings on error.
2225 2007-12-14 15:59 millert
2227 * ldap.c: Make ldap config table driven and set the config *after*
2228 we open the connection.
2230 2007-12-13 16:41 millert
2232 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2234 2007-12-13 09:13 millert
2236 * configure, configure.in: some operating systems need to link with
2237 -lkrb5support when using krb5
2239 2007-12-10 17:12 millert
2241 * WHATSNEW: minor update
2243 2007-12-10 10:56 millert
2245 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2247 2007-12-07 19:17 millert
2249 * TODO, ChangeLog: sync
2251 2007-12-07 19:09 millert
2253 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2256 2007-12-03 11:36 millert
2258 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2259 can now take an optional command.
2261 2007-12-02 12:13 millert
2263 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2264 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2265 that will cause the prompt to be overridden in all cases. This
2266 flag is also set when the user specifies the -p flag.
2268 2007-12-01 19:51 millert
2270 * sudo.c: Move setting of login class until after sudoers has been
2271 parsed. Set NewArgv[0] for -i after runas_pw has been set.
2273 2007-12-01 19:34 millert
2275 * configure, configure.in: Move the dgettext check.
2277 2007-12-01 11:22 millert
2279 * config.h.in, configure, configure.in, auth/pam.c: Add basic
2280 support for looking up the string "Password: " in the PAM
2281 localized text db. This allows us to determine whether the PAM
2282 prompt is the default "Password: " one even if it has been
2285 TODO: concatenate non-std PAM prompts and user-specified sudo
2288 2007-11-27 18:40 millert
2290 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2291 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2292 home-grown attempt that was insufficient.
2294 2007-11-27 12:13 millert
2296 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2299 2007-11-25 19:26 millert
2301 * set_perms.c: Don't assume runas_pw is set; it may not be in the
2304 2007-11-25 08:07 millert
2306 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2307 restore group vector for PERM_ROOT if we previously changed it.
2308 Stash the runas group vector so we don't have to call initgroups
2309 more than once. Also add no-op check to check_perms.
2311 2007-11-21 15:11 millert
2313 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2314 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2315 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2316 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2317 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2318 visudo.cat, visudo.man.in: Add support for runas groups. This
2319 allows the user to run a command with a different effective
2320 group. If the -g option is specified without -u the command will
2321 be run as the current user (only the group will change). the -g
2322 and -u options may be used together. TODO: implement runas group
2323 for ldap improve runas group documentation add
2326 2007-11-21 15:02 millert
2328 * configure, configure.in: fix setting of mandir
2330 2007-11-21 14:26 millert
2332 * sudo.pod, sudoers.pod: document that ALL implies SETENV
2334 2007-11-21 13:50 millert
2336 * ldap.c: s/setenv_ok/setenv_implied/g
2338 2007-11-21 13:44 millert
2340 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2342 2007-11-21 13:26 millert
2344 * ldap.c: use strcmp, not strcasecmp when comparing ALL
2346 2007-11-21 11:41 millert
2348 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2349 file-based sudoers this does affect all the commands in the
2352 2007-11-21 11:05 millert
2354 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2355 SETENV tag but, unlike an explicit tag, it is not passed on to
2356 other commands in the list.
2358 2007-11-21 11:02 millert
2360 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2361 Also use sudo_getpwuid() instead of getpwuid().
2363 2007-11-15 11:16 millert
2365 * sudoers: Expand on the dangers of not using visudo to edit
2368 2007-11-08 07:24 millert
2370 * parse.c: Don't quote *?[]! on output since the lexer does not
2371 strip off the backslash when reading those in.
2373 2007-11-07 13:16 millert
2375 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2376 compatibility issues.
2378 2007-11-04 08:33 millert
2380 * logging.c: Refactor log line generation in to new_logline().
2382 2007-10-25 09:23 millert
2384 * TROUBLESHOOTING: fix typo
2386 2007-10-24 12:41 millert
2388 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2389 match.c: Add configure check for struct in6_addr instead of
2390 relying on AF_INET6 since some systems define AF_INET6 but do not
2391 include IPv6 support.
2393 2007-10-21 09:29 millert
2395 * configure, configure.in: Fix block to add -lutil for FreeBSD and
2396 NetBSD when logincap is in use.
2398 2007-10-19 22:28 millert
2400 * configure, configure.in: POSIX states that struct timespec be
2401 declared in time.h so check there regardless of the value of
2404 2007-10-17 11:37 millert
2406 * tgetpass.c: Instead of defining a macro to call the appropriate
2407 method for turning on/off echo, just define tc[gs]etattr() and
2408 the related defines that use the correct terminal ioctls if
2409 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2412 2007-10-08 20:18 millert
2414 * Makefile.in: g/c @ALLOCA@
2416 2007-10-08 20:07 millert
2420 2007-10-08 20:04 millert
2422 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2423 --disable-pam-session configure option to disable calling
2424 pam_{open,close}_session. May work around bugs in some PAM
2427 2007-10-08 12:00 millert
2429 * tgetpass.c: quiet gcc warnings
2431 2007-10-08 08:41 millert
2433 * tgetpass.c: Avoid printing the prompt if we are already
2434 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2435 In this case, the call to tcsetattr() will cause SIGTTOU to be
2438 2007-09-15 16:07 millert
2440 * def_data.c, def_data.h, def_data.in: Reorder things such that the
2441 definition of env_reset come right before the env variable lists.
2443 2007-09-15 07:50 millert
2445 * parse.h: Shrink type and seqno in struct alias from int to
2448 2007-09-15 07:24 millert
2450 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2451 aliases for loop detection. If we find an alias with the seqno
2452 already set to the current (global) value we know we've visited
2453 it before so ignore it.
2455 2007-09-13 19:05 millert
2457 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2458 add user_ttypath which holds the full path to the tty or is NULL
2459 if no tty was present.
2461 2007-09-13 18:42 millert
2463 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2464 lower that results in a segv.
2466 2007-09-11 15:43 millert
2470 2007-09-11 15:42 millert
2472 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2473 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2475 2007-09-10 17:33 millert
2477 * alloc.c: remove some useless casts
2479 2007-09-10 17:32 millert
2481 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2482 inttypes.h predates the final C99 spec and the standard specifies
2483 that it shall include stdint.h anyway
2485 2007-09-06 12:39 millert
2487 * Makefile.in, alloca.c, configure.in: Since we ship with a
2488 pre-generated parser there is no need to ship a bogus alloca
2491 2007-09-06 12:22 millert
2495 2007-09-06 12:19 millert
2497 * configure.in: remove initial setting of CHECKSIA, we require that
2498 it be unset if not used
2500 2007-09-06 11:55 millert
2502 * Makefile.in: add list.c to SRCS
2504 2007-09-06 07:18 millert
2508 2007-09-06 07:17 millert
2510 * configure.in: only do SIA checks on Digital Unix
2512 2007-09-05 18:50 millert
2514 * sudoers.cat, sudoers.man.in: regen
2516 2007-09-05 18:48 millert
2518 * ChangeLog, TODO: sync
2520 2007-09-05 18:39 millert
2522 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2523 needed for modern kerb5.
2525 2007-09-05 18:16 millert
2529 2007-09-05 18:16 millert
2531 * configure.in, aclocal.m4: New method for setting the default
2532 authentication type and avoiding conflicts in auth types.
2534 2007-09-05 14:45 millert
2536 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2537 an associated runaslist so no need to keep track of the most
2538 recent non-NULL one.
2540 2007-09-04 18:51 millert
2542 * ldap.c: back out partial ldaps support mistakenly committed
2544 2007-09-04 10:57 millert
2546 * ldap.c: Add support for unix groups and netgroups in sudoRunas
2548 2007-09-03 16:28 millert
2550 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2553 2007-09-02 17:05 millert
2557 2007-09-02 17:05 millert
2559 * INSTALL: update --passprompt escape info
2561 2007-09-02 17:03 millert
2563 * configure.in: remove now-bogus comment and update copyright date
2565 2007-09-02 16:35 millert
2567 * configure.in: Fix up use of with_passwd
2569 2007-09-02 16:25 millert
2571 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2572 Update to autoconf-2.61 andf libtool-1.5.24
2574 2007-09-02 16:17 millert
2576 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2579 2007-09-01 17:39 millert
2583 2007-09-01 17:39 millert
2585 * gram.y: move tags and runaslist propagation to be earlier
2587 2007-09-01 09:34 millert
2589 * visudo.c: If -f flag given use the permissions of the original
2592 2007-09-01 08:45 millert
2594 * gram.y: prevent a double free() when re-initing the parser
2596 2007-08-31 19:30 millert
2600 2007-08-31 19:30 millert
2602 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2603 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2604 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2605 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2606 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2607 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2608 Remove support for compilers that don't support void *
2610 2007-08-31 19:14 millert
2614 2007-08-31 19:13 millert
2616 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2617 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2618 manipulation macros to list.h and create C versions of the more
2619 complex ones in list.c. The names have been down-cased so they
2620 appear more like normal functions.
2622 2007-08-31 17:21 millert
2624 * Makefile.in: Fix cmp command when regenerating parser. Make
2625 gram.o the first dependency for all programs so gram.h will be
2626 generated before anything that needs it.
2628 2007-08-31 13:56 millert
2630 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2633 2007-08-30 21:21 millert
2635 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2636 permission and short-circuit on the first non-UNSPEC hit we get
2637 for the command. This means that instead of cycling through the
2638 all the parsed sudoers entries we start at the end and work
2639 backwards and quit after the first positive or negative match.
2641 2007-08-30 21:13 millert
2645 2007-08-30 21:12 millert
2647 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2648 Change list head macros to take a pointer, not a struct.
2650 2007-08-30 20:46 millert
2654 2007-08-30 20:46 millert
2656 * gram.y: Propagate the runasspec from one command to the next in a
2659 2007-08-30 16:15 millert
2661 * match.c: Replace has_meta() with a macro that calls strpbrk().
2663 2007-08-30 16:04 millert
2667 2007-08-30 13:26 millert
2669 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2670 testsudoers.c, visudo.c: Use a list head struct when storing the
2671 semi-circular lists and convert to tail queues in the process.
2672 This will allow us to reverse foreach loops more easily and it
2673 makes it clearer which functions expect a list as opposed to a
2676 Add macros for manipulating lists. Some of these should become
2679 When freeing up a list, just pop off the last item in the queue
2680 instead of going from head to tail. This is simpler since we
2681 don't have to stash a pointer to the next member, we always just
2682 use the last one in the queue until the queue is empty.
2684 Rename match functions that take a list to have list in the name.
2685 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2687 2007-08-30 13:12 millert
2689 * parse.c: Fix pasto, append "!" not negated (which is an int) for
2692 2007-08-30 12:45 millert
2694 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2695 dependency is enough. Only move y.tab.h to gram.h if it is
2696 different; avoids needless rebuilding.
2698 2007-08-27 15:51 millert
2700 * sudoers.pod: Defaults lines may be associated with lists of
2701 users, hosts, commands and runas users, not just single entries.
2703 2007-08-26 17:42 millert
2705 * Makefile.in: Revert the "cmp" portion of the last diff, it
2708 2007-08-26 17:10 millert
2710 * Makefile.in: Remove *.lo for clean: When generating the parser,
2711 only move the generated files into place if they differ from the
2714 2007-08-24 22:47 millert
2716 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2717 (readable) one and add an extra check when it matches to make
2718 sure we have a valid address.
2720 2007-08-24 22:36 millert
2722 * match.c: Fix thinko introduced when merging IPV6 support.
2724 2007-08-24 14:23 millert
2726 * HISTORY, LICENSE: regen
2728 2007-08-24 14:23 millert
2730 * license.pod: add 2007
2732 2007-08-24 14:19 millert
2734 * UPGRADE: mention #uid vs. comment pitfall
2736 2007-08-24 09:50 millert
2738 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2739 problem with the latest autoconf. From Stepan Kasal.
2741 2007-08-23 20:28 millert
2743 * parse.h: Back out he XOR swap trick, it is slower than a temp
2744 variable on modern CPUs.
2746 2007-08-23 20:14 millert
2750 2007-08-23 20:14 millert
2752 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2753 and use the XOR swap trick to swap the prev pointers during
2756 2007-08-23 15:31 millert
2758 * parse.h: remove useless statement
2760 2007-08-23 07:47 millert
2762 * toke.c, toke.l: Refactor #include parsing into a separate
2763 function and return unparsed chars (such as newline or comment)
2766 2007-08-22 18:56 millert
2768 * WHATSNEW: mention better uid support
2770 2007-08-22 18:55 millert
2772 * sudoers.pod: Users may now consist of a uid.
2774 2007-08-22 18:39 millert
2776 * gram.c, gram.h, toke.c: regen
2778 2007-08-22 18:32 millert
2780 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2781 characters that would require quoting in sudoers.
2783 2007-08-22 18:31 millert
2785 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2786 characters which should be quoted with a backslash when
2789 2007-08-22 18:28 millert
2791 * toke.l: Require that the first character after a comment not be a
2792 digit or a dash. This allows us to remove the GOTRUNAS state and
2793 treat uid/gids similar to other words. It also means that we can
2794 now specify uids in User_Lists and a User_Spec may now contain a
2797 2007-08-22 18:23 millert
2799 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2800 make the runas portion of the grammar more natural.
2802 2007-08-22 06:35 millert
2804 * Makefile.in, README, BUGS: The BUGS file is history
2806 2007-08-21 09:19 millert
2808 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2809 character after the pound sign isn't a digit or a dash.
2811 2007-08-20 20:43 millert
2813 * WHATSNEW: Glob support was back-ported to 1.6.9
2815 2007-08-20 19:59 millert
2817 * Makefile.in: remove sudo_usage.h in distclean
2819 2007-08-20 19:24 millert
2821 * parse.c: If a Defaults value contains a blank, double-quote the
2824 2007-08-20 19:19 millert
2826 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2827 that span multiple lines using the line continuation char.
2828 Previously, the entire thing, including the continuation char,
2829 newline, and spaces was stored as-is.
2831 2007-08-20 10:46 millert
2833 * sudo.c: Be consistent when using single quotes and backticks.
2835 2007-08-19 16:48 millert
2837 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2838 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2839 dynamically allocated strings and word-wrapped output. Currently
2840 used for sudo's usage() and sudo -l output. Sudo usage strings
2841 are now in sudo_usage.h which is generated at configure time.
2843 2007-08-18 08:22 millert
2845 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2846 actual tty width instead of assuming 80.
2848 2007-08-17 18:32 millert
2850 * history.pod: some more info
2852 2007-08-17 17:28 millert
2854 * history.pod: Mentioned Chris Jepeway's parser and also the new
2855 one that is in sudo 1.7.
2857 2007-08-16 09:38 millert
2859 * sudo.pod, visudo.pod: For the options list, add flag args where
2860 appropriate and increase the indent level so there is room for
2863 2007-08-15 13:49 millert
2865 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2866 some bogosity in the line wrapping.
2868 2007-08-15 11:21 millert
2870 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2871 visudo.man.in, visudo.cat: regen
2873 2007-08-15 11:20 millert
2875 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2876 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2877 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2878 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2879 is a versino of systrace that uses a lookaside buffer (or we have
2880 a better mechanism to use).
2882 2007-08-15 09:22 millert
2884 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2885 instead of gethostbyname() if it is available
2887 2007-08-14 15:27 millert
2889 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2892 2007-08-14 11:19 millert
2894 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2896 2007-08-14 10:04 millert
2898 * sudo.c: If we can open sudoers but fail to read the first byte,
2899 close the file stream before trying again.
2901 2007-08-13 12:34 millert
2903 * gram.c, toke.c: regen
2905 2007-08-13 12:29 millert
2907 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2908 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2910 2007-08-13 12:23 millert
2912 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2915 2007-08-12 18:55 millert
2917 * configure, configure.in: fix sudo_noexec extension which got
2918 broken in the libtool update
2920 2007-08-10 10:41 millert
2922 * Makefile.in: explicitly specify -Tascii to nroff
2924 2007-08-08 16:07 millert
2926 * logging.c: remove an ANSI-ism that crept in
2928 2007-08-06 20:37 millert
2930 * sudo.pod: Adjust list indents Prevent -- from being turned into
2931 an em dash Use a list for the environment instead of a literal
2934 2007-08-06 20:36 millert
2936 * visudo.pod: Use a list for the environment instead of an indented
2939 2007-08-06 20:33 millert
2941 * sudoers.pod: Adjust list indentation
2943 2007-08-06 20:31 millert
2945 * license.pod: add =head3
2947 2007-08-06 10:24 millert
2949 * sudo.pod: mention that when specifying a uid for the -u option
2950 the shell may require that the # be escaped
2952 2007-08-01 22:08 millert
2954 * match.c: Fix off by one in group matching.
2956 2007-07-31 14:04 millert
2958 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2961 2007-07-30 10:45 millert
2963 * configure, configure.in: Add missing define of
2964 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2966 2007-07-30 09:29 millert
2968 * aclocal.m4, configure.in, configure: Fix link tests such that new
2969 gcc doesn't optimize away the test.
2971 2007-07-29 19:21 millert
2973 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2975 2007-07-29 19:09 millert
2977 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2980 2007-07-29 18:32 millert
2982 * env.c: Add back allocation of the env struct in rebuild_env but
2983 save a copy of the old pointer and free it before returning.
2985 2007-07-29 16:09 millert
2987 * env.c: Don't init the private environment in rebuild_env() since
2988 it may have already been done implicitly
2989 sudo_setenv/sudo_unsetenv.
2991 Multiply length by sizeof(char *) in memcpy/memmove when copying
2992 the environment so we copy the full thing.
2994 Add missing set of parens so we deref the right pointer in
2995 sudo_unsetenv when searching for a matching variable.
2997 2007-07-26 16:35 millert
2999 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
3002 2007-07-26 10:04 millert
3004 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
3006 2007-07-26 07:28 millert
3008 * sudoers.pod: Sort sudoers options; based on a diff from Igor
3011 2007-07-25 16:19 millert
3013 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
3014 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
3015 The Makefile rules for the .man.in file will add @mansectsu@ and
3016 @mansectform@ back in after pod2man is done anyway.
3018 2007-07-22 19:09 millert
3020 * LICENSE, Makefile.in, license.pod: Move license info to pod
3023 2007-07-22 18:43 millert
3025 * configure, configure.in, sudoers.pod: Substitute value of
3026 path_info into sudoers man page.
3028 2007-07-22 16:40 millert
3030 * WHATSNEW: remove features that were back-ported to 1.6.9
3032 2007-07-22 15:20 millert
3034 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
3035 usage. From Igor Sobrado.
3037 2007-07-22 15:19 millert
3039 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
3040 ldap_sasl_interactive_bind_s() but don't have
3041 gss_krb5_ccache_name().
3043 2007-07-22 08:23 millert
3045 * ChangeLog: rebuild without branch info
3047 2007-07-22 08:23 millert
3049 * Makefile.in: Add ChangeLog target
3051 2007-07-22 08:14 millert
3053 * auth/pam.c: Run cleanup code if the user hits ^C at the password
3056 2007-07-22 08:13 millert
3058 * auth/pam.c: Some versions of pam_lastlog have a bug that will
3059 cause a crash if PAM_TTY is not set so if there is no tty, set
3060 PAM_TTY to the empty string.
3062 2007-07-20 09:32 millert
3064 * Makefile.in: ChageLog not Changelog
3066 2007-07-20 09:31 millert
3070 2007-07-20 09:29 millert
3072 * Makefile.in: CHANGE -> Changelog
3074 2007-07-19 20:23 millert
3078 2007-07-19 19:53 millert
3080 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
3081 for gss_krb5_ccache_name() and the gssapi headers.
3083 2007-07-18 12:57 millert
3085 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
3086 return environment pointer, they set environ directly.
3088 No longer need to pass around an envp pointer since we just
3089 operate on environ now.
3091 Add dosync argument to insert_env() that indicates whether it
3092 should reset environ when realloc()ing env.envp.
3094 Use an initial size of 128 for the environment.
3096 2007-07-18 12:41 millert
3098 * env.c: Split sudo_setenv() into an external version and a version
3099 only for use by rebuild_env().
3101 2007-07-16 19:40 millert
3103 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
3104 setting KRB5CCNAME. Also use sudo_unsetenv() in the
3105 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
3106 original environment. TODO: configure setup for
3107 gss_krb5_ccache_name()
3109 2007-07-16 18:44 millert
3111 * README.LDAP: add krb5_ccname
3113 2007-07-16 18:44 millert
3115 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3117 2007-07-16 18:39 millert
3119 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3120 syncing code into sync_env().
3122 2007-07-16 07:27 millert
3124 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3127 2007-07-15 15:44 millert
3129 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3130 If specified, it will override the default value of KRB5CCNAME
3131 in the environment for the duration of the call to
3132 ldap_sasl_interactive_bind_s().
3134 2007-07-15 15:41 millert
3136 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3137 most format_env() + insert_env() combinations. insert_env() no
3138 longer takes a struct environment *
3140 2007-07-15 12:47 millert
3142 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3144 2007-07-15 09:23 millert
3146 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3147 support for SASL auth when connecting to an LDAP server. Adapted
3148 from a diff by Tom McLaughlin.
3150 2007-07-14 16:32 millert
3152 * configure, configure.in: Only enable AIX or BSD auth if no other
3153 exclusive auth method has been chosen. Allows people to e.g.,
3154 use PAM on AIX without adding --without-aixauth. A better
3155 solution is needed to deal with default authentication since if a
3156 non-exclusive method is chosen we will still get an error.
3158 2007-07-11 11:23 millert
3160 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3161 history.pod (which is also used for web pages)
3163 2007-07-09 19:40 millert
3165 * sudo.man.in, sudoers.man.in: regen
3167 2007-07-09 19:25 millert
3169 * sudo.pod: Better explanation of environment handling in the sudo
3172 2007-07-09 15:13 millert
3174 * env.c, sudo.c: Defer setting user-specified env vars until after
3177 2007-07-09 13:25 millert
3179 * env.c: honor def_default_path for PATH set on the command line
3181 2007-07-09 13:22 millert
3183 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3184 environment variables on the command line as long as they are
3185 allowed by env_keep and env_check. Ie: apply the same
3186 restrictions as normal environment variables. TODO: deal with
3189 2007-07-08 14:44 millert
3191 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3192 original envp to sudo_edit(). Don't allow -E or env var setting
3193 in sudoedit mode. More accurate usage() when called as sudoedit.
3195 2007-07-08 14:41 millert
3197 * ldap.c: warn -> warning
3199 2007-07-08 14:11 millert
3201 * sudo.pod: add -c option to sudoedit synopsis
3203 2007-07-08 10:27 millert
3205 * TODO: udpate to reality
3207 2007-07-08 09:43 millert
3209 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3210 the return value from {user,host,runas,cmnd}_matches(). Rename
3211 *matches variables -> *match. Purely cosmetic.
3213 2007-07-08 09:30 millert
3215 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3216 No change in behavior.
3218 2007-07-08 09:17 millert
3220 * sudoers: add SETENV tag
3222 2007-07-06 15:51 millert
3224 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3225 even if user didn't match since Defaults options may still apply.
3227 2007-07-06 14:51 millert
3229 * check.c, sudo.c: Do not update timestamp if user not validated by
3232 2007-07-06 10:14 millert
3234 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3235 and restore to the user's original in PERM_ROOT
3237 2007-07-06 10:04 millert
3239 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3240 now no different than PERM_ROOT so remove PERM_FULL_ROOT
3242 2007-07-06 09:49 millert
3244 * check.c: don't check timestamp mtime if we are just going to
3247 2007-07-06 09:33 millert
3249 * sudoers.pod: Move sudoers defaults parameters into their own
3252 2007-07-05 20:21 millert
3254 * testsudoers.c: Reduce a level of indent by a few placed continue
3257 2007-07-05 20:20 millert
3259 * parse.c: Make matching but negated commands/hosts/runas entries
3260 override a previous match as expected. Also reduce some levels
3261 of indent by a few placed continue statements.
3263 2007-07-05 16:34 millert
3265 * parse.c: Print default runas in "sudo -l" if sudoers don't
3268 2007-07-05 15:46 millert
3270 * match.c: Less hacky way of testing whether the domain was set.
3272 2007-07-04 15:50 millert
3274 * INSTALL: Mention pam-devel and openldap-devel for Linux
3276 2007-07-03 19:38 millert
3278 * README.LDAP: or vs. are
3280 2007-07-01 16:55 millert
3282 * sudo.c: fix typo in Solaris project support
3284 2007-07-01 09:40 millert
3288 2007-07-01 09:07 millert
3290 * sudo.c: Make -- on the command line match the manual page. The
3291 implied shell case has been simplified as a result.
3293 2007-06-28 10:44 millert
3295 * sudoers2ldif: add simplistic support for sudoRunas; note that if
3296 a sudoers entry contains multiple Runas users, all will apply to
3299 2007-06-28 10:42 millert
3301 * sudoers2ldif: honor SETENV and NOSETENV tags
3303 2007-06-24 09:25 millert
3305 * mon_systrace.c: Redo setting of user_args. We now build up a
3306 private copy of argv first and then replace the NULs with spaces.
3308 2007-06-24 09:19 millert
3310 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3313 2007-06-24 07:39 millert
3315 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3317 2007-06-23 20:00 millert
3319 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3320 visudo.man.in: regen
3322 2007-06-23 19:58 millert
3324 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3325 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3326 sudoers.pod, toke.c, toke.l: Add support for setting environment
3327 variables on the command line. This is only allowed if the
3328 setenv sudoers options is enabled or if the command is prefixed
3329 with the SETENV tag.
3331 2007-06-23 19:57 millert
3333 * README.LDAP: replace Aaron's email address with the sudo-workers
3336 2007-06-23 19:55 millert
3340 2007-06-21 20:35 millert
3342 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3343 schema out into separate files.
3345 2007-06-21 18:28 millert
3347 * auth/aix_auth.c: free message if set by authenticate()
3349 2007-06-21 13:03 millert
3351 * match.c: deal with NULL gr_mem
3353 2007-06-20 15:04 millert
3355 * config.h.in: regen
3357 2007-06-20 15:04 millert
3359 * configure.in: add template for HAVE_PROJECT_H
3361 2007-06-20 07:06 millert
3363 * closefrom.c: include fcntl.h
3365 2007-06-19 19:37 millert
3367 * INSTALL: mention --with-project
3369 2007-06-19 18:24 millert
3371 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3372 support. From Michael Brantley.
3374 2007-06-19 17:27 millert
3376 * sudoers.pod: fix typo
3378 2007-06-19 17:22 millert
3382 2007-06-19 17:21 millert
3384 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3386 2007-06-19 17:00 millert
3388 * memrchr.c: Remove dependecy on NULL
3390 2007-06-19 15:37 millert
3394 2007-06-19 15:37 millert
3396 * aclocal.m4, configure.in: Can't use the regular autoconf
3397 fnmatch() check since we need FNM_CASEFOLD so go back to our
3400 2007-06-19 12:52 millert
3402 * env.c: Fix preserving of variables in env_keep.
3404 2007-06-19 07:10 millert
3406 * env.c: add XAUTHORIZATION
3408 2007-06-18 20:41 millert
3410 * UPGRADE: expand upon env resetting and mention that it began in
3413 2007-06-18 20:33 millert
3415 * sudoers.pod: Update descriptions of env_keep and env_check to
3416 match current reality.
3418 2007-06-18 17:33 millert
3420 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3421 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3422 intial_keepenv_table.
3424 2007-06-18 17:23 millert
3426 * env.c, logging.c: Treat USERNAME environemnt variable like
3429 2007-06-18 17:21 millert
3431 * env.c: Don't need to populate keepenv table with the contents of
3434 2007-06-18 08:57 millert
3436 * sudo.c: Don't force sudo into the C locale.
3438 2007-06-18 08:56 millert
3440 * env.c: Make env_check apply when env_reset it true. Environment
3441 variables are passed through unless they contain '/' or '%'.
3442 There is no need to have a variable in both env_check and
3445 2007-06-16 07:31 millert
3447 * visudo.c: Remove an duplicate lock_file() call and add a comment.
3449 2007-06-15 21:16 millert
3451 * UPGRADE: Add sudo 1.6.9 upgrade note.
3453 2007-06-14 12:23 millert
3455 * interfaces.c: Solaris will return EINVAL if the buffer used in
3456 SIOCGIFCONF is too small. From Klaus Wagner.
3458 2007-06-14 12:03 millert
3460 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3461 logging.c, sudo.h: Redo the long syslog line splitting based on a
3462 patch from Eygene Ryabinkin. Include memrchr() for systems
3465 2007-06-14 07:09 millert
3467 * configure.in: Since we need to be able to convert timespec to
3468 timeval for utimes() the last 3 digits in the tv_nsec are not
3469 significant. This makes the sudoedit file date comparison work
3472 2007-06-13 13:41 millert
3474 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3475 deal with adding things to AUTH_OBJS. This deals with exclusive
3476 authentication methods in a simple way.
3478 2007-06-12 13:08 millert
3480 * LICENSE: mkstemp.c is BSD code too.
3482 2007-06-12 09:21 millert
3484 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3486 2007-06-11 18:27 millert
3488 * sudo.c: cleanenv() is no more.
3490 2007-06-10 18:37 millert
3492 * ChangeLog: Display branch info in Changelog
3494 2007-06-10 18:18 millert
3496 * utimes.c: Include config.h early so we have it for
3499 2007-06-10 18:00 millert
3501 * ChangeLog: Fix Changelog generation and update.
3503 2007-06-09 07:26 millert
3505 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3507 Move old-style fd closing into closefrom_fallback() and call that
3508 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3510 2007-06-09 07:24 millert
3512 * config.h.in, configure.in, auth/kerb5.c: o use
3513 krb5_verify_user() if available instead of doing it by hand
3514 o use krb5_init_secure_context() if we have it
3515 o pass an encryption type of 0 to krb5_kt_read_service_key()
3517 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3519 2007-06-09 07:20 millert
3521 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3524 2007-06-09 07:17 millert
3526 * configure.in: Fix closefrom() substitution in the Makefile
3528 2007-06-09 07:15 millert
3530 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3532 2007-06-07 07:52 millert
3534 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3536 2007-06-07 07:22 millert
3538 * auth/kerb5.c: If we cannot get a valid service key using the
3539 default keytab it is a fatal error. Fixes a bug where sudo could
3540 be tricked into allowing access when it should not by a fake KDC.
3541 From Thor Lancelot Simon.
3543 2007-05-12 08:56 millert
3545 * aclocal.m4, configure, configure.in: Update long long checks to
3546 use AC_CHECK_TYPES and to cache values.
3548 2007-05-12 08:07 millert
3550 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3551 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3552 that assumes replacing with GNU fnmatch.
3554 2007-05-11 17:05 millert
3556 * configure, configure.in: Add closefrom() to LIB_OBJS not
3557 SUDO_OBJS if it is missing since we need it for visudo now too.
3559 2007-04-24 14:44 millert
3561 * sudoers.pod: Attempt to clarify the bit talking about network
3562 numbers w/o netmasks.
3564 2007-04-24 14:25 millert
3566 * sudo.pod: Clarify timestamp dir ownership sentence.
3568 2007-04-20 12:40 millert
3570 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3571 __LIBPAM_VERSION. From Dmitry V. Levin.
3573 2007-04-16 12:13 millert
3575 * sudo.c: -i is also one of the mutually exclusive options to list
3576 it in the warning message. Noted by Chris Pepper.
3578 2007-04-12 11:18 millert
3580 * visudo.pod: The sudoers variable is env_editor, not enveditor.
3581 From Jean-Francois Saucier.
3583 2007-03-29 13:30 millert
3585 * redblack.c: I tracked down the original author so credit him and
3586 include his license info.
3588 2007-02-06 13:25 millert
3590 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3591 sudoers.pod: Fix typos; from Jason McIntyre.
3593 2007-02-06 13:23 millert
3595 * logging.c: Restore signal mask before calling reapchild(). Fixes
3596 a possible race condition that could prevent sudo from properly
3597 waiting for the child.
3599 2007-01-31 10:02 millert
3601 * pwutil.c: Don't declare pw_free() if we are not going to use it.
3603 2007-01-31 10:00 millert
3605 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3606 and LDR_PRELOAD64. The 64-bit version is not currently
3607 supported. Remove zero_env() prototype as it no longer exists.
3609 2006-12-11 13:21 millert
3611 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3614 2006-09-29 10:53 millert
3616 * auth/pam.c: If the user enters ^C at the password prompt, abort
3617 instead of trying to authenticate with an empty password (which
3618 causes an annoying delay).
3620 2006-08-17 11:26 millert
3622 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3623 F_CLOSEM support to closefrom(); adapted from a diff by Darren
3626 2006-08-17 11:25 millert
3628 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3631 2006-08-04 11:34 millert
3633 * config.sub, config.guess: Update to latest versions from
3634 cvs.savannah.gnu.org
3636 2006-07-31 13:51 millert
3638 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3639 sudo_end{pw,grp}ent() so we can close the passwd/group files
3642 2006-07-31 13:50 millert
3644 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3645 flavor of set_perms() for systems without setreuid() or
3646 setresuid() that have a working seteuid(). Tested on Darwin.
3648 2006-07-30 15:56 millert
3650 * mon_systrace.c: systrace_read() returns ssize_t
3652 2006-07-30 15:53 millert
3654 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3657 2006-07-28 13:12 millert
3659 * HISTORY: Fix typo; Matt Ackeret
3661 2006-07-17 08:25 millert
3663 * sudo.c: Print sudoers path in -V mode for root.
3665 2006-06-15 14:44 millert
3667 * ldap.c: Do a sub tree search instead of a base search (one level
3668 in the tree only) for sudo right objects. This allows system
3669 administrators to categorize the rights in a tree to make them
3672 2005-12-28 13:52 millert
3674 * sudo.pod: fix typo
3676 2005-12-04 12:16 millert
3678 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3679 timelimit and bind_timelimit support; adapted from gentoo.
3681 2005-11-23 18:57 millert
3683 * ldap.c: Support comments that start in the middle of a line
3685 2005-11-23 18:56 millert
3687 * configure.in, configure: Define LDAP_DEPRECATED until we start
3688 using ldap_get_values_len()
3690 2005-11-18 09:55 millert
3692 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3694 2005-11-17 20:39 millert
3696 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3697 takes an int as an arg so it can be used as a signal handler too.
3699 2005-11-17 20:38 millert
3701 * sudo.c: Make a copy of the shell field in the passwd struct for
3702 NewArgv to avoid a use after free situation after sudo_endpwent()
3705 2005-11-16 20:36 millert
3707 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3708 mkstemp() for those poor souls without it.
3710 2005-11-15 09:25 millert
3712 * env.c: Add PERL5DB to list of environment variables to remove.
3714 2005-11-13 15:49 millert
3716 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3717 function twice with a state cookie use separate check/log
3720 Check more ioctl() calls for failure.
3722 systrace_{read,write} now return the number of bytes read/written
3725 2005-11-13 14:51 millert
3727 * env.c: Add more environment variables to remove; from gentoo
3728 linux Add some comments about what bad env variables go to what
3731 2005-11-11 17:23 millert
3733 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3734 the exec since they free up our cached copy of the passwd
3735 structs, including sudo_user and sudo_runas. Fixes a
3738 2005-11-11 17:19 millert
3740 * visudo.c: Close all fd's before executing editor.
3742 2005-11-11 17:17 millert
3744 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3747 2005-11-11 11:22 millert
3749 * check.c: Fix fd leak when lecture file option is enabled. From
3752 2005-11-07 11:02 millert
3754 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3755 environment variables to remove. From Charles Morris
3757 2005-11-01 13:24 millert
3759 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3761 2005-10-27 20:35 millert
3763 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3765 2005-08-14 20:32 millert
3767 * sudoers.pod: Fix typo; Toby Peterson
3769 2005-08-02 09:57 millert
3771 * tsgetgrpw.c: Make return buffers static so they don't get
3774 2005-07-27 21:14 millert
3776 * auth/securid5.c: Fix securid5 authentication, was not checking
3777 for ACM_OK. Also add default cases for the two switch()es.
3778 Problem noted by ccon at worldbank
3780 2005-06-26 20:10 millert
3782 * ldap.c: Remove ncat() in favor of just counting bytes and
3783 pre-allocating what is needed.
3785 2005-06-26 19:44 millert
3787 * ldap.c: Fix up some comments Add missing fclose() for the
3790 2005-06-26 19:38 millert
3792 * ldap.c: align struct ldap_config
3794 2005-06-26 19:37 millert
3796 * ldap.c: use LINE_MAX for max conf file line size
3798 2005-06-26 18:36 millert
3800 * pathnames.h.in: add _PATH_LDAP_SECRET
3802 2005-06-26 18:36 millert
3804 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3806 2005-06-25 18:03 millert
3808 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3811 2005-06-25 17:46 millert
3813 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3814 variable by default.
3816 2005-06-25 16:39 millert
3818 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3819 is safe for LD_PRELOAD
3821 2005-06-25 16:15 millert
3823 * acsite.m4, configure: set need_version=no for all cases; this is
3826 2005-06-25 14:45 millert
3830 2005-06-25 14:33 millert
3832 * configure, configure.in: Add dragonfly
3834 2005-06-25 14:29 millert
3836 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3838 2005-06-25 14:21 millert
3842 2005-06-25 14:20 millert
3844 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3845 ltoptions.m4 ltsugar.m4 ltversion.m4
3847 2005-06-25 14:08 millert
3849 * config.guess, config.sub, ltmain.sh: merge in local changes:
3850 config.guess: o better openbsd support config.sub: o hiuxmpp
3851 support ltmain.sh o remove requirement that libs must begin with
3852 "lib" o don't print a bunch of crap about library installs o
3855 2005-06-25 14:05 millert
3857 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3859 2005-06-25 14:04 millert
3861 * configure.in: Update with autoupdate and make minor changes for
3864 2005-06-22 23:19 millert
3866 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3868 2005-06-22 23:04 millert
3870 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3871 emul/timespec.h: Move declatation of struct timespec to its own
3872 include files for systems without it since it needs time_t
3875 2005-06-22 22:57 millert
3877 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3879 2005-05-27 01:59 millert
3881 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3882 give pam_limits a chance to run. Idea from Karel Zak.
3884 2005-04-24 19:24 millert
3886 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3887 to silence warnings on Solaris
3889 2005-04-24 19:22 millert
3891 * parse.c: include grp.h to silence a warning on Solaris
3893 2005-04-23 15:10 millert
3895 * parse.c: Fix printing of += and -= defaults.
3897 2005-04-17 01:21 millert
3899 * mon_systrace.c: Sanity check number of syscall args with argsize.
3900 Not really needed but a little paranoia never hurts.
3902 2005-04-17 01:18 millert
3904 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3905 void * Use int, not size_t/ssize_t for systrace lengths (since it
3908 2005-04-16 03:14 millert
3910 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3911 collsion w/ error Check rval of decode_args() and update_env()
3912 Remove improper setting of validated variable
3914 2005-04-11 21:37 millert
3916 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3917 file if def_ignore_sudoers is not set and call LDAP versions from
3918 display_privs() and display_cmnd() instead of directly from
3919 main(). Because of this we need to defer closing the ldap
3920 connection until after -l processing has ocurred and we must pass
3921 in the ldap pointer to display_privs() and display_cmnd().
3923 2005-04-11 21:33 millert
3925 * ldap.c: Reorganize LDAP code to better match normal sudoers
3926 parsing. Instead of storing strings for later printing in -l
3927 mode we do another query since the authenticating user and the
3928 user being listed may not be the same (the new -U flag). Also
3929 add support for "sudo -l command".
3931 There is still a fair bit if duplicated code that can probably be
3934 2005-04-11 00:37 millert
3936 * ldap.c: Replace pass variable with do_netgr for better
3939 2005-04-10 23:49 millert
3941 * ldap.c: use DPRINTF macro
3943 2005-04-10 23:18 millert
3945 * ldap.c: estrdup, not strdup
3947 2005-04-10 17:44 millert
3949 * parse.c: Add macro to test if the tag changed to improve
3952 2005-04-10 17:40 millert
3954 * parse.c: Avoid printing defaults header if there are no defaults
3957 2005-04-10 15:29 millert
3959 * glob.c: Fix a warning on systems without strlcpy().
3961 2005-04-10 13:32 millert
3963 * pwutil.c: Use macros where possible for sudo_grdup() like
3966 2005-04-08 17:04 millert
3968 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3969 add in tv_usec / 1000000.
3971 2005-03-29 23:38 millert
3973 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3974 should be 1, not 0 for Heimdal. From Alex Plotnick.
3976 2005-03-29 09:29 millert
3978 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3979 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3980 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3981 Add efree() for consistency with emalloc() et al. Allows us to
3982 rely on C89 behavior (free(NULL) is valid) even on K&R.
3984 2005-03-28 22:33 millert
3986 * parse.c, sudo.c: Move initgroups() for -U option into
3987 display_privs() so group matching in sudoers works correctly.
3989 2005-03-26 21:34 millert
3991 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3992 with sudo_ldap_close.
3994 2005-03-26 20:01 millert
3996 * parse.c: Add missing space in Defaults printing
3998 2005-03-25 12:36 millert
4000 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
4001 size computaton and string copies.
4003 2005-03-18 22:08 millert
4005 * pwutil.c: Zero old pw_passwd before replacing with version from
4008 2005-03-18 22:07 millert
4010 * configure, configure.in: Only attempt shadow password detection
4011 if PAM is not being used Add shadow_* variables to make shadow
4012 password detection more generic.
4014 2005-03-18 21:46 millert
4016 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
4019 2005-03-12 19:27 millert
4021 * sudoers.pod: use a non-breaking space to avoid a double space
4024 2005-03-12 19:26 millert
4026 * sudo.pod: commna, not colon after e.g.
4028 2005-03-12 18:43 millert
4030 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
4031 at least uses __execve() internally.
4033 2005-03-12 12:29 millert
4035 * indent.pro: Match reality a bit more.
4037 2005-03-12 12:27 millert
4039 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
4041 2005-03-11 23:42 millert
4043 * pwutil.c: Store shadow password after making a local copy of
4044 struct passwd in case normal and shadow routines use the same
4045 internal buffer in libc.
4047 2005-03-10 20:57 millert
4049 * alloc.c, logging.c: Make varargs usage consistent with the rest
4052 2005-03-10 10:09 millert
4054 * sudo_noexec.c: Wrap more of the exec family since on Linux the
4055 others do not appear to go through the normal execve() path.
4057 2005-03-10 09:57 millert
4059 * visudo.c: make print_unused static like proto says
4061 2005-03-10 09:55 millert
4063 * glob.c: silence a warning on K&R systems
4065 2005-03-10 09:51 millert
4067 * parse.c, alias.c, error.c: make this build in K&R land
4069 2005-03-07 22:21 millert
4073 2005-03-05 22:46 millert
4075 * ldap.c: return(foo) not return foo optimize _atobool() slightly
4077 2005-03-05 22:40 millert
4079 * ldap.c: Use TRUE/FALSE
4081 2005-03-05 22:31 millert
4083 * ldap.c: Reformat to match the rest of sudo's code.
4085 2005-03-05 19:33 millert
4087 * sudo.pod: I am the primary author
4089 2005-02-22 22:28 millert
4091 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
4092 confused too many people and really isn't needed in a
4093 configure-oriented world.
4095 2005-02-22 22:28 millert
4097 * INSTALL: alternate -> alternative
4099 2005-02-22 22:26 millert
4101 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
4102 have issues with TCSAFLUSH.
4104 2005-02-22 22:16 millert
4106 * toke.l: Allow leading blanks before Defaults and Foo_Alias
4109 2005-02-22 22:14 millert
4111 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4113 2005-02-20 13:00 millert
4115 * sudoers.pod: env_keep overrides set_logname
4117 2005-02-20 12:57 millert
4119 * env.c: Fix disabling set_logname and make env_keep override
4122 2005-02-20 12:28 millert
4124 * compat.h, config.h.in, configure, configure.in: No longer need
4127 2005-02-20 11:48 millert
4129 * env.c, sudo.c: Just clean the environment once. This assumes
4130 that any further setenv/putenv will be able to handle the fact
4131 that we replaced environ with our own malloc'd copy but all the
4132 implementations I've checked do.
4134 2005-02-15 23:16 millert
4136 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4137 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4140 2005-02-13 00:33 millert
4142 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4143 and prev_user into init_vars() since user_shell at least is
4146 2005-02-12 18:51 millert
4148 * Makefile.in: fix devel builds
4150 2005-02-12 18:46 millert
4152 * check.c, sudo.c: Fix some printf format mismatches on error.
4154 2005-02-12 18:33 millert
4156 * configure, gram.c, toke.c: regen
4158 2005-02-12 17:56 millert
4160 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4161 alloc.c, check.c, closefrom.c, compat.h, configure.in,
4162 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4163 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4164 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4165 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4166 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4167 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4168 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4169 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4170 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4171 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4172 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4173 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4174 emul/utime.h: Update copyright years.
4176 2005-02-12 16:46 millert
4178 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4181 2005-02-12 16:16 millert
4183 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4186 2005-02-11 18:06 millert
4188 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4189 to warn about printf-like format mismatches
4191 2005-02-10 00:16 millert
4193 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4194 generated from cvs logs
4196 2005-02-10 00:03 millert
4198 * set_perms.c: Use warning/error instead of perror/fatal.
4200 2005-02-09 23:13 millert
4202 * config.guess: Update OpenBSD section
4204 2005-02-09 23:10 millert
4206 * UPGRADE: Add upgrading noted for 1.7
4208 2005-02-09 23:00 millert
4210 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4211 environment, just prune out entries based on the env_delete and
4212 env_check lists. Base building up the new environment on the
4213 current environment and the variables we removed initially.
4215 2005-02-09 22:23 millert
4217 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4218 if locales are supported, just to be safe.
4220 2005-02-09 22:19 millert
4222 * toke.c, toke.l: Cast argument to ctype functions to unsigned
4225 2005-02-07 22:56 millert
4227 * env.c: correct value for DID_USER
4229 2005-02-07 22:55 millert
4231 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4232 <compat.h> not "compat.h"
4234 2005-02-07 22:51 millert
4236 * defaults.c: Reset the environment by default.
4238 2005-02-07 22:50 millert
4240 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4241 malloc an new vector if execve() fails.
4243 2005-02-06 23:16 millert
4245 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4246 execve(2) and wrap the command in sh if we get ENOEXEC.
4248 2005-02-05 23:01 millert
4250 * sudo_noexec.c: Only include time.h on systems that lack struct
4251 timespec which gets defind in compat.h (using time_t).
4253 2005-02-05 22:59 millert
4255 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4256 w/o struct timespec.
4258 2005-02-05 22:56 millert
4260 * configure, compat.h, config.h.in, configure.in: use bcopy on
4263 2005-02-05 22:31 millert
4265 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4266 so limit its use to gcc >= 2.8.
4268 2005-02-05 21:21 millert
4270 * Makefile.in: Add explicit rule to build sudo_noexec.lo
4272 2005-02-05 17:56 millert
4274 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4275 pointed out a bunch of missed dependencies.
4277 2005-02-05 13:18 millert
4279 * TROUBLESHOOTING: Help for PAM when account section is missing
4281 2005-02-05 13:01 millert
4283 * auth/pam.c: Give user a clue when there is a missing "account"
4284 section in the PAM config.
4286 2005-02-05 10:22 millert
4288 * auth/pam.c: Better error handling.
4290 2005-02-05 09:57 millert
4292 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4293 CPPFLAGS so it takes effect as early as possible. Silences a
4294 warning about isblank() on linux.
4296 2005-02-04 21:49 millert
4298 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4299 number of args to be passed to log_error().
4301 2005-01-31 23:03 millert
4303 * pwutil.c: Don't try to destroy a tree we didn't create.
4305 2005-01-27 10:42 millert
4307 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4308 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4309 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4310 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4311 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4312 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4313 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4314 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4315 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4316 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4317 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4318 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4321 2005-01-21 10:34 millert
4323 * configure, configure.in: Fix error message when mixing invalid
4326 2005-01-21 10:32 millert
4328 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4329 default if the OS supports them.
4331 2005-01-21 10:29 millert
4333 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4335 2005-01-21 10:29 millert
4337 * configure.in: Better checking for conflicting authentication
4338 methods Display the authentication methods used at the end of
4339 configure Rename --with-authenticate -> --with-aixauth Use
4340 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4341 default on systems that support them unless disabled. Add
4342 OSMAJOR variable that replaces old OSREV; now OSREV has full
4345 2005-01-17 19:40 millert
4347 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4349 2005-01-14 13:35 millert
4351 * configure.in: Replace: test -n "$FOO" || FOO="bar"
4353 With: : ${FOO='bar'}
4355 2005-01-09 18:58 millert
4357 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4358 only call private passwd/group routines when using a nonstandard
4361 2005-01-06 10:34 millert
4365 2005-01-05 22:16 millert
4367 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4368 fields so add getpwent()/getgrent() functions and call those.
4370 2005-01-05 17:29 millert
4372 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4374 2005-01-05 17:18 millert
4376 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4377 in the clean target Add devdir variable and use it to specify the
4378 path to parser sources
4380 2005-01-05 17:17 millert
4384 2005-01-05 17:17 millert
4386 * configure.in: Add a devdir variables that defaults to $(srcdir)
4387 and is set to . if --devel was specified. Allows for proper
4388 dependecies building the parser.
4390 2005-01-05 14:50 millert
4392 * testsudoers.c: Add support for custom passwd/group files.
4394 2005-01-05 14:47 millert
4396 * Makefile.in: Build private copy of pwutil.o for testsudoers with
4397 MYPW defined so it uses our own passwd/group routines.
4399 2005-01-05 14:46 millert
4401 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4402 sudo_setspent/sudo_endspent stubs instead. We can now just use
4403 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4404 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4406 2005-01-05 14:44 millert
4408 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4409 Use global buffers for passwd/group structs Rename functions from
4412 2005-01-05 14:43 millert
4414 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4416 2005-01-05 14:42 millert
4418 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4421 2005-01-05 14:41 millert
4423 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4424 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4425 are no longer needed. Also add preprocessor magic to use private
4426 versions of the passwd and group routines if MYPW is defined (for
4427 use by testsudoers).
4429 2005-01-04 22:40 millert
4431 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4432 if there are fields we don't handle they end up as 0.
4434 2005-01-04 20:10 millert
4436 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4439 2005-01-04 20:09 millert
4441 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4442 variables for better readability.
4444 2005-01-04 20:08 millert
4446 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4447 that support alternate passwd and group files.
4449 2005-01-04 20:07 millert
4451 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4452 its own file. This allows visudo and testsudoers to use the
4455 2005-01-01 19:31 millert
4457 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4458 based on the terminal width.
4460 2005-01-01 12:41 millert
4462 * match.c, visudo.c, testsudoers.c: Only check group vector in
4463 usergr_matches() if we are matching the invoking or list user.
4464 Always check the group members, even if there was a group vector.
4466 2004-12-17 17:24 millert
4468 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4470 2004-12-17 13:12 millert
4472 * CHANGES, TODO: checkpoint
4474 2004-12-16 14:20 millert
4476 * sudo.c: sort usage
4478 2004-12-16 14:20 millert
4480 * sudo.pod: Sort command line options
4482 2004-12-16 13:33 millert
4484 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4485 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4486 start closing at a point other than 3. Add closefrom_override
4487 sudoers option and -C sudo flag to allow the user to specify a
4488 different closefrom starting point.
4490 2004-12-16 13:25 millert
4492 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4494 2004-12-15 22:55 millert
4496 * LICENSE: no more UCB strcasecmp
4498 2004-12-15 22:54 millert
4500 * strcasecmp.c: replace BSD licensed one with version derived from
4503 2004-12-09 21:07 millert
4505 * sudo.c: Fix last commit.
4507 2004-12-09 19:26 millert
4509 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4510 to /dev/null if not.
4512 2004-12-03 13:57 millert
4514 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4516 2004-12-03 13:52 millert
4518 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4519 Use TIME_WITH_SYS_TIME
4521 2004-12-03 13:48 millert
4523 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4525 2004-12-02 11:18 millert
4527 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4528 being set unconditionally on darwin. From Toby Peterson.
4530 2004-12-02 10:40 millert
4532 * getspwuid.c: Check rbinsert() return value. In the case of faked
4533 up entries there is usually a negative response cached that we
4536 In pwfree() don't try to zero out a NULL pw_passwd pointer.
4538 2004-12-02 09:53 millert
4540 * mon_systrace.c: Use the double fork trick to avoid the monitor
4541 process being waited for by the main program run through sudo.
4543 2004-11-29 12:52 millert
4545 * sudo.c: Call initgroups() in -U mode so group matches work
4548 2004-11-29 12:34 millert
4550 * def_data.h, mkdefaults: Don't print a trailing comma for the last
4551 entry in enum def_tupple
4553 2004-11-28 16:08 millert
4555 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4556 lecture, listpw and verifypw are used in boolean context.
4558 2004-11-28 16:05 millert
4560 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4561 context should be "all", not "any".
4563 2004-11-26 14:21 millert
4565 * def_data.in, defaults.c: Allow tuples that can be used as
4566 booleans to be used as boolean TRUE. In this case the 2nd
4567 possible value of the tuple is used for TRUE.
4569 2004-11-25 12:23 millert
4571 * configure, configure.in: Correct the test for 2-parameter
4574 2004-11-25 12:20 millert
4576 * sudo.h: Add strub struct definitions for passwd, timeval and
4579 2004-11-25 12:09 millert
4581 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4582 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4583 fix a typo in the gettimeofday check.
4585 2004-11-24 16:44 millert
4587 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4588 for visudo and testsudoers.
4590 2004-11-24 16:31 millert
4592 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4593 option to use in conjunction with -l instead of -u. Add support
4594 for "sudo -l command" to test a specific command.
4596 2004-11-24 16:28 millert
4598 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4599 it has not been set. Previously it was set by sudo "ALL" in the
4600 parser but at that point the fully-qualified pathname has not yet
4603 2004-11-23 18:18 millert
4605 * parse.c, testsudoers.c: Correctly handle multiple privileges per
4606 userspec and runas inheritence.
4608 2004-11-21 14:09 millert
4610 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4613 2004-11-19 18:04 millert
4615 * toke.c, toke.l: make per-command defaults work with sudoedit
4617 2004-11-19 18:00 millert
4619 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4620 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4621 approriate defaults variable.
4623 2004-11-19 17:09 millert
4625 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4626 Document per-command Defaults.
4628 2004-11-19 16:35 millert
4630 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4631 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4632 command-specific Defaults entries. E.g.
4633 Defaults!/usr/bin/vi noexec
4635 2004-11-19 15:03 millert
4637 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4638 occurence of user_matches() -> runas_matches() missed previously
4639 runas_matches(), host_matches() and cmnd_matches() only really
4640 need to pass in a list of members. user_matches() still needs to
4641 pass in a passwd struct because of "sudo -l"
4643 2004-11-19 14:46 millert
4645 * parse.c: Check def_authenticate, def_noexec and def_monitor when
4646 setting return flags. XXX May be better to just set the defaults
4647 directly and get rid of those flags.
4649 2004-11-19 13:39 millert
4651 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4652 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4653 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4654 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4655 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4656 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4657 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4658 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4659 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4660 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4661 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4662 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4663 <config.h> Not: #include "config.h" That way we get the correct
4664 config.h when build dir != src dir
4666 2004-11-19 13:30 millert
4668 * Makefile.in: Back out part of rev 1.263; fix -I order
4670 2004-11-19 13:12 millert
4672 * toke.c, toke.l: More robust parsing if #include; could be much
4675 2004-11-19 12:55 millert
4677 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4680 2004-11-19 12:35 millert
4682 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4683 routines out into their own file.
4685 2004-11-19 12:32 millert
4687 * error.h: __attribute__ is already defined in compat.h
4689 2004-11-19 12:30 millert
4691 * visudo.c: quit() should not be __noreturn__ as it is non-void on
4694 2004-11-19 12:24 millert
4696 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4697 error/warning functions like err/warn but that call an additional
4698 cleanup routine in the error case. This means we no longer need
4699 to compile a special version of alloc.o for visudo.
4701 2004-11-19 11:54 millert
4703 * parse.h: Clarify comments about the data structures
4705 2004-11-18 15:28 millert
4707 * visudo.c: Add support for VISUAL and EDITOR containing command
4708 line args. If env_editor is not set any args in VISUAL and
4709 EDITOR are ignored. Arguments are also now supported in
4712 2004-11-17 14:25 millert
4714 * parse.h: alias_matches() is no more
4716 2004-11-17 14:09 millert
4718 * CHANGES, TODO: sync
4720 2004-11-17 13:19 millert
4722 * Makefile.in: When regenerating the parser, don't replace gram.h
4723 unless it has changed.
4725 2004-11-17 11:56 millert
4727 * Makefile.in: remove Makefile.binary for distclean
4729 2004-11-17 11:18 millert
4731 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4732 to make sure we can't overflow new_env.
4734 2004-11-17 10:33 millert
4736 * sudo_edit.c: paranoia when stripping trailing slashes from
4739 2004-11-16 19:00 millert
4741 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4743 2004-11-16 18:59 millert
4745 * configure, configure.in, config.h.in, sudo.c: Add configure check
4748 2004-11-16 18:55 millert
4750 * ldap.c: Use supplementary group vector in struct sudo_user.
4752 2004-11-16 18:40 millert
4754 * match.c: Only do string comparisons on the group members if there
4755 is no supplemental group list.
4757 2004-11-16 16:10 millert
4759 * CHANGES, TODO: sync
4761 2004-11-16 15:54 millert
4763 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4764 trailing slash so chop off any trailing slashes we see and add an
4767 2004-11-16 12:02 millert
4769 * match.c: remove bogus XXX comment
4771 2004-11-16 11:10 millert
4773 * match.c: Get rid of alias_matches and correctly fall through to
4774 the non-alias cases when there is no alias with the specified
4777 2004-11-16 10:47 millert
4779 * getspwuid.c: Cache non-existent passwd/group entries too.
4781 2004-11-16 10:45 millert
4785 2004-11-15 23:32 millert
4787 * getspwuid.c: fix typo
4789 2004-11-15 23:24 millert
4791 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4792 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4793 Implement group caching and use the passwd and group caches
4796 2004-11-15 14:43 millert
4798 * match.c: Properly negate the return value of alias_matches() when
4801 2004-11-15 14:38 millert
4803 * match.c: Make hostname_matches() return TRUE for a match, else
4804 FALSE like the caller expects.
4806 2004-11-15 13:24 millert
4808 * Makefile.in: Add missing dependencies on gram.h
4810 2004-11-15 13:06 millert
4812 * match.c: Use runas_matches in alias_matches() now that we have
4815 2004-11-15 13:00 millert
4817 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4819 2004-11-15 12:33 millert
4821 * gram.y, match.c: Use ALIAS for the member type when storing an
4822 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4823 match.c relies on the more generic type. Expand runas_matches
4824 instead of calling user_matches() inside of it since
4825 user_matches() looks up USERALIASes, not RUNASALIASes.
4827 2004-11-15 12:05 millert
4829 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4832 2004-11-15 10:53 millert
4834 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4835 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4836 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4837 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4838 local error/warning functions like err/warn but that call an
4839 additional cleanup routine in the error case. This means we no
4840 longer need to compile a special version of alloc.o for visudo.
4842 2004-11-15 09:59 millert
4844 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4845 since the latter checks for "#uid".
4847 2004-11-15 09:53 millert
4849 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4850 db entries in 2 reb-black trees; one indexed by uid, the other by
4851 user name. The data returned from the cache should be considered
4852 read-only and is destroyed by sudo_endpwent().
4854 2004-11-15 09:50 millert
4856 * match.c: add cast to uid_t
4858 2004-11-15 09:49 millert
4860 * gram.y: missing free in alias_destroy
4862 2004-11-15 09:49 millert
4864 * redblack.c: Can't use rbapply() for rbdestroy since the
4865 destructor is passed a data pointer, not a node pointer.
4867 2004-11-14 23:06 millert
4869 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4870 versions of setpwent() and endpwent() that set/end the shadow
4873 2004-11-14 22:55 millert
4875 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4876 visudo.c: Store aliases in a red-black tree.
4878 2004-11-14 22:52 millert
4880 * Makefile.in, redblack.c, redblack.h: red-black tree
4883 2004-11-14 22:37 millert
4885 * visudo.c: Edit all sudoers file if there were unused or undefined
4886 aliases and we are in strict mode.
4888 2004-11-12 11:19 millert
4890 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4891 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4892 Bring back the "secure_path" Defaults option now that Defaults
4893 take effect before the path is searched.
4895 2004-11-11 12:22 millert
4897 * logging.c, parse.c: A user can always list their own entries,
4898 even with -u. Better error message when failing to list another
4901 2004-11-11 12:12 millert
4903 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4904 entries is now "-u otheruser -l". Only root or users with sudo
4905 "ALL" may list other user's entries.
4907 2004-11-11 11:30 millert
4909 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4912 2004-11-11 11:25 millert
4914 * env.c: strip CDPATH too
4916 2004-11-11 11:20 millert
4918 * env.c: strip exported bash functions from the environment.
4920 2004-10-27 12:16 millert
4922 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4923 variables for real commands and sudoedit. This avoids a
4924 confusing message when a user tries "sudo -l" or "sudo -v" and is
4927 2004-10-27 12:06 millert
4929 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4932 2004-10-26 18:39 millert
4934 * logging.c: Convert some bitwise AND to ISSET
4936 2004-10-26 18:29 millert
4938 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4940 2004-10-26 18:29 millert
4942 * CHANGES, TODO: sync
4944 2004-10-26 18:28 millert
4946 * BUGS: new parser fixes most of the outstanding bugs
4948 2004-10-26 18:27 millert
4952 2004-10-26 18:26 millert
4954 * visudo.c: Rework for the new parser. Now checks for unused
4957 2004-10-26 18:25 millert
4959 * testsudoers.c: Rewrite for the new parser. Now supports a -d
4960 flag (dump) and adds a -h flag (host). It now defaults to the
4961 local hostname unless otherwise specified.
4963 2004-10-26 18:23 millert
4965 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4968 2004-10-26 18:22 millert
4970 * sudo.c: Update for new parse. We now call find_path() *after* we
4971 have updated the global defaults based on sudoers. Also adds
4972 support for listing other user's privs if you are root.
4974 2004-10-26 18:21 millert
4976 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4979 2004-10-26 18:20 millert
4981 * logging.c, logging.h: Add NO_STDERR flag.
4983 2004-10-26 18:19 millert
4985 * ldap.c: Split sudo_ldap_check() into three pieces:
4986 sudo_ldap_open(), udo_ldap_update_defaults() and
4987 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4988 default options, find the command in the user's path, and then
4989 check whether the user is allowed to run it. The important thing
4990 here is that the default runas user may be specified as a default
4991 option and that needs to be set before we search for the command.
4993 2004-10-26 18:17 millert
4995 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4998 2004-10-26 18:16 millert
5000 * defaults.h: Add prototype for update_defaults()
5002 2004-10-26 18:16 millert
5004 * defaults.c: Don't warn about line numbers now that we operate on
5005 a set of data structures (or LDAP) and not a file.
5007 2004-10-26 18:15 millert
5009 * config.h.in: No long use lsearch()
5011 2004-10-26 18:14 millert
5013 * Makefile.in: Update for new and changed file names.
5015 2004-10-26 18:14 millert
5017 * LICENSE: no more BSD lsearch.c
5019 2004-10-26 18:14 millert
5021 * match.c: foo_matches() routines now live in match.c Added
5022 user_matches(), runas_matches(), host_matches(), cmnd_matches()
5023 and alias_matches() that operate on the parsed sudoers file.
5025 2004-10-26 18:12 millert
5027 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
5028 -> switch_buffer() WORD no longer needs to exclude '@' kill
5031 2004-10-26 18:10 millert
5033 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
5034 Rewritten parser that converts sudoers into a set of data
5035 structures. This eliminates ordering issues and makes it
5036 possible to apply sudoers Defaults entries before searching for
5039 2004-10-26 18:09 millert
5041 * configure.in, lsearch.c, emul/search.h: We won't be using
5042 lsearch() any longer.
5044 2004-10-26 18:07 millert
5046 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
5049 2004-10-26 16:09 millert
5051 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5052 visudo.man.in: regen
5054 2004-10-26 16:09 millert
5056 * visudo.pod: Update warnings to match new visudo
5058 2004-10-26 16:08 millert
5060 * sudoers.pod: The new parser doesn't have the old ordering
5063 2004-10-26 16:08 millert
5065 * sudo.pod: Document that -l now takes an optional username
5068 2004-10-25 13:44 millert
5070 * RUNSON: AIX 5.2.0.0 works
5072 2004-10-25 13:38 millert
5074 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
5075 instead. Fixes a compilation problem with Solaris 9's native
5078 Set FLAG_MONITOR when needed.
5080 2004-10-23 13:32 millert
5082 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
5083 match the traced process. Fixes relative paths.
5085 2004-10-21 12:31 millert
5087 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
5089 2004-10-13 12:52 millert
5091 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
5092 requires set_reuid() or setresuid()
5094 2004-10-13 12:46 millert
5096 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
5097 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
5098 saved uids; they aren't worth bothering with.
5100 2004-10-07 16:23 millert
5102 * glob.c: remove call to issetugid()
5104 2004-10-07 14:57 millert
5106 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5107 wildcards. Now that we use glob() the bug is fixed.
5109 2004-10-07 14:52 millert
5111 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5112 and stat each result that matches the basename of the user's
5113 command. This makes "cd /usr/bin ; sudo ./blah" work when
5114 sudoers allows /usr/bin/blah. Fixes bug #143.
5116 2004-10-07 14:27 millert
5118 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5119 for extended glob (GLOB_TILDE and GLOB_BRACE)
5121 2004-10-07 12:59 millert
5123 * config.h.in, configure, configure.in: Check for a glob() that
5124 supports GLOB_BRACE and GLOB_TILDE
5126 2004-10-07 12:51 millert
5128 * LICENSE: reference glob
5130 2004-10-07 12:50 millert
5132 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5133 some unneeded extensions removed.
5135 2004-10-05 17:26 millert
5137 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5138 fail. It probably means we are out of space in the stack gap...
5140 2004-10-05 17:20 millert
5144 2004-10-05 16:53 millert
5146 * mon_systrace.c: Take a stab at ldap sudoers support here.
5148 2004-10-05 15:13 millert
5150 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5151 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5152 inadvertanly kill itself.
5154 2004-10-05 14:21 millert
5156 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5158 2004-10-05 14:15 millert
5160 * mon_systrace.c: When modifying the environment, don't replace
5161 envp when we can get away with just rewriting pointers in the
5164 2004-10-05 13:46 millert
5166 * mon_systrace.c, mon_systrace.h: Add environment updating via
5167 STRIOCINJECT (if available).
5169 2004-10-05 10:22 millert
5171 * sudoers.cat, sudoers.man.in: regen
5173 2004-10-04 16:15 millert
5177 2004-10-04 16:15 millert
5179 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5182 2004-10-04 12:09 millert
5184 * mon_systrace.c: Include file is now mon_systrace.h
5186 2004-10-04 12:07 millert
5188 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5189 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5190 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5191 tracing, it is now "monitoring" which should be more a obvious
5192 name to non-hackers.
5194 2004-10-01 15:06 millert
5196 * mon_systrace.c, mon_systrace.h: Fix some XXX
5198 2004-10-01 14:30 millert
5200 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5201 1024 as the max # of entries (the max that systrace(4) allows).
5203 Only need to use SYSTR_POLICY_ASSIGN once
5205 Change check_syscall() -> find_handler() and have it return the
5206 handler instead of just running it. We need this since handler
5207 now have two parts: one part that generates and answer and
5208 another that gets called after the answer is accepted (to do
5211 Add some missing check_exec for emul execv
5213 2004-10-01 10:58 millert
5215 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
5218 2004-10-01 10:47 millert
5220 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5222 2004-09-30 20:46 millert
5224 * Makefile.in: add trace_systrace.o dependency
5226 2004-09-30 19:00 millert
5228 * configure, configure.in: Also look for systrace.h in
5231 2004-09-30 18:27 millert
5233 * mon_systrace.c, mon_systrace.h: Move all struct defs and
5234 prototypes into trace_systrace.h and mark all but
5235 systace_attach() static.
5237 2004-09-30 18:14 millert
5239 * mon_systrace.c, mon_systrace.h: Add support for tracing
5240 emulations. At the moment, all emulations are compiled in. It
5241 might make sense to #ifdef them in the future, though this
5242 impeeds readability.
5244 2004-09-30 17:07 millert
5246 * Makefile.in, configure.in, configure: rename systrace.c ->
5249 2004-09-30 15:58 millert
5251 * parse.yacc: Allow this to build with a K&R compiler again
5253 2004-09-30 13:58 millert
5257 2004-09-30 13:55 millert
5259 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5261 2004-09-30 13:44 millert
5263 * visudo.c: Exit() takes a negative value to indicate it was not
5266 2004-09-30 13:25 millert
5268 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5269 visudo.man.in: regen
5271 2004-09-30 13:22 millert
5273 * Makefile.in, visudo.c: Define Err() and Errx() that are like
5274 err() and errx() but call Exit() instead of exit(). Build
5275 private copy of alloc.o for visudo that calls Err() and Errx().
5277 2004-09-29 15:22 millert
5281 2004-09-29 15:22 millert
5285 2004-09-29 14:41 millert
5287 * visudo.c: Overhaul visudo for editing multiple files: o visudo
5288 has been broken out into functions (more work needed here) o
5289 each file is now edited before sudoers is re-parsed o if a
5290 #include line is added that file will be edited too
5292 TODO: o cleanup temp files when exiting via err() or errx() o
5293 continue breaking things out into separate functions
5295 2004-09-29 14:36 millert
5297 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5298 arg to open_sudoers that open_sudoers can use to indicate to the
5299 caller that the fd should not be closed when it is done with it.
5300 To be used by visudo to keep locked fds from being closed
5301 prematurely (and thus losing the lock).
5303 2004-09-29 14:33 millert
5305 * parse.yacc, sudo.c: Add errorfile global that contains the name
5306 of the file that caused the error.
5308 2004-09-29 14:30 millert
5310 * parse.lex: return COMMENT to yacc grammar for a #include line
5312 2004-09-29 14:29 millert
5314 * parse.lex: Remove us of unput() in favor of yyless() which is
5317 2004-09-29 14:28 millert
5319 * parse.yacc: Allow an empty sudoers file.
5321 2004-09-28 16:50 millert
5323 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5324 doesn't do it for us.
5326 2004-09-28 14:37 millert
5330 2004-09-28 14:36 millert
5332 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5333 shadow the "quiet" global.
5335 2004-09-28 14:33 millert
5337 * visudo.c: If a sudoers file includes other files, edit those too.
5338 Does not yes deal with creating the new includes files itself.
5340 2004-09-28 14:31 millert
5342 * testsudoers.c: init_parser now takes a path
5344 2004-09-28 14:31 millert
5346 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5347 dealing with multiple sudoers files: o init_parser() now takes a
5348 path used to populate the sudoers global o the sudoers global is
5349 used to print the correct file in yyerror() o when switching to
5350 a new sudoers file, perserve old file name and line number
5352 2004-09-28 14:29 millert
5354 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5355 meaningful now that we can have multiple sudoers files.
5357 2004-09-28 13:52 millert
5359 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5360 sudoers_lookup() so we start at the right file position when
5361 reading include files.
5363 2004-09-27 21:04 millert
5365 * sudoers.pod: document #include
5367 2004-09-27 20:47 millert
5371 2004-09-27 20:47 millert
5373 * parse.lex: Add max depth of 128 for the include stack to avoid
5376 Since yyerror() doesn't stop parsing, pass return values back to
5377 yylex and call yyterminate() on error.
5379 2004-09-27 14:06 millert
5381 * sudoers.pod: document tracing
5383 2004-09-27 14:05 millert
5385 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5388 2004-09-27 12:08 millert
5392 2004-09-27 12:03 millert
5394 * parse.lex: Add support for #include in sudoers (visudo support
5397 2004-09-27 12:02 millert
5399 * parse.yacc: make yyerror()'s argument const
5401 2004-09-27 12:02 millert
5403 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5405 2004-09-27 12:01 millert
5407 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5410 2004-09-26 12:35 millert
5412 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5413 version.h: Crank version
5415 2004-09-26 12:33 millert
5417 * Makefile.in, sudo.psf: Better HP-UX depot construction
5419 2004-09-25 17:08 millert
5421 * mon_systrace.c: o Made children global so check_exec() can lookup
5422 a child. o Replaced uid in struct childinfo with struct passwd *
5423 (for runas) o new_child() now takes a parent pid so the runas
5424 info can be inherited o Added find_child() to lookup a child by
5425 its pid o update_child() now fills in a struct passwd o Converted
5426 the big if/else mess in set_policy to a switch o Syscalls that
5427 change uid are now "ask" so we get SYSTR_MSG_UGID events
5429 2004-09-25 17:01 millert
5431 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5432 to lookup the shadow password. Will be used to a struct passwd
5433 that has the shadow password already filled in.
5435 2004-09-25 16:58 millert
5437 * mon_systrace.c: add missing increment of addr in read_string()
5439 2004-09-25 16:15 millert
5441 * mon_systrace.c: Remove bogus call to update_child() and some
5444 2004-09-25 16:11 millert
5446 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5447 initialized global for simplicity If STRIOCATTACH returns EBUSY
5448 we are already being traced Check for user_args == NULL in
5449 setproctitle() call Add missing calls to STRIOCANSWER
5451 2004-09-25 13:15 millert
5453 * sudo.c: g/c sudo_pwdup proto
5455 2004-09-24 20:21 millert
5457 * Makefile.in, sudo.psf: Add target for building a depot file
5459 2004-09-24 20:07 millert
5461 * mon_systrace.c: trim includes
5463 2004-09-24 14:11 millert
5465 * lex.yy.c, sudo.tab.h: regen
5467 2004-09-24 14:10 millert
5469 * INSTALL: document --with-systrace
5471 2004-09-24 14:10 millert
5473 * config.h.in, configure, configure.in: Add check for setproctitle
5475 2004-09-24 14:09 millert
5477 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5478 it can set the error code
5480 2004-09-24 13:30 millert
5482 * mon_systrace.c: systrace(4) support for sudo. On systems with
5483 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5484 patches) sudo can intercept exec calls and check the exec args
5485 against the sudoers file. In other words, sudo can now control
5486 subcommands and shell escapes.
5488 2004-09-24 13:17 millert
5490 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5492 2004-09-24 13:15 millert
5494 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5495 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5497 2004-09-24 13:13 millert
5499 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5500 close on exec flag instead.
5502 2004-09-24 13:11 millert
5504 * def_data.c, def_data.h, def_data.in: Add trace option
5506 2004-09-23 20:24 millert
5508 * Makefile.in: Add systrace
5510 2004-09-23 20:23 millert
5512 * INSTALL: SunOS /bin/sh blows up with configure
5514 2004-09-23 20:23 millert
5516 * configure, configure.in: Include sys/param.h before systrace.h
5518 2004-09-23 20:15 millert
5522 2004-09-23 20:15 millert
5524 * pathnames.h.in: _PATH_DEV_SYSTRACE
5526 2004-09-23 20:14 millert
5528 * configure.in: line up options in --help
5530 2004-09-23 20:11 millert
5532 * config.h.in, configure.in: Add --with-systrace
5534 2004-09-23 13:35 millert
5538 2004-09-23 13:35 millert
5540 * aclocal.m4, configure.in: make this work with autoconf-2.59
5542 2004-09-16 12:58 millert
5544 * sudo_edit.c: Simplify logic around open & stat of files and do
5545 sanity on edited file even if we lack fstat (still racable but
5548 2004-09-15 18:47 millert
5550 * HISTORY: Add support url
5552 2004-09-15 16:11 millert
5554 * Makefile.in: versino 1.6.8p1
5556 2004-09-15 15:20 millert
5558 * CHANGES: more changes for 1.6.8p1
5560 2004-09-15 15:18 millert
5562 * version.h: 1.6.8p1
5564 2004-09-15 12:16 millert
5566 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5567 something other than a regular file.
5569 2004-09-14 20:55 aaron
5573 2004-09-14 20:21 aaron
5575 * INSTALL: document --with-ldap-conf-file
5577 2004-09-14 17:43 millert
5579 * CHANGES, ins_csops.h: political correctness strikes again
5581 2004-09-14 15:09 millert
5585 2004-09-12 19:50 millert
5587 * Makefile.binary.in, Makefile.in: Install sudoedit man link
5589 2004-09-12 14:25 millert
5591 * INSTALL: Update PAM note and mention where HP-UX users can
5592 download gcc binaries.
5594 2004-09-12 12:08 millert
5596 * Makefile.in: libtool wants to install stuff from .libs so fake
5597 one up for binary installations.
5599 2004-09-12 11:53 millert
5601 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5602 -f set LIBTOOL correctly
5604 2004-09-12 11:53 millert
5606 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5607 sudoedit link instead of using ln -f
5609 2004-09-12 10:22 millert
5611 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5612 Makefile.binary.in for config.status substitution Add support for
5613 installing noexec bits
5615 2004-09-12 10:21 millert
5617 * Makefile.in: Copy noexec bits into binary dists too No longer use
5618 my old arch script for making binary dists
5620 2004-09-12 09:36 millert
5622 * Makefile.binary: Install sudoedit link.
5624 2004-09-11 12:25 millert
5626 * emul/utime.h: avoid __P so there is no need for compat.h to be
5629 2004-09-11 12:24 millert
5631 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5633 2004-09-10 12:31 millert
5635 * compat.h: Fix Solatis futimes macro
5637 2004-09-09 11:02 millert
5639 * sudo_edit.c: Rename ots -> omtim for improved readability.
5641 2004-09-08 14:38 millert
5643 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5644 keep the temp file open; re-opening it with the invoking user's
5647 2004-09-08 14:36 millert
5651 2004-09-08 14:35 millert
5653 * sudo.cat, sudo.man.in: regen
5655 2004-09-08 14:34 millert
5657 * sudo.pod: back out revision 1.70; it is no long applicable
5659 2004-09-08 11:57 millert
5661 * env.c: Let the loader initialize nep
5663 2004-09-08 11:49 millert
5665 * configure, configure.in, config.h.in: Removed unneed check for
5666 fchown Add check for gettimeofday Move autoheader template stuff
5667 into separate AH_TEMPLATE lines
5669 2004-09-08 11:48 millert
5671 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5672 timespec throughout.
5674 2004-09-08 11:47 millert
5676 * Makefile.in: gettime.[co]
5678 2004-09-08 11:47 millert
5680 * gettime.c: function to return the current time in a struct
5683 2004-09-08 10:51 millert
5685 * utimes.c: Not a darpa-sponsored file.
5687 2004-09-07 16:36 millert
5689 * compat.h, config.h.in, configure, configure.in: Add a check for
5690 struct timespec and provide it for those without.
5692 2004-09-07 15:56 millert
5694 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5695 st_mtim and st_mtimespec and add macros for pulling the mtime sec
5696 and nsec out of struct stat. These are used in sudo_edit() to
5697 better tell whether or not the file has changed.
5699 2004-09-07 15:55 millert
5701 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5702 param to touch() for nsec
5704 2004-09-07 14:06 millert
5706 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5707 have to chown the file later. Only touch() the temp file if we
5708 can do it via the file descriptor. Don't check for modification
5709 of the temp file if we lack fstat(). Catch errors read()ing the
5712 2004-09-07 14:04 millert
5714 * fileops.c: If path is NULL and fd == -1 return -1.
5716 2004-09-07 13:31 millert
5718 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5719 ones we opened so just close those in the child.
5721 2004-09-07 13:14 millert
5723 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5724 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5725 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5726 in touch(), emulating as needed. Not all systems are able to
5727 support setting the times of an fd so touch() takes both an fd
5728 and a file name as arguments.
5730 2004-09-06 21:12 aaron
5734 2004-09-06 16:46 millert
5736 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5737 visudo.man.in: regen
5739 2004-09-06 16:45 millert
5741 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5742 re-order some of the sections to match the order we use in
5745 2004-09-06 15:05 aaron
5747 * env.c: Openldap ~/.ldaprc fix
5749 2004-09-06 12:18 millert
5751 * sudo.pod: Talk about how the editor must write its changes to the
5752 original file and not just use rename(2).
5754 2004-09-06 12:12 millert
5758 2004-09-06 12:11 millert
5760 * sudo_edit.c: Keep the temp file open instead of re-opening after
5761 the editor has exited.
5763 2004-09-06 12:10 millert
5765 * sample.pam: Update for current redhat/fedora core.
5767 2004-09-02 21:56 aaron
5769 * README.LDAP: tls_ examples
5771 2004-09-02 00:03 aaron
5773 * ldap.c: config tls_* options
5775 2004-08-29 11:39 millert
5777 * configure, configure.in: No need for -lcrypt when using pam.
5779 2004-08-26 23:57 millert
5783 2004-08-26 23:44 aaron
5785 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5786 option to override LDAP_CONF
5788 2004-08-26 22:08 aaron
5790 * ldap.c: cleanup debug message
5792 2004-08-26 19:29 aaron
5794 * README.LDAP: more config info
5796 2004-08-24 14:01 millert
5798 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5799 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5800 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5801 longer use gross statics in command_matches(). Also rename some
5802 variables for improved clarity.
5804 2004-08-21 14:33 millert
5806 * INSTALL: document HP's crippled compiler deficiency.
5808 2004-08-21 14:25 millert
5810 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5811 descriptions. Noticed by Norihiko Murase.
5813 2004-08-21 14:20 millert
5815 * configure, configure.in: --with-noexec takes an optional PATH
5818 2004-08-21 14:20 millert
5820 * INSTALL: document --with-noexec
5822 2004-08-17 16:21 millert
5824 * RUNSON, TODO: sync
5826 2004-08-17 15:11 millert
5828 * sudo_edit.c: Better warning message when sudoedit is unable to
5829 write to the destination file.
5831 2004-08-17 14:53 millert
5833 * sudo.cat, sudo.man.in: regen
5835 2004-08-17 14:53 millert
5837 * sudo.pod: Don't italicize the string "sudoedit"
5839 2004-08-16 18:45 millert
5841 * HISTORY: Mention GratiSoft.
5843 2004-08-11 14:29 millert
5845 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5848 2004-08-09 19:04 millert
5850 * config.guess: Correct OpenBSD mips support
5852 2004-08-09 17:28 millert
5854 * config.guess: Add OpenBSD/mips
5856 2004-08-06 23:43 aaron
5858 * README.LDAP: More behavior notes
5860 2004-08-06 23:36 aaron
5862 * README.LDAP: Updates on current behavior
5864 2004-08-06 19:56 millert
5866 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5867 no difference to formatted files).
5869 2004-08-06 19:48 millert
5873 2004-08-06 19:42 millert
5875 * sudo.c: Consistency. Use same error for bad -u #uid when
5876 targetpw is set as we do when a bad -u username is specified.
5878 2004-08-06 19:33 millert
5880 * TODO: Add checksum idea from Steve Mancini
5882 2004-08-06 19:32 millert
5884 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5886 2004-08-06 19:31 millert
5888 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5889 via -u when targetpw is set.
5891 2004-08-06 19:24 millert
5893 * sudo.c: Error out when targetpw is enabled and sudo is run with
5894 -u #uid but #uid does not exist in the passwd database. We can't
5895 do target authentication when the target is not in passwd!
5897 2004-08-05 21:16 millert
5899 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5901 2004-08-05 21:14 millert
5903 * TODO: Some more todo for the next release.
5905 2004-08-05 21:13 millert
5907 * INSTALL: Make it clear that PAM should be used for DCE support
5910 2004-08-05 21:13 millert
5912 * sudoers.pod: o Document problems with wildcards and relative
5913 paths. o Make the order requirements more prominent. o Change a
5914 "set" to "reset" for clarity.
5916 2004-08-05 14:29 millert
5918 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5920 2004-08-02 22:34 aaron
5922 * ldap.c: reflect changes to parse.c
5924 2004-08-02 14:44 millert
5926 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5927 user_cmnd and user_args to command_matches(), just use the
5928 globals there. Since we keep state with statics anyway it is
5929 misleading to pretend that passing in different cmnd and
5930 cmnd_args will work.
5932 2004-08-02 14:40 millert
5934 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5935 pseudo-commands check for a '/' anywhere in cmnd, not just the
5938 2004-07-30 23:07 aaron
5940 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5941 <oblin@mandrakesoft.com>
5943 2004-07-30 22:41 aaron
5945 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5947 2004-07-30 22:06 aaron
5949 * README.LDAP: Sun One schema definition by
5950 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5952 2004-07-29 11:57 millert
5956 2004-07-23 16:44 millert
5960 2004-07-23 16:43 millert
5962 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5963 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5966 2004-07-08 10:20 millert
5968 * CHANGES: PAM change
5970 2004-07-07 21:04 aaron
5972 * ldap.c: Better debugging of ALL command
5974 2004-07-07 20:15 millert
5976 * parse.c: When matching for "sudoedit" in sudoers check both the
5977 command the user typed *and* the command that is listed in the
5980 2004-07-04 19:59 aaron
5982 * ldap.c: Added !command feature
5984 2004-06-28 10:51 millert
5986 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5989 2004-06-10 23:11 millert
5991 * LICENSE: License is ISC-style, not BSD-style
5993 2004-06-10 20:58 millert
5997 2004-06-10 16:54 millert
5999 * sudo.man.in, sudo.cat: regen
6001 2004-06-10 16:53 millert
6003 * sudo.pod: o Update some out of date bits to reality o Change the
6004 shell promt in examples to bourne-shell style o Clarify some
6005 details o Add a CAVEAT about "sudo cd /foo"
6007 2004-06-10 16:19 millert
6009 * check.c: Don't ask for a password if invoking user == target
6012 2004-06-10 12:32 millert
6014 * sudo.c: typo in comment
6016 2004-06-08 19:20 millert
6018 * sudoers.man.in, sudoers.cat: regen
6020 2004-06-08 19:19 millert
6022 * sudoers.pod: Expand on NOEXEC a little.
6024 2004-06-08 16:20 millert
6028 2004-06-08 15:58 millert
6030 * visudo.man.in, visudo.cat: regen
6032 2004-06-08 15:55 millert
6034 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
6035 for runas_default being set after it has already been used.
6037 2004-06-08 13:53 millert
6039 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
6040 has been set to TRUE or FALSE. This is more readable than
6041 checking for >=0 or < 0. Doesn't change the actual code
6044 2004-06-06 20:11 millert
6046 * sudoers.man.in, sudoers.cat: regen
6048 2004-06-06 20:07 millert
6050 * sudoers, sudoers.pod: Correct description of where Defaults specs
6053 2004-06-06 20:02 millert
6055 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
6056 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
6058 2004-06-06 19:58 millert
6060 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
6061 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
6062 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
6063 Remove trailing spaces, no actual code changes.
6065 2004-06-06 16:22 millert
6067 * parse.yacc: Fix a >=0 that should be <0 that was improperly
6068 converted when UNSPEC was added.
6070 2004-06-06 15:54 millert
6072 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
6073 to UNSPEC, not NOMATCH when resetting it.
6075 2004-06-06 15:39 millert
6077 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
6079 2004-06-05 13:55 millert
6081 * README.LDAP: Update for configure changes
6083 2004-06-05 13:42 millert
6085 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
6086 respectively) and use these in parse.yacc. Also in parse.yacc
6087 initialize the *_matches vars to UNSPEC and add two macros,
6088 SETMATCH and SETNMATCH for use when setting *_matches to a value
6089 that may be NOMATCH/UNSPEC/TRUE/FALSE.
6091 2004-06-05 11:17 millert
6093 * parse.yacc: Initialize runas to -2, not -1 since we need to be
6094 able to distinguish between the initialized value and the value
6095 of a non-match when passing along the runas value to multiple
6098 The result of this is that an unmatched runas is now set to -1,
6099 not 0. This is required now that parse.c treats a FALSE value
6100 for runas as being explicitly denied.
6102 2004-06-03 16:21 millert
6104 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
6106 2004-06-03 12:37 millert
6108 * configure, configure.in: Add tests for what libs we need to link
6109 with for ldap and for whether or not lber.h needs to be
6110 explicitly included.
6112 2004-06-02 20:30 aaron
6114 * ldap.c: Solaris native LDAP build fix
6116 2004-06-01 16:56 millert
6118 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6119 use of an unset variable.
6121 2004-06-01 16:56 millert
6123 * sudo.h: Add prototype for sudo_ldap_list_matches
6125 2004-06-01 16:53 millert
6127 * compat.h, config.h.in, configure, configure.in: Better check for
6128 dirfd macro--we now set HAVE_DIRFD for the macro version too.
6129 Added check for dd_fd in `DIR' if no dirfd is found; this is now
6130 used to confitionally define the dirfd macro in compat.h.
6132 2004-06-01 16:51 millert
6134 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6137 2004-06-01 15:13 millert
6139 * compat.h, config.h.in, configure, configure.in: Add a check for a
6140 dirfd() function (like Linux) and add a dirfd macro in compat.h
6141 if there is no dirfd() function or macro.
6143 2004-06-01 14:59 millert
6145 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6148 2004-06-01 14:30 millert
6150 * CHANGES: Clarify closefrom() note.
6152 2004-06-01 12:51 millert
6154 * parse.c: When checking for a command in the directory, only copy
6157 2004-06-01 12:44 millert
6159 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6160 Solaris closefrom() and only close the descriptors listed
6163 2004-06-01 12:23 millert
6165 * alloc.c: compat.h guarantees INT_MAX is defined.
6167 2004-06-01 12:23 millert
6169 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6170 without it and remove definition of RLIM_INFINITY (now unused).
6172 2004-05-31 21:22 millert
6174 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6175 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6176 since the former is standardized.
6178 2004-05-31 19:18 millert
6182 2004-05-31 19:10 millert
6184 * RUNSON: Add some entries that were mailed in a while ago
6186 2004-05-31 14:16 millert
6188 * closefrom.c: o sysconf returns a long, not an int. o check for
6189 negative return value from sysconf/getdtablesize and use
6190 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6191 without it (a fair guess...)
6193 2004-05-30 12:25 millert
6195 * UPGRADE: Mention change in parse order for RunAs entries.
6197 2004-05-30 12:15 millert
6201 2004-05-29 18:29 millert
6203 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6204 now takes an optional dir as a parameter
6205 o added check for ldap_initialize() and start_tls_s()
6207 2004-05-29 14:54 millert
6209 * README.LDAP: Fix some typos, word choice and formatting issues.
6211 2004-05-28 18:06 millert
6213 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6214 stdio and just use read/write as it is simpler.
6216 2004-05-28 16:27 millert
6218 * configure, configure.in: Remove hack overriding cross-compiler
6219 check. It should no longer be needed.
6221 2004-05-28 16:26 millert
6223 * compat.h: Remove select() compat bits since we no longer use
6226 2004-05-28 16:24 millert
6228 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6229 timeout for systems that don't fully/properly implement select().
6231 2004-05-27 19:14 millert
6235 2004-05-27 19:12 millert
6239 2004-05-27 19:12 millert
6241 * set_perms.c: Deal with systems that have no way of setting the
6242 effective uid such as nsr-tandem-nsk.
6244 2004-05-27 19:01 millert
6246 * configure, configure.in: Define NO_SAVED_IDS if we don't find
6249 2004-05-27 18:21 millert
6251 * config.h.in, configure, configure.in: Add back check for
6252 setreuid() since NSK doesn't have it.
6254 2004-05-27 15:57 millert
6256 * sudoers.cat, sudoers.man.in: regen
6258 2004-05-27 15:56 millert
6260 * BUGS, CHANGES: sync
6262 2004-05-27 15:55 millert
6264 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6265 user was explicitly denied and the command matched. This fixes a
6266 long-standing bug and makes: foo machine = (ALL)
6267 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6269 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6271 2004-05-27 15:52 millert
6273 * sudoers.pod: Clarify mail_noperm
6275 2004-05-19 21:25 aaron
6277 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6279 2004-05-17 18:32 millert
6281 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6282 sudoers.cat, visudo.cat: regen
6284 2004-05-17 18:31 millert
6288 2004-05-17 18:31 millert
6290 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6291 remembers these?) and add a minimal sudoedit example.
6293 2004-05-17 18:21 millert
6295 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6296 filesystem -> file system
6298 2004-05-17 18:19 millert
6300 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6302 2004-05-17 18:10 millert
6306 2004-05-17 17:57 millert
6308 * visudo.pod: remove my email addr
6310 2004-05-17 17:55 millert
6312 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6313 @mansectsu@ everywhere Make man page references links with L<>
6315 2004-05-17 16:51 millert
6317 * parse.lex: Accept quoted globbing characters and pass them
6318 verbatim for fnmatch()
6320 2004-05-17 16:50 millert
6322 * UPGRADE: Document that /tmp/.odus is gone.
6324 2004-05-17 16:28 millert
6326 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6327 /tmp/.odus as a possible timestamp dir unless specifically
6328 configured to do so. Instead, if no /var/run exists, use
6329 /var/adm/sudo or /usr/adm/sudo.
6331 2004-05-17 16:08 millert
6333 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6334 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6335 on patches from Tom Bates.
6337 2004-05-16 18:47 millert
6339 * CHANGES: There was no 1.6.7p6.
6341 2004-05-16 16:38 millert
6343 * BUGS, CHANGES: sync
6345 2004-05-16 16:36 millert
6347 * Makefile.in: add missing files to DISTFILES
6349 2004-05-16 16:23 millert
6351 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6353 2004-05-16 16:20 millert
6355 * Makefile.in: Fix some line wrap and update (c) year
6357 2004-04-28 15:05 aaron
6359 * README.LDAP: Build Note
6361 2004-04-06 22:03 aaron
6363 * Makefile.in: Fix install-dirs
6365 2004-04-04 20:27 millert
6367 * visudo.c: In Exit() when used as a signal handler, emsg is a
6368 pointer so sizeof() is wrong so make it a #define instead. Also
6369 avoid using a negative exit value. Found by Aaron Campbell
6371 2004-03-24 18:23 millert
6373 * sudoers.pod: Remove bogus sentence about uids in a User_List.
6374 Document usernames vs. uid parsing in a Runas_List.
6376 2004-03-24 18:06 millert
6378 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6379 the user specified a uid with the -u flag and the uid exists in
6380 the passwd file, set runas_user to the name, not the uid.
6382 When comparing usernames in sudoers, if a name is really a uid
6383 (starts with '#') compare it numerically to pw_uid.
6385 2004-03-22 13:35 millert
6387 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6389 2004-02-28 18:54 aaron
6391 * CHANGES, config.h.in, ldap.c: Added start_tls support
6393 2004-02-14 18:04 millert
6395 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6396 def_data.c, def_data.h to PARSESRCS.
6398 2004-02-14 10:13 aaron
6400 * strlcat.c, strlcpy.c: Un-Fix last license munge
6402 2004-02-13 16:37 millert
6404 * CHANGES, RUNSON, TODO: checkpoint
6406 2004-02-13 16:37 millert
6408 * lex.yy.c, configure: regen
6410 2004-02-13 16:36 millert
6412 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6413 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6414 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6415 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6416 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6417 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6418 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6419 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6420 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6421 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6422 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6423 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6424 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6425 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6426 emul/search.h, emul/utime.h: More to a less restrictive,
6429 2004-02-12 21:08 aaron
6431 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6432 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6433 sudoers2ldif: Merged in LDAP Support
6435 2004-02-08 15:53 millert
6437 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6440 2004-02-06 18:08 millert
6442 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6443 already 0 so set the euid first, then just call setuid(0) to set
6446 2004-02-06 14:52 millert
6448 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6449 appropriate instead of seteuid() which may not exist.
6451 2004-02-04 14:58 millert
6455 2004-02-03 23:38 millert
6457 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6458 --with-pc-insults configure option
6460 2004-02-03 23:32 millert
6462 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6464 2004-02-01 15:45 millert
6466 * sudo.man.in, sudoers.man.in: regen
6468 2004-02-01 15:44 millert
6470 * sudoers.pod: Add a note that noexec is not a cure-all.
6472 2004-02-01 15:20 millert
6474 * sudoers.pod: Mention that disabling "root_sudo" is pretty
6477 2004-02-01 15:20 millert
6479 * configure, configure.in: Substitute for root_sudo in sudoers.pod
6481 2004-02-01 15:03 millert
6483 * sudo.pod: Add sudoedit to the NAME section
6485 2004-02-01 15:00 millert
6487 * sudoers.pod: Document that fact that setting ignore_dot in
6488 sudoers has no effect due to the fact that find_path() is called
6489 *before* sudoers is read.
6491 2004-01-29 19:50 millert
6493 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6495 2004-01-29 19:42 millert
6497 * BUGS, CHANGES, TODO: sync
6499 2004-01-29 19:42 millert
6501 * sudo.man.in: regen
6503 2004-01-29 19:41 millert
6505 * sudo.pod: Clarify that when sudo is run by root with the
6506 SUDO_USER variable set, the sudoers lookup happens for root and
6507 not the SUDO_USER user.
6509 2004-01-29 17:33 millert
6511 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6512 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6513 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6515 2004-01-29 16:22 millert
6517 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6519 2004-01-29 16:15 millert
6521 * sudo.c: Don't look at prev_user until after we've parsed sudoers
6522 and done the password check. That way, if sudo/sudoedit is run
6523 from a root process that was invoked by sudo, we check sudoers
6524 for root, not the previous user. This makes sudoedit much more
6525 useful and means that for the sudo case, we get correct logging
6526 on who actually ran the command.
6528 2004-01-22 19:22 millert
6530 * sudo_edit.c: Add a comment describing why we need to be notified
6531 about our child stopping.
6533 2004-01-22 16:06 millert
6535 * def_data.c, def_data.in: Update the noexec variable descriptions
6537 2004-01-22 14:18 millert
6539 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6542 2004-01-22 12:14 millert
6544 * sudo_noexec.c: Alas, all the world does not go through execve(2).
6545 Many systems still have an execv(2) system call, Linux 2.6
6546 provides fexecve(2) and it is not uncommon for libc to have
6547 underscore ('_') versions of the functions to be used internally
6548 by the library. Instead of stubbing all these out by hand,
6549 define a macro and let it do the work. Extra exec functions
6550 pointed out by Reznic Valery.
6552 2004-01-21 21:57 millert
6554 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6555 Because we do a fork() first we need to be notified when the
6556 child has been stopped and then send that same signal to ourself
6557 so the shell can do its job control thing.
6559 2004-01-21 21:44 millert
6561 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6562 systems out there that want to run sudo that still don't support
6563 these we can try to deal with that later.
6565 2004-01-21 20:03 millert
6569 2004-01-21 20:00 millert
6571 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6574 2004-01-21 19:08 millert
6576 * configure, configure.in: fix typo
6578 2004-01-21 19:02 millert
6580 * config.h.in, configure.in: Add SET/CLR/ISSET
6582 2004-01-21 18:55 millert
6584 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6585 Pretty print the long usage() line to not wrap (assumes 80 char
6588 2004-01-21 18:01 millert
6590 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6591 is implied and no other flags are permitted.
6593 2004-01-21 18:00 millert
6595 * sudo.h: Add a new flag, -e, that makes it possible to give users
6596 the ability to edit files with the editor of their choice as the
6597 invoking user, not the runas user. Temporary files are used for
6598 the actual edit and the temp file is copied over the original
6599 after the editor is done.
6601 2004-01-21 17:25 millert
6603 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6604 flag, -e, that makes it possible to give users the ability to
6605 edit files with the editor of their choice as the invoking user,
6606 not the runas user. Temporary files are used for the actual edit
6607 and the temp file is copied over the original after the editor is
6610 2004-01-21 17:06 millert
6612 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6613 variables is set, use that to determine the invoking user's true
6614 identity. That way the proper info gets logged by someone who
6615 has done "sudo su" but still uses sudo to as root. We can't do
6616 this for non-root users since that would open up a security hole,
6617 though perhaps it would be acceptable to use getlogin(2) on OSes
6618 where this a system call (and doesn't just look in the utmp
6621 2004-01-21 16:58 millert
6623 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6625 2004-01-21 16:57 millert
6627 * configure, config.h.in, configure.in: Add check for fchown(2)
6629 2004-01-20 14:22 millert
6631 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6632 set_runaspw. It is far to late to set NewArgv[0] there and will
6633 have no effect anyway as cmnd and safe_cmnd have already been
6636 2004-01-20 14:18 millert
6638 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6641 2004-01-18 20:17 millert
6643 * env.c, sudo.c: In -i mode always set new environment based on the
6644 runas user's passwd entry.
6646 2004-01-18 17:56 millert
6648 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6649 section with usage() in sudo.c. Also sort the flags in the
6652 2004-01-18 17:55 millert
6654 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6655 patches from David J. MacKenzie o Sort the flags in the usage
6658 2004-01-18 17:22 millert
6660 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6663 2004-01-17 16:34 millert
6665 * sudo.c: Change euid to runas user before calling find_path().
6666 Unfortunately, though runas_user can be modified in sudoers we
6667 haven't parsed sudoers yet.
6669 2004-01-17 16:25 millert
6671 * sudoers.man.in, sudoers.pod: Add missing defintion of
6672 Parameter_List and use single pipes in the Defaults EBNF
6675 2004-01-17 13:49 millert
6677 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6678 don't want to reset the contents of runas_pw if the user
6679 specified a user via the -u flag.
6681 Avoid unnecessary passwd lookups in set_authpw(). In most cases
6682 we already have the info in runas_pw.
6684 2004-01-16 18:16 millert
6686 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6689 2004-01-16 18:12 millert
6691 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6693 2004-01-16 18:10 millert
6695 * parse.c: If we can't stat the command as root, try as the runas
6698 2004-01-16 18:09 millert
6700 * testsudoers.c, visudo.c: Add stub set_runaspw() function
6702 2004-01-16 18:09 millert
6704 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6705 will be used as a callback to update runas_pw when the runas user
6708 2004-01-16 18:07 millert
6710 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6712 2004-01-16 18:05 millert
6714 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6715 a PERM_RUNAS that just changes the euid.
6717 2004-01-16 18:04 millert
6719 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6720 allocate memory in one chunk for easy free()ing. Also change it
6721 from static to extern.
6723 2004-01-16 18:03 millert
6725 * defaults.c, defaults.h: Add callback support
6727 2004-01-16 18:02 millert
6729 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6730 it for runas_default
6732 2004-01-15 15:13 millert
6734 * auth/fwtk.c: Add support for chalnecho and display server
6735 responses used by fwtk >= 2.0
6737 2004-01-12 18:39 millert
6739 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6741 2004-01-12 14:03 millert
6743 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6744 sudo.h: Use closefrom() instead of doing the equivalent inline.
6746 2004-01-12 13:55 millert
6748 * closefrom.c: closefrom(3) for systems w/o it
6750 2004-01-09 16:29 millert
6752 * sudoers.man.in: Update from .pod file.
6754 2004-01-09 16:26 millert
6756 * configure, configure.in: Substitute noexec_file for the sudoers
6759 2004-01-09 16:24 millert
6761 * sudo.man.in, sudo.pod: Mention noexec
6763 2004-01-09 16:16 millert
6765 * sudoers.man.in, sudoers.pod: Document noexec
6767 2004-01-09 14:38 millert
6769 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6770 definition from config.h to pam.c where it belongs. We can't
6771 have this in config.h since that gets included too early.
6773 2004-01-09 14:35 millert
6775 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6776 implementations put their headers in /usr/include/pam instead of
6777 /usr/include/security.
6779 2004-01-09 14:32 millert
6781 * configure.in: I missed changing the EXEC macro -> EXECV here when
6782 I changed this in config.h.in and sudo.c a while ago.
6784 2004-01-09 13:15 millert
6786 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6788 2004-01-09 03:29 millert
6790 * configure, configure.in: o merge the hpux case entries into a
6791 single entry w/ its own sub-case statement. o HP-UX >= 11
6792 support getspnam(), use it in preference to getprpwuid()
6794 2004-01-09 02:58 millert
6796 * configure, configure.in: eval $shrext so that it expands nicely
6799 2004-01-09 02:50 millert
6801 * Makefile.in: Don't lie about making a module, it does the wrong
6804 2004-01-09 02:49 millert
6806 * ltmain.sh: Remove requirement that libs must begin with "lib".
6807 They don't when we point directly at the lib using LD_PRELOAD or
6810 2004-01-09 02:01 millert
6812 * acsite.m4: Disable support for c++, f77 and java. We don't need
6813 it, it takes a lot of time, and it hosed our check for shared lib
6816 2004-01-09 02:00 millert
6820 2004-01-09 02:00 millert
6822 * configure.in: Call AC_ENABLE_SHARED and check the status of
6823 enable_shared to know when shared libs are available.
6825 2004-01-09 01:37 millert
6827 * acsite.m4: Duh, OpenBSD suports shared libs too
6829 2004-01-09 01:18 millert
6831 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6834 2004-01-09 01:15 millert
6836 * configure, configure.in: o No need to check for sed, libtool
6837 config does that for us o move check for --with-noexec until
6838 after libtool magic is run so we can use $can_build_shared and
6841 2004-01-09 01:14 millert
6843 * ltmain.sh: Don't print a bunch of crap about library installs
6844 since we are not really installing a library.
6846 2004-01-09 00:38 millert
6848 * env.c: Make format_env() varargs Add noexec support for Darwin,
6849 MacOS X, Irix, and Tru64
6851 2004-01-09 00:32 millert
6853 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6854 changes: o no ldconfig in the finish step o assume no libprefix
6855 or version is needed
6857 2004-01-09 00:15 millert
6859 * sudo_noexec.c: Fix compilation under K&R
6861 2004-01-06 09:31 millert
6863 * CHANGES: checkpoint
6865 2004-01-06 09:28 millert
6867 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6868 noexec functionality
6870 2004-01-06 01:42 millert
6872 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6873 issue with generated code.
6875 2004-01-05 16:10 millert
6877 * def_data.c, def_data.h, def_data.in: Move the environment
6878 defaults to the end and shorten a few of the descriptions.
6880 2004-01-05 15:05 millert
6882 * configure.in, configure: no shared libs on ultris or convexos
6884 2004-01-05 15:03 millert
6886 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6887 object using libtool; could use some cleanup.
6889 2004-01-05 14:59 millert
6891 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6893 2004-01-05 14:56 millert
6895 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6896 that order is not important.
6898 2004-01-05 12:15 millert
6900 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6901 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6903 2004-01-04 22:58 millert
6905 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6906 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6907 option. The default value of noexec_file is set to this.
6909 2004-01-04 21:48 millert
6911 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6912 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6913 support for preloading a shared object containing a dummy
6914 execve() function that just sets error and returns -1. This adds
6915 a "noexec_file" option to load the filename as well as a "noexec"
6916 flag to enable it unconditionally. There is also a NOEXEC tag
6917 that can be attached to specific commands and an EXEC tag to
6920 2004-01-04 21:40 millert
6922 * mkdefaults: add missing newline to usage statement
6924 2004-01-04 20:39 millert
6926 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6928 2004-01-04 20:16 millert
6930 * logging.c: Don't truncate usernames to 8 characters in the log
6933 2004-01-04 20:13 millert
6935 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6937 2004-01-04 20:12 millert
6939 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6940 sudoers.pod: Add a new option, lecture_file, that can be used to
6941 point to a custom sudo lecture.
6943 2003-12-31 17:46 millert
6945 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6946 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6947 zero_bytes() function to do the equivalent of bzero in such a way
6948 that will heopfully not be optimized away by sneaky compilers.
6950 2003-12-31 13:35 millert
6952 * err.c: Use #ifdef __STDC__, not #if __STDC__.
6954 2003-12-30 17:41 millert
6956 * mkdefaults: Always put at least one space between the def_* macro
6957 name and its definition.
6959 2003-12-30 17:34 millert
6961 * configure, configure.in: Adjust code for --without-lecture to
6964 2003-12-30 17:33 millert
6966 * visudo.man.in: regen after pasto fix
6968 2003-12-30 17:31 millert
6970 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6971 from a flag to a tuple.
6973 2003-12-30 17:31 millert
6975 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6976 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6977 support for tuples in def_data.in; these are implemented as an
6978 enum type. Currently there is only a single tuple enum but in
6979 the future we may have one tuple enum per T_TUPLE entry in
6980 def_data.in. Currently listpw, verifypw and lecture are tuples.
6981 This avoids the need to have two entries (one ival, one str) for
6982 pwflags and syslog values.
6984 lecture is now a tuple with the following values: never, once,
6987 We no longer use both an int and string entry for syslog
6988 facilities and priorities. Instead, there are logfac2str() and
6989 logpri2str() functions that get used when we need to print the
6992 2003-12-30 17:20 millert
6994 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6995 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6996 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6997 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6998 auth/sudo_auth.c: Create def_* macros for each defaults value so
6999 we no longer need the def_{flag,ival,str,list,mode} macros (which
7000 have been removed). This is a step toward more flexible data
7001 types in def_data.in.
7003 2003-12-30 15:55 millert
7007 2003-12-22 21:18 millert
7009 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
7010 unusual for users to place "sudo -k" in a .logout file which can
7011 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
7012 daemon has died. Previously, this would result in useless mail
7015 2003-12-16 13:51 millert
7017 * visudo.pod: fix pasto in VISUAL description
7019 2003-12-09 22:09 millert
7023 2003-12-09 22:08 millert
7025 * CHANGES: checkpoint
7027 2003-12-09 22:02 millert
7029 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
7032 2003-08-12 16:45 millert
7034 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
7037 2003-06-28 21:31 millert
7039 * auth/pam.c: Fix a core dump on Solaris by preserving the
7040 pam_handle_t we used during authentication for pam_prep_user().
7041 If we didn't authenticate (ie: ticket still valid), we call
7042 pam_init() from pam_prep_user(). This is something of a hack; it
7043 may be better to change the auth API and add an auth_final()
7044 function that acts like pam_prep_user().
7046 2003-06-21 12:50 millert
7048 * set_perms.c: Add explicit declaration of printerr variable in
7049 function header (was defaulting to int which is OK but oh so K&R
7052 2003-06-09 19:00 millert
7054 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
7056 2003-06-09 16:07 millert
7058 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
7059 problem where the sudo process would spin eating up CPU until
7060 sendmail finished when it has to send mail.
7062 2003-05-30 16:22 millert
7064 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
7067 2003-05-21 21:53 millert
7069 * parse.c: Don't assume that getgrnam() calls don't modify contents
7070 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
7071 can happen. Based on a patch from Kirk Webb.
7073 2003-05-06 11:25 millert
7075 * configure.in: missing ;;
7077 2003-05-06 00:53 millert
7079 * configure.in: darwin has a broken setreuid() in at least some
7082 2003-05-06 00:31 millert
7084 * env.c: Fix an off by one error when reallocating the environment;
7087 2003-04-30 14:04 millert
7089 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
7091 2003-04-28 19:30 millert
7093 * HISTORY: More info on the early days from Coggs.
7095 2003-04-21 14:47 millert
7097 * auth/kerb5.c: remove errant semicolon that prevented compilation
7100 2003-04-15 20:42 millert
7102 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
7103 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
7104 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
7105 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
7106 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7107 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7108 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7109 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7110 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7111 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7112 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7115 2003-04-15 20:25 millert
7117 * LICENSE: slightly different wording for the darpa credit
7119 2003-04-15 14:37 millert
7121 * LICENSE: Add DARPA credit
7123 2003-04-14 16:49 millert
7125 * auth/kerb5.c: Use krb5_princ_component() instead of
7126 krb5_princ_realm() for MIT Kerberos like we did before I messed
7129 Use krb5_principal_get_comp_string() to do the same thing w/
7130 Heimdal. I'm not sure if the component should be 0 or 1 in this
7133 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7134 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7135 should be a configure check for this I guess.
7137 2003-04-13 15:48 millert
7139 * TROUBLESHOOTING, config.h.in, configure, configure.in,
7140 sample.sudoers: builtin -> built-in; Jason McIntyre
7142 2003-04-13 15:45 millert
7144 * sudoers.pod: built in -> built-in; Jason McIntyre
7146 2003-04-09 16:14 millert
7148 * CHANGES: checkpoint for 1.6.7p3
7150 2003-04-09 16:14 millert
7152 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7153 Spencer. Amazingly, sudo source from 1985 is available via
7156 2003-04-09 16:13 millert
7158 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7159 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7160 for the RLIMIT_CORE restoration on some OSes.
7162 2003-04-04 12:46 millert
7164 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7166 2003-04-04 12:45 millert
7168 * config.h.in, configure, configure.in: Check for heimdal even if
7169 we found krb5-config and define HAVE_HEIMDAL.
7171 2003-04-03 22:04 millert
7173 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7174 The former is no longer defined by MIT kerb5 (though it used to
7175 be and indeed remains so in Heimdal).
7177 2003-04-03 10:16 millert
7179 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7180 duplicate) directories to "mkdir -p" since that seems to break on
7181 Tru64 Unix at least. This basically brings back what shipped
7184 2003-04-02 13:57 millert
7186 * auth/kerb5.c: Correct number of args to
7187 krb5_principal_get_realm() and fix an unclosed comment that hid
7190 2003-04-02 13:45 millert
7194 2003-04-02 13:45 millert
7196 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7197 configure.in, version.h: ++version
7199 2003-04-02 13:44 millert
7201 * configure.in: use krb5-config to determine Kerberos V details if
7204 2003-04-02 13:25 millert
7206 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7207 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7208 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7209 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7210 throughout. The main exception is openlog(). Since the admin
7211 may be filtering logs based on the program name in the log files,
7212 hard code this to "sudo".
7214 2003-04-02 13:16 millert
7216 * Makefile.in: Add getprogname.c and err.c
7218 2003-04-02 13:15 millert
7222 2003-04-02 13:15 millert
7224 * configure.in, config.h.in: Add checks for getprognam(),
7225 __progname and err.h
7227 2003-04-02 13:14 millert
7229 * err.c, emul/err.h: For systems withour err/warn functions.
7231 2003-04-02 13:14 millert
7233 * getprogname.c: For systems neither getprogname() nor __progname;
7236 2003-04-01 10:09 millert
7238 * CHANGES: checkpoint for 1.6.7p1
7240 2003-04-01 10:02 millert
7242 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7244 2003-04-01 09:58 millert
7246 * check.c: oflow detection in expand_prompt() was faulty (false
7247 positives). The count was based on strlcat() return value which
7248 includes the length of the entire string.
7250 2003-03-30 19:02 millert
7252 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7254 2003-03-24 16:09 millert
7256 * logging.c: g/c unused variable
7258 2003-03-24 11:06 millert
7262 2003-03-24 11:05 millert
7264 * configure.in: use man sections 8 and 5 for csops
7266 2003-03-21 18:11 millert
7270 2003-03-21 15:10 millert
7272 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7273 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7275 2003-03-21 14:02 millert
7279 2003-03-21 14:01 millert
7281 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7282 An alternate libpath may be specified or -blibpath support can be
7283 disabled. Also change conifgure such that -blibpath is not
7284 specified if no -L libpaths were added to SUDO_LDFLAGS.
7286 2003-03-20 22:05 millert
7288 * configure.in: add AIX blibpath support
7290 2003-03-20 20:28 millert
7292 * INSTALL, configure.in: --with-skey and --with-opie now take an
7293 option directory argument This obsoletes a --with-csops hack
7296 Also remove the remaining direct uses of "echo"
7298 2003-03-20 17:44 millert
7300 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7301 -lroken optional for KTH Kerberos IV and V.
7303 2003-03-20 14:42 millert
7305 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7306 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7309 2003-03-20 14:40 millert
7311 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7312 There is a new configure option, --with-rpath to control this
7315 2003-03-19 23:50 millert
7317 * configure.in: for kerb4 put libdes after libkrb on the link line
7319 2003-03-19 23:49 millert
7321 * auth/kerb4.c: typo
7323 2003-03-19 23:33 millert
7325 * configure.in: fix kerberos lib check when a path is specified
7327 2003-03-19 21:04 millert
7329 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7330 reapchild after sending mail instead of doing a conditional
7333 2003-03-19 16:20 millert
7337 2003-03-19 16:19 millert
7339 * configure.in: replace =DIR with [=DIR] where sensible
7341 2003-03-19 16:16 millert
7343 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7344 include/lib detection based on openssh's configure.in
7346 2003-03-19 15:58 millert
7348 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7351 2003-03-15 22:03 millert
7353 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7354 says username is 32 bytes.
7356 2003-03-15 21:18 millert
7358 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7359 snprintf, not sprintf
7361 2003-03-15 21:18 millert
7363 * auth/rfc1938.c: use snprintf
7365 2003-03-15 15:37 millert
7367 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7368 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7371 2003-03-15 15:31 millert
7373 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7374 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7375 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7376 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7377 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7380 2003-03-15 15:19 millert
7382 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7385 2003-03-15 15:17 millert
7389 2003-03-15 15:16 millert
7391 * configure.in: correct error messages for
7392 --with-sudoers-{mode,uid,gid}
7394 2003-03-15 15:10 millert
7396 * alloc.c: make the malloc(0) error specific to each function to
7397 aid tracking down bugs.
7399 2003-03-15 14:49 millert
7401 * alloc.c: deal with platforms where size_t is signed and there is
7402 no SIZE_MAX or SIZE_T_MAX
7404 2003-03-15 14:10 millert
7406 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7409 2003-03-15 13:02 millert
7411 * sudo.c: Use stat_sudoers macro so --with-stow can work
7413 2003-03-15 13:01 millert
7415 * INSTALL, config.h.in, configure, configure.in: Add support for
7416 --with-stow based on patches from Robert Uhl
7418 2003-03-15 12:51 millert
7420 * env.c: fix indentation
7422 2003-03-15 00:21 millert
7424 * configure.in: back out rev 1.352
7426 2003-03-14 20:11 millert
7430 2003-03-14 20:11 millert
7432 * parse.lex: use strlcpy, not strncpy
7434 2003-03-14 19:48 millert
7436 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7437 setusercontext() failure.
7439 2003-03-14 19:43 millert
7441 * logging.c: use pid_t
7443 2003-03-14 10:43 millert
7445 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7447 2003-03-14 10:35 millert
7449 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7451 2003-03-13 21:47 millert
7453 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7455 2003-03-13 21:38 millert
7459 2003-03-13 21:38 millert
7461 * configure.in: put -ldl after -lpam, not before; fixes static
7464 2003-03-13 21:17 millert
7466 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7469 2003-03-13 20:24 millert
7471 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7472 sudoers.cat, visudo.cat: regen
7474 2003-03-13 20:23 millert
7476 * Makefile.in: Preserve copyright notice from .pod file in .man.in
7479 2003-03-13 20:01 millert
7481 * visudo.pod: Add sudoers(5) to SEE ALSO
7483 2003-03-13 15:27 millert
7487 2003-03-13 15:27 millert
7489 * parse.lex: Don't assume libc can realloc() a NULL string. If
7490 malloc/realloc fails, make sure we just return; yyerror() is not
7493 2003-03-13 15:17 millert
7497 2003-03-13 15:17 millert
7499 * parse.lex: simplify fill_args a little and use strlcpy for
7502 2003-03-13 15:00 millert
7504 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7505 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7506 overflow. In all cases the strings were either pre-allocated to
7507 the correct size of length checks were done before the copy but a
7508 little paranoia can go a long way.
7510 2003-03-13 12:54 millert
7512 * sudo.h: Add strlc{at,py} protos
7514 2003-03-13 12:03 millert
7516 * env.c, interfaces.c: Use erealloc3()
7518 2003-03-13 12:00 millert
7522 2003-03-13 12:00 millert
7524 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7525 need >=). Use memcpy() instead of strcpy() in estrdup() so this
7528 2003-03-13 11:58 millert
7530 * sudo.c: snprintf() a uid as %lu, not %ld to match the
7531 MAX_UID_T_LEN test in configure.
7533 2003-03-13 11:56 millert
7535 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7538 2003-03-12 18:46 millert
7540 * sudo.c: Use snprintf() for paranoia
7542 2003-03-12 17:16 millert
7544 * parse.yacc: Use emalloc2 and erealloc3
7546 2003-03-12 17:08 millert
7548 * Makefile.in: strlc{at,py} for those w/o it
7550 2003-03-12 17:07 millert
7552 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7554 2003-03-12 17:07 millert
7556 * config.h.in, configure, configure.in: Add stlc{at,py} for those
7559 2003-03-12 16:51 millert
7561 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7564 2003-03-12 16:45 millert
7566 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7569 2003-03-12 16:41 millert
7571 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7572 bzero and with error/oflow checking.
7574 2003-03-12 16:23 millert
7576 * alloc.c: Error out on malloc(0); suggested by theo
7578 2003-03-09 19:34 millert
7580 * configure, configure.in: fix a typo; David Krause
7582 2003-03-07 10:46 millert
7584 * sudo.pod: fix typo
7586 2003-03-03 21:47 millert
7588 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7590 2003-03-01 13:20 millert
7592 * configure.in, config.h.in: not not; Anil Madhavapeddy
7594 2003-01-23 03:03 millert
7596 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7598 2003-01-20 16:13 millert
7600 * parse.yacc: Add some missing ';' rule terminators that bison
7603 2003-01-20 16:07 millert
7605 * config.sub: fix typo I introduced in last merge
7607 2003-01-20 15:59 millert
7609 * configure: regenerate with autoconf 2.57
7611 2003-01-20 15:58 millert
7613 * config.h.in: Add missing "$HOME"
7615 2003-01-20 15:57 millert
7617 * configure.in: Add some more square backets to make autoconf 2.57
7620 2003-01-20 14:39 millert
7622 * config.guess, config.sub, mkinstalldirs: Updates from
7625 2003-01-17 18:10 millert
7627 * lex.yy.c, sudo.tab.h: regen
7629 2003-01-17 18:09 millert
7631 * parse.lex, parse.yacc, sudoers.pod: Add support for
7634 2003-01-06 19:10 millert
7636 * visudo.c: fclose() yyin after each yyparse() is done and use
7637 fopen() instead of using freopen().
7639 2003-01-06 19:02 millert
7641 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7642 It looks like the issue is that yyrestart() does not reset the
7643 start condition to INITIAL which is an issue since we parse
7644 sudoers multiple times.
7646 2003-01-06 18:47 millert
7648 * parse.lex: Work around what appears to be a flex bug when dealing
7649 with files that lack a final newline before EOF. This adds a
7650 rule to match EOF in the non-initial states which resets the
7651 state to INITIAL and throws an error.
7653 2003-01-06 15:06 millert
7655 * visudo.c: o The parser needs sudoers to end with a newline but
7656 some editors (emacs) may not add one. Check for a missing
7657 newline at EOF and add one if needed. o Set quiet flag during
7658 initial sudoers parse (to get options) o Move yyrestart() call
7659 and always use freopen() to open yyin after initial sudoers
7662 2002-12-15 11:24 millert
7664 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7665 Want to set effective gid, not real gid, when reading sudoers.
7667 2002-12-15 11:08 millert
7669 * set_perms.c: don't compile set_perms_posix if we have setreuid or
7672 2002-12-14 14:21 millert
7674 * sudo.pod, sudoers.pod: document new prompt escapes
7676 2002-12-14 14:15 millert
7678 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7679 now gets collapsed to "%" as was originally intended. This also
7680 gets rid of lastchar (does lookahead instead of lookback) which
7681 should simplify the logic slightly.
7683 2002-12-13 13:20 millert
7685 * tgetpass.c: Write the prompt *after* turning off echo to avoid
7686 some password characters being echoed on heavily-loaded machines
7689 2002-12-13 13:09 millert
7691 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7693 2002-12-13 12:48 millert
7695 * configure.in: Fix IRIX fallout from name changes in man dir/sect
7696 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7699 2002-12-13 11:33 millert
7701 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7702 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7704 2002-11-28 18:43 millert
7706 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7709 2002-11-26 12:09 millert
7711 * sudo.c: fix typo in comment; Pedro Bastos
7713 2002-11-22 14:41 millert
7715 * INSTALL: document --disable-setresuid
7717 2002-11-22 14:41 millert
7719 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7720 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7721 optimizers from removing memset() calls.
7723 2002-11-22 14:11 millert
7725 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7728 2002-11-22 14:09 millert
7730 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7731 version based on setresuid() or setreuid() when possible since
7732 that allows us to support the stay_setuid option and we always
7733 know exactly what the semantics will be (various Linux kernels
7734 have broken POSIX saved uid support).
7736 2002-11-22 14:08 millert
7738 * config.h.in, configure: regen from configure.in
7740 2002-11-22 14:07 millert
7742 * configure.in: Add checks for setresuid() and a way to disable
7745 2002-11-22 14:05 millert
7747 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7748 or setre[ug]id(). The new set_perms stuff only uses things it
7751 2002-11-22 13:33 millert
7753 * sudo.c: Before exec, restore state of signal handlers to be the
7754 same as when we were initialy invoked instead of just reseting to
7755 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7756 patch from Paul Markham.
7758 2002-11-22 13:23 millert
7760 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7761 message when sudo is run by root and no_root_sudo is set
7763 2002-09-19 17:27 millert
7765 * README: update ftp link for bison
7767 2002-07-20 08:30 millert
7769 * set_perms.c: Error out if setusercontext() fails and the runas
7772 2002-05-20 16:51 millert
7774 * auth/securid5.c: Fix rcsid
7776 2002-05-20 16:50 millert
7778 * configure.in: Fix SecurID API test
7780 2002-05-17 13:20 millert
7782 * env.c: typo in comment
7784 2002-05-17 13:20 millert
7786 * configure.in: securid5 stuff needs pthreads. Just adding
7787 -lpthread is suboptimal but I don't see a better way at the
7790 2002-05-17 13:04 millert
7792 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7795 2002-05-17 13:02 millert
7797 * configure.in: Add check for SecurID 5.0 API
7799 2002-05-08 16:46 millert
7801 * strerror.c: We actually do still need config.h to get the 'const'
7802 definition for K&R C.
7804 2002-05-05 16:43 millert
7806 * configure: regen with autoconf 2.5.3
7808 2002-05-05 16:25 millert
7810 * configure.in: Don't set sysconfdir to '/etc' if the user has
7811 specified a --prefix.
7813 2002-05-05 16:14 millert
7815 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7816 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7819 2002-05-05 15:58 millert
7821 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7822 dump_defaults() knows how to dump lists.
7824 2002-05-04 21:31 millert
7826 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7827 INSTALL.binary, README: ++version
7829 2002-05-04 20:57 millert
7831 * sudoers.pod: document timestampowner
7833 2002-05-04 20:45 millert
7835 * check.c: Don't call set_perms() when doing timestamp stuff unless
7838 2002-05-04 20:43 millert
7840 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7841 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7844 2002-05-03 18:48 millert
7846 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7847 timestamp dirs. This allows the timestamp dir to be shared via
7848 NFS (though this is not recommended).
7850 2002-05-03 18:47 millert
7852 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7853 of the authentication timestamp dir"
7855 2002-05-02 15:40 millert
7857 * env.c: Don't try to pre-compute the size of the new envp, just
7858 allocate space up front and realloc as needed. Changes to the
7859 new env pointer must all be made through insert_env() which now
7860 keeps track of spaced used and allocates as needed.
7862 2002-04-26 15:12 millert
7866 2002-04-26 15:12 millert
7868 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7870 2002-04-25 11:36 millert
7872 * INSTALL.binary, README: ++version
7874 2002-04-25 11:35 millert
7876 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7877 visudo.man.in, configure: regen
7879 2002-04-25 11:31 millert
7881 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7883 2002-04-25 11:30 millert
7885 * check.c: The the loop used to expand %h and %u, the lastchar
7886 variable was not being initialized. This means that if the last
7887 char in the prompt is '%' and the first char is 'h' or 'u' a
7888 extra copy of the host or user name would be copied, for which
7889 space had not been allocated.
7891 2002-04-18 11:41 millert
7893 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7896 2002-04-18 11:39 millert
7898 * auth/afs.c: #undef VOID to get rid of an AFS warning
7900 2002-04-18 11:38 millert
7902 * env.c: Use easprintf instead of emalloc + sprintf for some
7905 2002-03-15 19:45 millert
7909 2002-03-15 19:44 millert
7911 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7912 Jepeway's email address so people don't bug him ;-)
7914 2002-03-11 22:19 millert
7916 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7917 and also call endgrent() at the same time.
7919 2002-02-21 22:23 millert
7921 * INSTALL: Make it clear which configure options take arguments.
7923 2002-01-25 13:38 millert
7925 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7926 is no RLIM_INFINITY, just pretend it is -1. This works because
7927 we only check for RLIM_INFINITY and do not set anything to that
7930 2002-01-22 11:43 millert
7932 * auth/pam.c: Zero and free allocated memory when there is a
7935 2002-01-21 22:37 millert
7937 * auth/bsdauth.c: Use sigaction() not signal()
7939 2002-01-21 22:26 millert
7941 * INSTALL: Mention that some linux kernels have broken POSIX saved
7944 2002-01-21 21:03 millert
7946 * CHANGES: checkpoint for 1.6.5p2
7948 2002-01-21 21:01 millert
7952 2002-01-21 21:01 millert
7954 * configure.in: Add --disable-setreuid flag
7956 2002-01-21 21:00 millert
7958 * INSTALL: Document new --disable-setreuid option and change
7959 description for --disable-saved-ids to match new error message.
7961 2002-01-21 21:00 millert
7963 * set_perms.c: fatal() now takes an argument that determines
7964 whether or not to call perror().
7966 2002-01-21 20:58 millert
7968 * PORTING, TROUBLESHOOTING: Update for new error messages from
7971 2002-01-21 17:46 millert
7973 * auth/pam.c: Make this compile w/o warnings
7975 2002-01-21 17:36 millert
7977 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7979 2002-01-21 17:25 millert
7981 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7982 was not zeroed after use when AIX authentication, BSD
7983 authentication, FWTK or PAM was in use.
7985 2002-01-20 14:21 millert
7987 * auth/pam.c: Avoid giving PAM a NULL password response, use the
7988 empty string instead. This avoids a log warning when the user
7989 hits ^C at the password prompt when PAM is in use.
7991 2002-01-19 19:46 millert
7993 * auth/pam.c: Don't check the return value of pam_setcred(). In
7994 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7995 not the return code for the setcred module. Because we haven't
7996 called pam_authenticate(), this is not set and so pam_setcred()
7997 returns PAM_PERM_DENIED.
7999 2002-01-19 19:43 millert
8001 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
8004 2002-01-18 14:18 millert
8008 2002-01-18 14:18 millert
8010 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
8011 has a bogus setreuid() o new NetBSD has a real setreuid() o add
8012 check for freeifaddrs() if getifaddrs() exists.
8014 2002-01-18 14:17 millert
8016 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
8017 so add a test for that and if it is not present just use free().
8019 2002-01-17 11:30 millert
8021 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
8023 2002-01-17 10:56 millert
8025 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
8026 skeyaccess() denies access to normal passwords, not AUTH_FATAL
8027 (which just causes an exit).
8029 2002-01-17 10:35 millert
8031 * visudo.c: Don't use memory after it has been freed.
8033 2002-01-17 00:24 millert
8035 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
8036 Patch from Phillip E. Lobbes
8038 2002-01-16 20:00 millert
8042 2002-01-16 19:53 millert
8044 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
8046 2002-01-16 18:37 millert
8050 2002-01-16 18:37 millert
8052 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
8055 2002-01-16 18:37 millert
8057 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8058 visudo.man.in: sudo version 1.6.5
8060 2002-01-16 16:28 millert
8062 * logging.c: o when invoking the mailer as root use a hard-coded
8063 environment that doesn't include any info from the user's
8064 environment. Basically paranoia.
8066 o Add support for the NO_ROOT_MAILER compile-time option and run
8067 the mailer as the user and not root if NO_ROOT_MAILER is
8070 2002-01-16 16:27 millert
8072 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
8074 2002-01-16 16:26 millert
8078 2002-01-16 16:26 millert
8080 * version.h: version 1.6.5
8082 2002-01-16 16:26 millert
8084 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
8085 option to run the mailer as the user and not root.
8087 2002-01-16 12:44 millert
8089 * CHANGES: checkpoint for 1.6.4p2
8091 2002-01-15 19:22 millert
8093 * PORTING: Mention the "seteuid(0): Operation not permitted"
8094 problem here too just for good measure.
8096 2002-01-15 18:43 millert
8098 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
8099 preserved from the user's environment instead of being reset
8100 based on the passwd database when the "env_reset" option was
8101 used. Now it is reset as it should be.
8103 2002-01-15 17:47 millert
8107 2002-01-15 17:47 millert
8109 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8110 sudo.c: Add a configure option to turn off use of POSIX saved IDs
8112 2002-01-15 15:48 millert
8116 2002-01-15 15:48 millert
8118 * configure.in: add --with-efence option
8120 2002-01-15 15:39 millert
8122 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8123 problem where "sudo -l" would not work if always_set_home was
8126 2002-01-15 13:16 millert
8130 2002-01-15 13:16 millert
8132 * parse.lex: Quoted commas were not being treated correctly in
8133 command line arguments.
8135 2002-01-14 20:53 millert
8137 * sudo.c: o Move the call to rebuild_env() until after
8138 MODE_RESET_HOME is set. Otherwise, the set_home option has no
8141 o Fix use of freed memory when the "fqdn" flag is set. This was
8142 introduced by the fix for the "segv when gethostbynam() fails"
8143 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8144 not set so there is no need to check the "fqdn" flag in
8147 2002-01-14 20:45 millert
8149 * env.c: Add 'continue' statements to optimize the switch
8150 statement. From Solar.
8152 2002-01-13 13:42 millert
8154 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8156 2002-01-13 13:36 millert
8158 * sudoers.pod: Add caveat about stay_setuid flag
8160 2002-01-13 13:29 millert
8162 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8163 is not set, set all uids to 0 and use set_perms_fallback().
8165 2002-01-13 13:28 millert
8167 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8168 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8170 2002-01-13 13:27 millert
8172 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8173 mailer since we never want to run the mailer setuid.
8175 2002-01-12 17:55 millert
8177 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8178 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8180 2002-01-12 14:00 millert
8182 * Makefile.in, Makefile.binary: Fix mansect substitution
8184 2002-01-12 13:15 millert
8186 * Makefile.in: Substitute man sections in Makefile.binary
8188 2002-01-12 13:15 millert
8190 * Makefile.binary: Sync install targets with Makefile.in and
8191 substitute in man sections.
8193 2002-01-12 13:09 millert
8195 * INSTALL, INSTALL.binary: version is 1.6.4
8197 2002-01-12 12:59 millert
8199 * Makefile.in: Repair bindist target
8201 2002-01-12 11:43 millert
8203 * CHANGES: sync for 1.6.4
8205 2002-01-10 13:00 millert
8207 * install-sh: Fix case where neither whoami nor id are found
8209 2002-01-09 12:35 millert
8211 * install-sh: If neither whoami nor id exists, just assume we are
8214 2002-01-09 11:56 millert
8216 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8217 to be needed on AIX which for some reason isn't pulling in the
8220 2002-01-08 10:00 millert
8222 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8224 2002-01-08 09:21 millert
8226 * CHANGES: checkpoint
8228 2002-01-08 09:20 millert
8230 * sudo.c: Defer assigning new environment until right before the
8233 2002-01-08 09:08 millert
8235 * parse.c: kill extra blank line
8237 2002-01-07 13:59 millert
8241 2002-01-07 13:59 millert
8243 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8244 motorola gcc-derived compiler doesn't recognise -O2.
8246 2002-01-06 23:02 millert
8248 * HISTORY: Clarify origins of Root Group sudo a bit based on info
8249 from billp@rootgroup.com
8251 2002-01-02 22:41 millert
8255 2002-01-02 22:26 millert
8257 * CHANGES: checkpoint for 1.6.4rc1
8259 2002-01-02 17:40 millert
8261 * config.h.in: now generated via autoheader
8263 2002-01-02 17:40 millert
8267 2002-01-02 17:37 millert
8269 * compat.h: Move in some stuff that was previously in config.h.
8271 2002-01-02 17:36 millert
8273 * configure.in, aclocal.m4: Add info for autoheader.
8275 2002-01-01 16:53 millert
8277 * Makefile.in: o Add DESTDIR support
8278 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8281 2002-01-01 16:48 millert
8283 * install-sh: Add -M option (like -m but only for root) If we can't
8284 find "whoami", use "id" w/ some sed.
8286 2002-01-01 14:01 millert
8290 2002-01-01 14:00 millert
8292 * configure.in: allow user to always override mansectsu and
8295 2001-12-31 17:05 millert
8297 * mkinstalldirs: update from autoconf 2.52
8299 2001-12-31 17:03 millert
8301 * config.guess, config.sub: Update from autoconf 2.52
8303 2001-12-31 16:57 millert
8305 * configure: regen with autoconf 2.52
8307 2001-12-31 16:57 millert
8309 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8310 compiler in ANSI mode
8311 o Remove compiler-specific checks for HP-UX now that we use
8314 2001-12-31 12:19 millert
8316 * RUNSON: Checkpoint
8318 2001-12-31 12:18 millert
8320 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8321 for the target user; on Linux this often sets resource limits.
8322 o When calling pam_end(), try to convert the auth->result to a
8323 PAM_FOO value. This is a hack--we really need to stash the
8324 last PAM_FOO value received and use that instead.
8326 2001-12-31 12:18 millert
8328 * set_perms.c, sudo.h: o Add pam_prep_user function to call
8329 pam_setcred() for the target user; on Linux this often sets
8332 2001-12-31 00:53 millert
8334 * env.c: Fix off by one error in number of bytes allocated via
8335 malloc (does not affected any released version of sudo).
8337 2001-12-30 17:12 millert
8341 2001-12-30 17:12 millert
8343 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8344 variable w/o requiring that they be quoted.
8346 2001-12-30 14:26 millert
8348 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8349 quotes are needed when adding/deleting/assigning a single value
8352 2001-12-30 13:58 millert
8354 * Makefile.in: Don't rely on mkdefaults being executable, call perl
8357 2001-12-30 13:41 millert
8359 * parse.yacc: Remove some XXX that are no longer relevant.
8361 2001-12-30 13:40 millert
8363 * defaults.c: o Roll our own loop instead of using strpbrk() for
8364 better grokability o When adding to a list we must malloc() and
8365 use memcpy(), not strdup() since we must only copy len bytes
8368 2001-12-21 16:49 millert
8370 * parse.yacc: typo in comment
8372 2001-12-19 11:50 millert
8374 * CHANGES: checkpoint
8376 2001-12-19 10:56 millert
8380 2001-12-19 10:56 millert
8382 * configure.in: avoid the -g flag unless --with-devel was specified
8384 2001-12-19 10:04 millert
8386 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8389 2001-12-19 09:46 millert
8391 * Makefile.in: def_data.c was missing
8393 2001-12-18 12:42 millert
8395 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8396 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8399 2001-12-17 20:48 millert
8401 * TODO: Another TODO item
8403 2001-12-17 19:50 millert
8405 * sudoers: Add comment for Default section so folks know where it
8408 2001-12-17 18:56 millert
8410 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8413 2001-12-17 18:35 millert
8415 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8417 2001-12-17 18:33 millert
8419 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8420 o a User_List can not contain a uid
8421 o mention that the Defaults section should come after Alias
8422 definitions but before the user specifications
8424 2001-12-15 11:51 millert
8426 * sudoers.cat, sudoers.man.in: regen
8428 2001-12-15 11:51 millert
8430 * sudoers.pod: Fix listpw and verifypw sections, they were not
8431 being formatted properly.
8433 2001-12-15 11:39 millert
8435 * sudoers.cat, sudoers.man.in: regen
8437 2001-12-15 11:38 millert
8439 * sudoers.pod: fix typos
8441 2001-12-15 10:57 millert
8445 2001-12-15 10:57 millert
8447 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8450 2001-12-15 10:33 millert
8452 * README: Reference sudo.ws not courtesan.com
8454 2001-12-15 10:29 millert
8456 * PORTING: Add notes on shadow passwords
8458 2001-12-15 00:48 millert
8460 * BUGS: In list mode (sudo -l), characters escaped with a backslash
8461 are shown verbatim with the backslash.
8463 2001-12-15 00:44 millert
8465 * sudoers: Add simple examples from OpenBSD (Marc Espie)
8467 2001-12-15 00:40 millert
8469 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8472 2001-12-14 21:53 millert
8474 * CHANGES: minor prettyification
8476 2001-12-14 21:43 millert
8478 * CHANGES: Updated change log
8480 2001-12-14 21:27 millert
8482 * testsudoers.c: Fix CIDR handling here too.
8484 2001-12-14 21:21 millert
8486 * auth/pam.c: Apparently a NULL response is OK
8488 2001-12-14 21:19 millert
8490 * TODO: Checkpoint for upcoming beta release
8492 2001-12-14 21:17 millert
8494 * TROUBLESHOOTING: Many people believe that adding a runas spec
8495 should obviate the need for the -u flag. It does not.
8497 2001-12-14 21:11 millert
8499 * RUNSON: checkpoint update for upcoming 1.6.4 beta
8501 2001-12-14 20:44 millert
8503 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8504 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8507 2001-12-14 20:07 millert
8509 * PORTING: Add signals section
8511 2001-12-14 20:00 millert
8515 2001-12-14 20:00 millert
8517 * configure.in: Fix check for sigaction_t
8519 2001-12-14 19:45 millert
8521 * sudo.c: XXX - should call find_path() as runas user, not root.
8522 Can't do that until the parser changes though.
8524 2001-12-14 19:38 millert
8526 * sudo.c: If find_path() fails as root, try again as the invoking
8527 user (useful for NFS). Idea from Chip Capelik.
8529 2001-12-14 19:28 millert
8531 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8532 after pod file changes
8534 2001-12-14 19:24 millert
8536 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8537 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8538 Previously sudo would not call initgroups() if the target user
8539 was root. Now it always calls initgroups() unless the -P command
8540 line option or the "preserve_groups" sudoers option is set. Idea
8543 2001-12-14 18:38 millert
8545 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8547 2001-12-14 18:33 millert
8549 * logging.c: Fix compilation on K&C
8551 2001-12-14 18:14 millert
8555 2001-12-14 18:14 millert
8557 * configure.in: Add check for sigaction_t -- IRIX already defines
8558 this so don't redefine it.
8560 2001-12-14 17:15 millert
8562 * snprintf.c: fix typo
8564 2001-12-14 17:12 millert
8566 * interfaces.c: need stdlib.h here too
8568 2001-12-14 15:31 millert
8572 2001-12-14 15:31 millert
8574 * configure.in: Remove redundant checks for string.h, strings.h and
8577 2001-12-14 15:29 millert
8579 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8580 visudo.man.in: Regen from pod files
8582 2001-12-14 15:03 millert
8584 * BUGS: Update for 1.6.4
8586 2001-12-14 14:59 millert
8588 * configure, lex.yy.c: regen
8590 2001-12-14 14:56 millert
8592 * strerror.c: Return EINVAL if errnum > sys_nerr
8594 2001-12-14 14:54 millert
8596 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8597 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8598 sudo.pod, auth/sudo_auth.h: o Update copyright year
8600 2001-12-14 14:54 millert
8602 * configure.in: o Don't define STDC_HEADERS unconditionally for
8603 IRIX o Update copyright year
8605 2001-12-14 14:53 millert
8607 * README: update version
8609 2001-12-14 14:52 millert
8611 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8612 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8613 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8614 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8615 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8616 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8617 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8618 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8619 STDC_HEADERS define properly o Update copyright year
8621 2001-12-14 01:53 millert
8625 2001-12-14 01:53 millert
8627 * tgetpass.c: flags set in signal handlers should be volatile
8630 2001-12-14 01:52 millert
8632 * config.h.in, configure.in: Add checks for volatile and
8635 2001-12-14 01:42 millert
8637 * lex.yy.c, configure: regen
8639 2001-12-14 01:40 millert
8641 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8642 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8643 option since it cannot work with the existing parser.
8645 2001-12-14 01:26 millert
8647 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8649 2001-12-14 01:24 millert
8651 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8652 not listed in env_keep o If no PATH is in the environment use a
8653 default value o If TERM is not set in the non-reset case also
8654 give it a default value.
8656 2001-12-14 01:17 millert
8658 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8659 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8660 on systems that define in paths.h
8662 2001-12-14 01:15 millert
8664 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8665 skeyaccess(3) if it is present in libskey.
8667 2001-12-12 21:42 millert
8669 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8671 2001-12-12 21:24 millert
8673 * parse.lex: '\\' is a perfectly legal character to have in a
8674 command line argument.
8676 2001-12-12 20:24 millert
8678 * sudo.c: o Defer call to set_fqdn() until it is safe to use
8679 log_error() o Don't print errno string value if gethostbyname
8680 fails, it is not relevant
8682 2001-12-12 20:07 millert
8684 * parse.c: Fix CIDR -> in_addr_t conversion.
8686 2001-12-12 16:21 millert
8688 * sudoers.pod: Remove an extra "User_List" in the User_Spec
8689 definition From ybertrand AT snoopymail.com
8691 2001-12-12 16:00 millert
8693 * parse.c: Make 'listpw=never' work for users who are not
8694 explicitly mentioned in sudoers.
8696 2001-12-12 15:40 millert
8698 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8700 2001-12-12 15:34 millert
8702 * sudoers.pod: Document new list Defaults type and convert env_keep
8703 and env_delete to lists. Document new env_check option.
8705 2001-12-12 15:11 millert
8707 * lex.yy.c, sudo.tab.h: regen parser
8709 2001-12-12 14:56 millert
8711 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8712 a Runas spec to #[0-9-]+.
8714 2001-12-12 14:55 millert
8718 2001-12-12 14:55 millert
8720 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8722 2001-12-12 14:43 millert
8724 * config.h.in, configure.in: Add check for skeyaccess(3)
8726 2001-12-11 19:47 millert
8728 * visudo.pod: Document new -c, -f, and -q options
8730 2001-12-11 19:41 millert
8732 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8735 2001-12-11 19:31 millert
8739 2001-12-11 19:31 millert
8741 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8742 a replacement macro if it doesn't exist.
8744 2001-12-11 18:22 millert
8746 * visudo.c: In check-only mode, don't create sudoers if it does not
8749 2001-12-11 18:06 millert
8751 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8753 o Add support for "+=" and "-=" list operators
8754 o replace some 1 and 0 with TRUE and FALSE for greater
8757 2001-12-11 18:05 millert
8759 * parse.lex: o Use exclusive start conditions to remove some
8761 lexer. Also reorder some things for clarity.
8762 o Add support for "+=" and "-=" list operators.
8763 o Use the new DEFVAR token to denote a Defaults variable name.
8765 2001-12-11 18:03 millert
8767 * sudo.h: Prototype init_envtables()
8769 2001-12-11 18:02 millert
8771 * env.c: o Convert environment handling to use lists instead of
8773 This greatly simplifies routines that need to do "foreach"
8776 o Add new init_envtables() function to set env_check and
8778 defaults based on initial_badenv_table and
8779 initial_checkenv_table
8780 (formerly sudo_badenv_table).
8782 2001-12-11 18:00 millert
8784 * defaults.c, defaults.h: o Add a new LIST type and functions to
8786 o This is for use with environment handling variables.
8787 o Call new init_envtables() routine inside init_defaults() to
8788 initialize the environment lists.
8790 2001-12-11 17:57 millert
8792 * def_data.c, def_data.h, def_data.in: Convert environment options
8793 to use the new LIST type and add a new one, env_check that only
8794 deletes if the sanity check fails.
8796 2001-12-11 17:55 millert
8798 * testsudoers.c: Add dummy version of init_envtables()
8800 2001-12-11 17:53 millert
8802 * parse.yacc: honor quiet mode
8804 2001-12-11 17:51 millert
8806 * visudo.c: Add check-only mode
8808 2001-12-10 20:27 millert
8810 * mkdefaults: Fix generation of entries with NULL descriptions.
8812 2001-12-09 00:27 millert
8814 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8816 2001-12-09 00:20 millert
8818 * sudo.c: Must reset signal handlers before we exec
8820 2001-12-09 00:16 millert
8822 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8823 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8824 version needs testing. Set SIGTSTP to SIG_DFL during password
8825 entry so user can suspend us.
8827 2001-12-09 00:14 millert
8829 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8830 keyboard input. If you suspend sudo from the password prompt and
8831 resume it will re-prompt you.
8833 2001-12-09 00:09 millert
8835 * sudo.c: Don't block keyboard interrupt signals, just set them to
8838 2001-12-08 14:48 millert
8840 * config.h.in: add back HAVE_SIGACTION
8842 2001-12-08 14:44 millert
8846 2001-12-08 14:44 millert
8848 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8849 POSIX_SIGNALS define and old signal support now that we emulate
8850 POSIX ones Also be sure to correctly initialize struct sigaction.
8852 2001-12-08 14:42 millert
8854 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8857 2001-12-08 14:39 millert
8859 * compat.h: Add scaffolding for POSIX signal emulation
8861 2001-12-08 14:36 millert
8863 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8864 since we don't include stdio.h
8866 2001-12-08 14:23 millert
8868 * sigaction.c: Emulate sigaction() using sigvec()
8870 2001-11-12 19:32 millert
8872 * sudoers.pod: Document new behavior of negative values of
8873 timestamp_timeout Fix a typo
8875 2001-11-12 19:31 millert
8877 * sudo.pod: Add security note about command not being logged after
8878 'sudo su' and friends.
8880 2001-11-12 19:19 millert
8882 * sudo.pod: Mention that -V prints default values when run as root,
8883 including the list of environment variables to clear.
8885 2001-11-12 19:14 millert
8887 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8888 quoting of C<> entries.
8890 2001-11-12 13:12 millert
8892 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8893 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8894 behavior to also send mail when the password is wrong
8896 2001-11-12 13:08 millert
8898 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8901 2001-11-11 23:52 millert
8903 * sudoers.pod: document env_delete
8905 2001-11-11 23:51 millert
8907 * env.c: Add support for '*' in env_keep when not resetting the
8908 environment (ie: the normal case).
8910 2001-11-11 23:47 millert
8912 * env.c: Add env_delete variable that lets the user replace/add to
8913 the bad_env_table. Allow '*' wildcard in env_keep entries.
8915 2001-11-06 13:59 millert
8917 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8920 2001-11-02 18:09 millert
8922 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8925 2001-11-02 17:25 millert
8927 * mkdefaults: fix breakage in last commit
8929 2001-11-02 17:18 millert
8931 * Makefile.in: acsite.m4 -> aclocal.m4
8933 2001-11-02 15:59 millert
8935 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8938 2001-11-02 15:57 millert
8940 * def_data.c: regenerated from def_data.in
8942 2001-11-02 15:56 millert
8944 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8945 things use instead of T_INT If timestamp_timeout is < 0 then
8946 treat the ticket as never expiring (to be expired manually by the
8949 2001-11-02 15:51 millert
8951 * def_data.in: change most T_INT -> T_UINT
8953 2001-11-02 15:51 millert
8955 * mkdefaults: fix warning when no args
8957 2001-11-02 12:52 millert
8959 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8960 call _exit() if we are a signal handler. We no longer print the
8961 signal number but the user can just check the exit value for
8964 2001-10-16 01:35 millert
8966 * logging.c: when setting up pipes in child process check for case
8967 where stdin == pipe fd 0
8969 2001-10-11 13:20 millert
8971 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8972 value is the count of editing errors made (failed searches, etc).
8974 2001-10-05 16:39 millert
8978 2001-10-05 16:39 millert
8980 * configure.in: sco now is identified by config.guess as *-sco-*
8982 2001-10-05 16:24 millert
8984 * configure.in: Check for getspnam() in -lgen if not in -lc for
8987 2001-09-17 21:48 millert
8989 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8991 2001-09-17 21:32 millert
8993 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8995 2001-08-28 10:26 millert
8997 * sudoers.pod: Missing word (specify); krapht@secureops.com
8999 2001-08-23 17:43 millert
9001 * sudo.c: If we fail to lookup a login class, apply the default
9004 2001-08-23 17:42 millert
9006 * logging.c: In log_error() free message, not logline
9007 unconditionally, then free logline if it is not the same as
9008 message. No function change but this mirrors how they are
9011 2001-07-16 23:33 millert
9013 * configure: regenerate
9015 2001-07-16 23:33 millert
9017 * configure.in: remove some backslash quotes that are unneeded
9019 2001-07-16 23:30 millert
9021 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
9022 AC_LIBOBJ instead of changing LIBOBJS directly o Use
9023 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
9024 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
9026 2001-07-16 23:28 millert
9028 * config.guess, config.sub: Updated from autoconf-2.50
9030 2001-05-22 19:11 millert
9032 * README: Update mailing list section. We use mailman now, not
9035 2001-05-10 14:55 millert
9037 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
9038 the shadow variants to make sure we don't inadvertantly leak an
9039 fd to the child. Apparently Linux's shadow routines leave the fd
9040 open even if you don't call setspent(). Reported by
9041 mike@gistnet.com; different patch used.
9043 2001-04-12 21:43 millert
9045 * sudoers.pod: s/eg./e.g./
9047 2001-04-12 21:42 millert
9049 * tgetpass.c: select() may return EAGAIN. If so, continue like we
9052 2001-04-12 21:41 millert
9054 * logging.c: Fix a non-exploitable buffer overflow in the word
9055 splitting code. This should really be rewritten.
9057 2001-04-12 21:41 millert
9059 * Makefile.in: FAQ link goes away
9061 2001-04-12 21:40 millert
9063 * INSTALL: Tell people to look in sample.syslog.conf for examples,
9066 2001-04-12 21:40 millert
9068 * TROUBLESHOOTING: Update list of env vars that are cleared
9070 2001-04-12 21:36 millert
9072 * sudo.c: remove struct env_table decl since that stuff has all
9075 2001-04-04 13:17 millert
9077 * fileops.c: Fix a pasto in flock-style unlocking and include
9078 <sys/file.h> for flock on older systems; twetzel@gwdg.de
9080 2001-04-04 13:14 millert
9082 * configure: regen to get NeXT lockf/flock fix
9084 2001-04-04 13:14 millert
9086 * configure.in: force NeXT to use flock since lockf is broken
9088 2001-03-30 08:54 millert
9090 * check.c: Use stashed user_gid when checking against exempt gid
9091 since sudo sets its gid to a a value that makes sudoers readable.
9092 Previously if you used gid 0 as the exempt group everyone would
9093 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
9095 2001-03-29 13:14 millert
9099 2001-03-29 13:08 millert
9101 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
9102 aparently defines some types (such as ssize_t) therein.
9104 2001-03-02 09:09 millert
9106 * defaults.c: Fix negation of paths in a boolean context. Problem
9109 2001-02-23 13:03 millert
9113 2001-02-17 16:11 millert
9115 * visudo.c: SA_RESETHAND means the opposite of what I was
9116 thinking--oops To block all signals in old-style signals use ~0,
9119 2001-02-04 11:16 millert
9121 * defaults.c: coerce difference of pointers to int when used in a
9122 string length printf format; deraadt@openbsd.org
9124 2001-01-17 11:34 millert
9126 * visudo.c: Block all signals in Exit() to avoid a signal race.
9127 There is still a tiny window but I'm not going to worry about it.
9129 2001-01-07 13:57 millert
9131 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9134 2001-01-07 13:55 millert
9136 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9137 from clobbering by isatty().
9139 2000-12-30 20:39 millert
9141 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9142 Some defaults I_ defines got renamed.
9144 2000-12-30 20:38 millert
9146 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9147 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9148 set_perms.c, sudo.c: Move defaults info into its own files from
9149 which we generate .h and .c files. This makes adding or
9150 rearranging variables much simpler.
9152 2000-12-30 16:58 millert
9154 * configure, configure.in: fix typo in last commit
9156 2000-12-30 16:55 millert
9158 * compat.h, config.h.in, configure, configure.in: Add check +
9159 emulation for setegid (like seteuid).
9161 2000-12-30 16:22 millert
9163 * env.c: Make env_keep override badenv_table as documented Fix
9164 traversal of badenv_table (broken in last commit)
9166 2000-12-29 22:59 millert
9168 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9169 version of set_perms on systems w/o them. Rename
9170 set_perms_saved_uid() -> set_perms_posix() Make
9171 set_perms_setreuid simply be set_perms_fallback() and simply
9172 include the appropriate function at compile time (setreuid()
9175 2000-12-29 22:45 millert
9177 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9178 when env_reset is in effect
9180 2000-12-29 22:29 millert
9182 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9183 configure, configure.in, defaults.c, defaults.h, find_path.c,
9184 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9185 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9186 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9187 options: o stay_setuid - sudo will remain setuid if system has
9188 saved uids or setreuid(2) o env_reset - reset the environment to
9189 a sane default o env_keep - preserve environment variables that
9190 would otherwise be cleared
9192 No longer use getenv/putenv/setenv functions--do environment
9193 munging by hand. Potentially dangerous environment variables can
9194 be cleared only if they contain '/' pr '%' characters to protect
9195 buggy programs. Moved environment routines into env.c (new file)
9197 2000-12-29 22:17 millert
9199 * INSTALL: Clear up --without-passwd description
9201 2000-12-29 19:39 millert
9203 * sudo_setenv.c, putenv.c: We now build up a new environment from
9204 scratch and assign it to "environ".
9206 2000-12-18 22:35 millert
9208 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9210 2000-12-14 23:19 millert
9212 * visudo.c: If there was a syntax error and the user just wants to
9213 quit, unlink sudoers if it is zero length.
9215 2000-12-14 23:10 millert
9217 * visudo.c: 'Q' means ignore parse error, not 'q'
9219 2000-12-14 22:57 millert
9221 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9222 Dimitry Andric <dim@xs4all.nl>
9224 2000-12-13 12:23 millert
9226 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9229 2000-12-09 11:46 millert
9231 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9232 Sanchez <wsanchez@apple.com>
9234 2000-11-03 09:36 millert
9236 * sudo.c, visudo.c: Use exit(127), not exit(-1)
9238 2000-11-03 00:37 millert
9240 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9241 set_perms() to its own file and use POSIX saved uid or setreuid()
9244 Added stay_setuid option for systems that have libraries that
9245 perform extra paranoia checks in system libraries for setuid
9246 programs (ie: anything with issetugid(2)).
9248 2000-11-02 20:28 millert
9250 * sudo.c: strip more bits from the environment and add a facility
9251 for stripping things only if they contain '/' or '%' to address
9252 printf format string vulnerabilities in other programs.
9254 2000-11-02 12:55 millert
9258 2000-11-02 12:55 millert
9260 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9261 the existence of strcasecmp().
9263 2000-11-02 12:46 millert
9267 2000-11-02 12:46 millert
9269 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9271 2000-11-01 10:22 millert
9273 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9275 2000-11-01 10:17 millert
9279 2000-11-01 10:17 millert
9281 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9282 since NCR systems have that instead of innetgr(3).
9284 2000-10-31 14:16 millert
9286 * auth/securid.c: check return value of creadcfg() call sd_close()
9287 after sd_auth() store username in sd->username so we don't rely
9288 on the USER env variable
9290 2000-10-29 23:00 millert
9292 * INSTALL: document --with-bsdauth
9294 2000-10-29 22:57 millert
9298 2000-10-29 22:56 millert
9300 * configure.in: --with-bsdauth assumes --with-logincap
9302 2000-10-29 22:45 millert
9304 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9305 challenge, if the user just hits return then reprompt with echo
9308 2000-10-29 17:31 millert
9310 * sudo.c: Remove debugging code that should not have been
9313 2000-10-29 17:31 millert
9315 * auth/bsdauth.c: Use lower-level routines and get the password
9316 ourselves. Checks for a challenge and if there is one echo is
9319 2000-10-29 17:30 millert
9321 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9324 2000-10-27 18:41 millert
9326 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9327 fails by deferring the call to log_error() until things are
9330 Fix return value of set_loginclass() in non-BSD-auth case.
9332 Hard-code 'sudo' in the usage message so we can fit more options
9335 2000-10-27 18:35 millert
9337 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9339 2000-10-26 13:03 millert
9341 * sudo.cat, sudo.man.in: regen
9343 2000-10-26 13:01 millert
9345 * sudo.pod: Document -a flag
9347 2000-10-26 12:42 millert
9349 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9350 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9353 2000-10-19 10:09 millert
9355 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9357 2000-10-12 09:49 millert
9359 * sudoers.pod: Mention negating umask
9361 2000-10-12 01:30 millert
9363 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9365 2000-10-08 21:46 millert
9367 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9370 2000-10-08 12:25 millert
9372 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9374 2000-09-14 16:48 millert
9376 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9377 alloc failure instead of returning -1.
9379 2000-09-07 17:41 millert
9381 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9382 for FreeBSD and possibly others.
9384 2000-09-07 10:43 millert
9386 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9387 it. This means that "%m" won't be expanded but we don't use that
9388 anyway since the logging routines may splat to stderr as well.
9390 2000-09-06 21:35 millert
9392 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9393 sudoers.pod: Add always_set_home variable
9395 2000-09-06 21:24 millert
9397 * configure, configure.in: Have to hard code default values in help
9398 since the defaults are set _after_ the help stuff.
9400 2000-08-31 13:08 millert
9402 * lex.yy.c, parse.lex: Allow special characters (including '#') to
9403 be embedded in pathnames if quoted by a '\\'. The quoted chars
9404 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9407 2000-08-13 17:10 millert
9409 * install-sh: Better path searching for programs we need.
9411 2000-08-13 17:10 millert
9413 * TROUBLESHOOTING: Add section on "C compiler cannot create
9414 executables" errors.
9416 2000-08-13 17:10 millert
9418 * Makefile.binary, Makefile.in, version.h: Crank version
9420 2000-08-13 17:09 millert
9422 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9423 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9424 visudo.man.in, visudo.pod: Substitute values from configure into
9427 2000-08-12 16:48 millert
9429 * parse.c, sudo.c: The listpw and verifypw sudoers options would
9430 not take effect because the value of the default was checked
9431 *before* sudoers was parsed. Instead of passing in the value of
9432 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9433 the check can be deferred until after sudoers is parsed.
9435 2000-08-11 15:41 millert
9437 * tgetpass.c: When writing prompt, no need to write the NUL as
9438 well; hag@linnaean.org
9440 2000-06-09 12:25 millert
9442 * install-sh: When looking for chown, check in /sbin too
9444 2000-06-04 22:57 millert
9446 * visudo.c: Remove extraneous call to init_defaults() and set
9447 runas_user to NULL betweem parses so init_defaults will reset it
9448 each time, thus avoiding a reference to free()d data.
9450 2000-06-04 19:57 millert
9452 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9453 using getifaddrs() to get the list of ip addr / netmask pairs.
9454 Currently IPv4-only.
9456 2000-06-04 19:51 millert
9458 * visudo.c: Add a missing check for UserEditor == NULL Add missing
9459 '+' before line number when invoking editor to fix a syntax error
9461 2000-05-12 16:55 millert
9463 * sudo.c: Call clean_env very early in main() for paranoia's sake.
9464 Idea from Marc Esipovich.
9466 2000-05-10 01:11 millert
9468 * sudo.h: Update proto for evasprintf and easprintf
9470 2000-05-10 01:10 millert
9472 * alloc.c: Make easprintf() and evasprintf() return an int.
9474 2000-05-10 00:56 millert
9476 * check.c: If the targetpw flag is set, use target username as part
9477 of the timestamp path. If tty tickets are in effect cat the tty
9478 and the target username with a ':' as the separator.
9480 2000-05-09 12:05 millert
9482 * auth/pam.c: Backout part of last change; setting PAM_USER to the
9483 invoking user breaks things like targetpw.
9485 2000-05-09 11:52 millert
9487 * auth/pam.c: set tty and username via pam_set_item
9489 2000-05-09 11:42 millert
9491 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9492 runas, and target authentication for non-passwd file auth
9495 2000-04-22 14:15 millert
9497 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9498 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9499 C<-Z> for command line flags in all places. This is more
9500 consistent and works around a bug in Pod::Man.
9502 2000-04-22 13:59 millert
9504 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9505 'semicolon' that should be 'colon'
9507 2000-04-19 15:30 millert
9509 * configure, configure.in: Fix --with-badpri help line
9511 2000-04-17 14:01 millert
9513 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9514 openlog() and closelog() since some authentication methods (like
9515 PAM) may do their own logging via syslog. Since we don't use
9516 syslog much (usually just once per session) this doesn't really
9517 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9519 2000-04-15 16:32 millert
9521 * sudo.c: Fix -H flag. runas_homedir is only valid after
9522 set_perms(PERM_RUNAS, mode)
9524 2000-04-12 18:56 millert
9526 * INSTALL: Clarify the fact that insults are not enabled just by
9527 including them in the binary.
9529 2000-04-07 10:39 millert
9531 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9532 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9534 2000-04-07 10:38 millert
9536 * Makefile.in: Give date string to pod2man since its default is
9537 ugly and it ain't got no alibi.
9539 2000-04-07 10:27 millert
9541 * Makefile.in: Do section substitution on the output of pod2man and
9542 remove hack needed for old pod2man.
9544 2000-04-07 10:26 millert
9546 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9547 will do the substitution later.
9549 2000-04-02 11:44 millert
9551 * configure, configure.in: Don't bother checking for the path to vi
9552 if user specified --with-editor
9554 2000-04-01 17:25 millert
9556 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9559 2000-04-01 16:23 millert
9561 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9562 sudoers.pod, visudo.c: Visudo now checks for the existence of an
9563 editor and gives a sensible error if it does not exist.
9565 The path to the editor for visudo is now a colon-separated list
9566 of allowable editors. If the user has $EDITOR set and it matches
9567 one of the allowed editors that editor will be used. If not, the
9568 first editor in the list that actually exists is used.
9570 2000-04-01 16:22 millert
9572 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9575 2000-03-27 12:08 millert
9577 * Makefile.in: Strip sudo and visudo for bindist target
9579 2000-03-26 22:26 millert
9581 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9582 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9583 @mansectsu@ and @mansectform@ in the man page bodies as well.
9585 2000-03-26 22:07 millert
9587 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9590 2000-03-26 21:57 millert
9592 * Makefile.in: 'make dist' should not cause any files to be
9593 modified so remove its dependencies.
9595 2000-03-26 21:43 millert
9597 * CHANGES: Whoops, forgot to add release marker
9599 2000-03-26 11:57 millert
9601 * CHANGES: Final change for 1.6.3 (or so I hope)
9603 2000-03-26 11:57 millert
9605 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9606 BSD systems will have nroff...
9608 2000-03-24 18:58 millert
9610 * parse.yacc: When checking to see if the host/user matches in a
9611 defaults spec, check against TRUE, not just non-zero since it
9614 2000-03-24 15:14 millert
9616 * configure.in, configure: OSF/1 puts file formats in section 4,
9619 2000-03-24 15:13 millert
9621 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9623 2000-03-23 20:24 millert
9625 * RUNSON: Update for 1.6.3
9627 2000-03-23 20:23 millert
9629 * configure, configure.in: If there is no inet_addr but there *is*
9630 an __inet_addr that's ok since inet_addr is probably just a macro
9631 then. The better thing to do would be to look for the macro, but
9632 this is fine for now.
9634 2000-03-23 19:50 millert
9636 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9638 2000-03-23 19:40 millert
9640 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9641 lives in $(srcdir), add a @mansrcdir@ configure variable so we
9642 can deal with this. Also, only remove *.man for 'distclean' not
9645 2000-03-23 19:16 millert
9647 * sudo.c: set_loginclass() should be static like the proto says
9649 2000-03-23 14:14 millert
9651 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9652 header to avoid promotion of test to int, thus violating the
9653 prototype. Gcc handles this gracefully but more std ANSI
9654 compilers will complain.
9656 2000-03-23 10:11 millert
9658 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9661 2000-03-23 10:11 millert
9663 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9664 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9667 2000-03-22 23:41 millert
9669 * CHANGES, TODO: update for 1.6.3
9671 2000-03-22 23:38 millert
9673 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9674 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9675 not matching the FQHOST token type. There's really no need for a
9676 separate token for fully-qualified vs. unqualified anymore so
9677 FQHOST is now history and hostname_matches now decides which
9678 hostname (short or long) to check based on whether or not the
9679 pattern contains a '.'.
9681 2000-03-22 23:09 millert
9683 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9684 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9687 2000-03-22 22:50 millert
9689 * Makefile.in: Add targets for *.man.in, using config.status to
9690 generate *.man from *.man.in
9692 2000-03-22 22:20 millert
9694 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9695 option and enbolden refs to sudo and visudo.
9697 2000-03-22 19:35 millert
9699 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9700 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9701 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9702 FreeBSD login.conf support (untested on BSD/OS) based on a patch
9703 from Michael D. Marchionna. configure now does substitution on
9704 the man pages, allowing us to fix up the paths and set the
9705 section correctly. Based on an idea from Michael D. Marchionna.
9707 2000-03-22 19:27 millert
9709 * auth/passwd.c: Better fix for handling HP-UX aging info.
9711 2000-03-22 19:20 millert
9713 * sudo.c: Add support for set_logname run-time default
9715 2000-03-22 19:17 millert
9717 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9718 substitution on these to produce *.man
9720 2000-03-22 19:16 millert
9722 * sudo.man, sudoers.man, visudo.man: These files now get generated
9723 from *.man.in at configure time.
9725 2000-03-22 18:40 millert
9727 * defaults.c, defaults.h: Add set_logname option so users can turn
9728 off setting of LOGNAME/USER environment variables.
9730 2000-03-22 10:53 millert
9732 * testsudoers.c, lsearch.c, parse.c: kill register
9734 2000-03-13 15:52 millert
9736 * auth/passwd.c: HP-UX adds extra info at the end for password
9737 aging so when comparing the result of crypt to pw_passwd we only
9738 compare the first len(epass) bytes *unless* the user entered an
9739 empty string for a password.
9741 2000-03-13 11:05 millert
9743 * logging.c: Get rid of grandchild hack, it was causing problems
9744 and there is really no need for it. This fixes a bug where we
9745 spin eating up CPU when the user runs a long-running process like
9748 2000-03-07 14:26 millert
9750 * sudo.c: User can always specify a login class if he/she is
9753 2000-03-06 23:29 millert
9755 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9756 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9758 2000-03-06 14:42 millert
9760 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9763 2000-03-03 18:04 millert
9765 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9766 encrypted password is exactly 13 characters (indicateing standard
9767 a DES password). Many versions of crypt() do this for you, but
9768 not all (like HP-UX's).
9770 2000-03-01 21:01 millert
9772 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9774 2000-02-29 17:46 millert
9776 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9779 2000-02-29 17:41 millert
9781 * defaults.c: Use Argv[0] as the first arg to openlog() since
9782 visudo uses this too.
9784 2000-02-28 18:58 millert
9786 * sudo.c: Stash coredumpsize resource limit and retsore it before
9787 the exec() Otherwise the child ends up with a coredumpsize of 0.
9789 2000-02-26 22:56 millert
9791 * sudo.cat, sudo.man, sudo.pod: document -S flag
9793 2000-02-26 22:54 millert
9795 * sudo.c: fix usage string
9797 2000-02-26 22:48 millert
9799 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9800 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9801 -S flag (read passwd from stdin) and tgetpass_flags global that
9802 holds flags to be passed in to tgetpass(). Change echo_off param
9803 to tgetpass() into a flags field. There are currently 2 possible
9804 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9805 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9806 but echo is not set on the terminal, but sure to set it.
9808 2000-02-26 22:11 millert
9810 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9811 password timeout was disabled.
9813 2000-02-18 12:56 millert
9815 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9816 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9817 runaspw, and targetpw options.
9819 2000-02-18 12:11 millert
9821 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9822 visudo.c: enveditor -> env_editor
9824 2000-02-15 19:07 millert
9826 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9827 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9828 visudo.cat, visudo.man: crank versino to 1.6.3
9830 2000-02-15 19:03 millert
9832 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9833 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9834 defaults and make visudo honor them. This means that visudo will
9835 now parse the sudoers file *before* it is edited so a bogus
9836 sudoers file will cause a warning to go to stderr. Also, visudo
9837 checks the variables once--it does not check them after each
9838 editor run since that could be confusing.
9840 2000-02-15 18:49 millert
9842 * RUNSON: 1.6.2 -> 1.6.2p1
9844 2000-02-15 18:36 millert
9846 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9849 2000-02-13 13:38 millert
9851 * configure, configure.in: Fix thinko, some && should have been ||
9854 2000-02-13 13:28 millert
9856 * configure, configure.in: Don't initialized Makefile variables to
9857 be NULL since the user may want to import variables from their
9860 2000-02-03 21:09 millert
9862 * configure, configure.in: typo
9864 2000-01-27 15:01 millert
9866 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9867 11.0;jaearick@colby.edu
9869 2000-01-27 15:01 millert
9871 * CHANGES: recent changes; prepare for 1.6.2p1
9873 2000-01-26 23:31 millert
9875 * find_path.c: Don't apply SECURE_PATH if user is example;
9878 2000-01-26 16:21 millert
9880 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9881 'defaults' options based on INSTALL file info.
9883 2000-01-26 16:21 millert
9885 * INSTALL: Fix some while lies
9887 2000-01-24 10:48 millert
9889 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9892 2000-01-23 22:57 millert
9894 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9896 2000-01-23 22:42 millert
9898 * RUNSON: Last minute updates
9900 2000-01-23 22:26 millert
9902 * TROUBLESHOOTING: PAM entry
9904 2000-01-23 22:23 millert
9906 * auth/pam.c: correct a comment
9908 2000-01-23 22:03 millert
9910 * CHANGES, RUNSON: update for 1.6.2
9912 2000-01-23 21:59 millert
9914 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9915 with PAM. Based on patches from "Cloyce D. Spradling"
9916 <cloyce@headgear.org>
9918 2000-01-20 11:15 millert
9920 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9921 to an unsigned long long value.
9923 2000-01-19 14:07 millert
9925 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9926 sudoers locking in visudo. We now lock the sudoers file itself,
9927 not the temp file (since locking the temp file can foul up
9928 editors). The previous locking scheme didn't work because the fd
9929 was closed too early.
9931 2000-01-19 13:37 millert
9933 * configure, config.h.in, configure.in: Don't need test for
9934 ftruncate() any more.
9936 2000-01-18 21:23 millert
9938 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9939 cc. Fixes compilation with the unbundled HP-UX cc.
9941 2000-01-18 17:00 millert
9943 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9944 Campbell <aaron@cs.dal.ca>
9946 2000-01-17 18:46 millert
9948 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9949 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9950 tgetpass.c, version.h, visudo.c: update copyright year on changed
9953 2000-01-17 18:45 millert
9957 2000-01-17 18:45 millert
9961 2000-01-17 18:42 millert
9963 * INSTALL: Crank version to 1.6.2
9965 2000-01-17 18:11 millert
9967 * configure: Crank version to 1.6.2
9969 2000-01-17 17:46 millert
9971 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9972 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9974 2000-01-17 12:32 millert
9976 * CHANGES: recent changes
9978 2000-01-17 12:28 millert
9980 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9981 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9982 Crank version to 1.6.2
9984 2000-01-17 12:25 millert
9986 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9987 'shell_noargs' runtime option back in. We have to defer checking
9988 until after the sudoers file has been parsed but since there are
9989 now other options that operate that way this one can too. Based
9990 on a patch from bguillory@email.com.
9992 2000-01-16 23:05 millert
9994 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9997 2000-01-16 22:57 millert
9999 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
10000 o Add section on verifypw and listpw o Define how NOPASSWD
10001 interacts with the -v and -l flags
10003 2000-01-14 12:39 millert
10005 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
10006 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
10008 2000-01-14 12:29 millert
10010 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
10011 to the end and don't initialize the union member since that only
10012 works with an ANSI compiler. We set the value of the union by
10013 hand in init_defaults() anyway. This allows sudo to compile on a
10014 K&R compiler again.
10016 2000-01-11 13:20 millert
10018 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
10019 netgr_matches needs to check shost as well as host since they may
10022 2000-01-11 13:17 millert
10024 * tgetpass.c: End on \r as well as \n
10026 2000-01-02 23:53 millert
10028 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
10029 chaning from 0400 to whatever SUDOERS_MODE is (converting from
10030 the old sudoers mode). Assumes that SUDOERS_MODE is less
10031 restrictive than 0400 which should always be the case.
10033 2000-01-02 23:43 millert
10035 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
10036 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
10037 *any* entry for the user on the host with a NOPASSWD flag. For
10038 -v, only allow w/o a passwd if *all* entries for the user on the
10039 host w/ the specified runas user have the NOPASSWD flag set.
10041 2000-01-02 23:26 millert
10043 * Makefile.in: add check target
10045 1999-12-16 13:02 millert
10047 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
10050 1999-12-10 00:09 millert
10052 * CHANGES: recent changes
10054 1999-12-08 23:04 millert
10056 * config.h.in, configure, configure.in, sudo.c: Add check for
10057 initgroups() since old SYSV lacks this.
10059 1999-12-08 22:54 millert
10061 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
10062 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
10063 Only define HAVE_FNMATCH if <fnmatch.h> exists.
10065 1999-12-06 01:47 millert
10067 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
10068 to be enabled if the insults[] array is empty. Otherwise there
10069 would be division by zero.
10071 1999-12-06 01:25 millert
10073 * insults.h: Don't care about USE_INSULTS #define since the insult
10074 stuff may be overridden at runtime.
10076 1999-12-06 01:23 millert
10078 * auth/sudo_auth.c: Honor insults flag.
10080 1999-12-05 19:14 millert
10082 * CHANGES, parse.c: Don't ask the user for a password if the user
10083 is not allowed to run the command and the authenticate flag (in
10086 1999-12-05 19:05 millert
10088 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
10089 newline we change to the INITIAL state. o Enter GOTRUNAS when we
10092 This allows #uid to work in a RunasAlias.
10094 1999-12-05 14:06 millert
10096 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
10097 and runaslist now return a value o in a runasspec, if a runaslist
10098 does not return TRUE, set runas_matches to FALSE. Normally, a
10099 runaslist only returns FALSE for explicitly denied users. o
10100 since runaslist does not modify the stack there is no need for a
10101 push/pop in runasalias.
10103 1999-12-04 21:54 millert
10105 * check.c, sudo.c: Don't kill the user's tickets until after
10106 sudoers has been parsed since tty_tickets and ticket_dir could be
10109 1999-12-04 21:18 millert
10111 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10112 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10113 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10116 1999-12-04 21:18 millert
10118 * testsudoers.c: add set_fqdn() stub
10120 1999-12-02 15:31 millert
10122 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10123 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10124 it cannot work since the command needs to be set before sudoers
10125 is parsed. o Fix the "set_home" sudoers option (only worked at
10126 compile time). o Fix "fqdn" sudoers option. We now set
10127 host/shost via set_fqdn which gets called when the "fqdn"
10128 option is set in sudoers. o Move the openlog() to
10129 store_syslogfac() so this gets overridden correctly from the
10132 1999-12-02 15:21 millert
10134 * auth/securid.c: SecurID support should compile now.
10136 1999-11-28 20:56 millert
10138 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10139 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10141 1999-11-28 18:51 millert
10143 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10144 the .html files as they are generated automatically on the web
10147 1999-11-28 18:49 millert
10149 * CHANGES, LICENSE: kill characters that made wml unhappy
10151 1999-11-28 18:34 millert
10155 1999-11-25 12:05 millert
10157 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10159 1999-11-24 19:43 millert
10161 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10164 1999-11-23 22:52 millert
10166 * sudo.c: Make the -s flag be exclusive too. Also reorder the
10167 flags in the exclusive usage message so they are alphabetical.
10169 1999-11-23 13:27 millert
10171 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10173 1999-11-23 13:07 millert
10175 * auth/API: fix typo
10177 1999-11-23 13:07 millert
10179 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10181 1999-11-23 13:06 millert
10183 * auth/pam.c: fix a warning on redhat and spew an error if
10184 pam_authenticate() returns an error other than AUTH_SUCCESS or
10187 1999-11-23 00:43 millert
10189 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10190 password required is the user's not root's
10192 1999-11-19 21:04 millert
10194 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10196 1999-11-18 19:13 millert
10198 * RUNSON: updates from Brian Jackson + some formatting
10200 1999-11-17 21:39 millert
10202 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10203 update o Changes for automating real binary releases
10205 1999-11-17 21:38 millert
10207 * Makefile.in: Add bindist target
10209 1999-11-16 16:26 millert
10211 * TROUBLESHOOTING: talk about run-time options in addition to
10212 compile-time options
10214 1999-11-16 01:16 millert
10216 * CHANGES: fix typos
10218 1999-11-16 01:09 millert
10220 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10222 1999-11-16 00:42 millert
10224 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10225 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10226 rid of references to sudo-bugs. Now mention the web site or the
10229 1999-11-16 00:35 millert
10231 * sudoers.html: repair pod2html damage
10233 1999-11-16 00:28 millert
10235 * RUNSON, TODO: Update for 1.6 release
10237 1999-11-16 00:23 millert
10239 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10240 about using ALL in a command context.
10242 1999-11-09 15:12 millert
10244 * visudo.c: Call yyrestart() on a parse error to reset the lexer
10247 1999-11-09 15:06 millert
10249 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10250 yyrestart() into visudo.c since it might not get called in yywrap
10251 if we get a parse error (and we only reread the file on error
10254 1999-11-09 14:32 millert
10256 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10257 clean up any buffers that might still exist. Call yyrestart()
10258 instead of using the deprecated YY_NEW_FILE macro.
10260 1999-11-09 12:13 millert
10262 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10264 1999-11-08 19:00 millert
10266 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10267 characters need to be escaped in names.
10269 1999-11-08 18:59 millert
10273 1999-11-08 18:59 millert
10275 * INSTALL: clarify Mac OS X entry
10277 1999-11-08 18:59 millert
10281 1999-11-08 17:45 millert
10283 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10284 configure options for danity
10286 1999-11-05 17:11 millert
10288 * defaults.c: Fix printing of type T_MODE in dump_defaults()
10290 1999-11-05 12:00 millert
10292 * strcasecmp.c: missing sys/types.h
10294 1999-11-05 00:42 millert
10296 * INSTALL: Break out options that may be overridden at run time
10297 into their own section. Add a not about Max OS X and correct
10300 1999-11-04 14:01 millert
10302 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10303 getrlimit to find the highest fd when closing all non-std fd's o
10304 Turn off core dumps via setrlimit for the sake of paranoia
10306 1999-11-04 13:57 millert
10310 1999-11-01 10:59 millert
10314 1999-11-01 10:58 millert
10316 * tgetpass.c: When read()'ing, do a single character at a time to
10317 be sure we don't go oast the newline.
10319 1999-11-01 10:43 millert
10321 * sudo.c: For the sudo_root option, check against user_uid, not
10322 getuid() since at this point, ruid == euid == 0.
10324 1999-10-31 23:14 millert
10326 * RUNSON: some updates
10328 1999-10-31 23:14 millert
10330 * logging.h: Fix compilation problem when --with-logging=file was
10331 specified. This means that syslog is now required to build sudo
10332 but that should not be a problem. If it is it can be fixed
10333 trivially with a configure check for syslog() or syslog.h.
10335 1999-10-31 23:00 millert
10337 * tgetpass.c: Make this work again for things like "sudo echo hi |
10338 more" where the tty gets put into character at a time mode. We
10339 read until we read end of line or we run out of space (similar to
10342 1999-10-20 11:23 millert
10344 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10347 1999-10-20 11:23 millert
10351 1999-10-16 13:56 millert
10353 * defaults.c: Error out if syslog parameters are given without a
10354 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10355 since there are no facilities in the 4.2BSD syslog.
10357 1999-10-15 16:37 millert
10359 * defaults.c: Ignore the syslog facility for systems w/ old syslog
10362 1999-10-15 12:51 millert
10364 * TROUBLESHOOTING: people with "." early in their path can have
10365 problems running sudo from the build dir ;-)
10367 1999-10-13 00:18 millert
10369 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10371 1999-10-12 22:34 millert
10373 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10374 auth/sudo_auth.h: New krb5 code from Frank Cusack
10375 <fcusack@iconnet.net>.
10377 1999-10-12 22:33 millert
10379 * CHANGES: update to reality
10381 1999-10-11 20:53 millert
10383 * auth/fwtk.c: include <auth.h> to get function prototypes.
10385 1999-10-11 20:05 millert
10387 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10389 1999-10-11 19:42 millert
10391 * sudo.c: in set_perms(), always call setuid(0) before changing the
10392 ruid/euid so we always know it will succeed.
10394 1999-10-11 12:24 millert
10396 * defaults.h: #undef T_FOO to avoid conflicts with system defines
10399 1999-10-11 11:55 millert
10401 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10402 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10403 needs some fleshing out but this is a start.
10405 1999-10-10 17:21 millert
10407 * defaults.c: use strtol, not strtoul since not everyone has not
10410 1999-10-10 15:01 millert
10412 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10415 1999-10-10 14:38 millert
10417 * lex.yy.c, parse.lex: o Add support for escaped characters in the
10418 WORD macro o Modify fill() to squash escape chars
10420 1999-10-10 13:56 millert
10422 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10423 checks for default values that are supposed to be pathnames. o
10424 Fix a duplicate free when visudo finds an error.
10426 1999-10-09 01:01 millert
10428 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10430 1999-10-07 21:12 millert
10432 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10433 requiretty option o Move O_NOCTTY to compat.h
10435 1999-10-07 21:12 millert
10437 * logging.c: The exit() in log_error() was mistakenly removed in a
10438 previous version. Put it back...
10440 1999-10-07 17:20 millert
10442 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10443 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10444 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10445 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10446 Change defaults stuff to put the value right in the struct. o
10447 Implement mailer_flags o Store syslog stuff both in int and
10448 string form. Setting the string form magically updates the int
10449 version. o Add boolean attribute to strings where it makes sense
10452 1999-10-07 17:13 millert
10454 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10456 1999-10-06 00:48 millert
10458 * auth/API: cleanup function no longer takes a status arg
10460 1999-10-06 00:48 millert
10464 1999-09-15 05:15 millert
10466 * TODO, config.h.in, configure, configure.in, logging.c: Use
10467 strftime() instead of ctime() if it is available.
10469 1999-09-14 12:58 millert
10471 * defaults.c: fix copyright date
10473 1999-09-14 12:57 millert
10475 * RUNSON: update ReliantUNIX entry
10477 1999-09-14 12:56 millert
10479 * defaults.c, defaults.h, logging.c: add log_year option
10481 1999-09-14 04:01 millert
10483 * configure, configure.in: add --without-sendmail to help output
10485 1999-09-14 03:42 millert
10487 * configure, configure.in: enforce an otctal arg for
10488 --with-suoders-mode
10490 1999-09-08 04:06 millert
10492 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10493 config.h.in, configure, configure.in, defaults.c, defaults.h,
10494 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10495 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10496 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10497 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10498 "Defaults" line in sudoers to make configuration variables
10499 changable at runtime (and on a global, per-host and per-user
10500 basis). Both the names and the internal representation are still
10501 subject to change. It was necessary to make sudo_user.runas but
10502 a char ** instead of a char * since this value can be changed by
10503 a Defaults line. There is a similar (but more complicated) issue
10504 with sudo_user.prompt but it is handled differently at the
10507 Add a "-L" flag to list the name of options with their
10508 descriptions. This may only be temporary.
10510 Move some prototypes to parse.h
10512 Be much less restrictive on what is allowed for a username.
10514 1999-09-08 04:01 millert
10516 * sample.syslog.conf: Add more info
10518 1999-09-04 03:09 millert
10520 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10521 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10522 from their license.
10524 1999-08-31 05:39 millert
10526 * auth/sudo_auth.h: move dce_verofy proto to correct section
10528 1999-08-31 05:39 millert
10530 * auth/dce.c: remove XXX
10532 1999-08-28 06:00 millert
10534 * emul/fnmatch.h: Add fnmatch() prototype
10536 1999-08-28 06:00 millert
10538 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10539 emul/fnmatch.h to be after sudo.h for __P
10541 1999-08-28 05:59 millert
10543 * sudo.h: add strcasecmp proto
10545 1999-08-28 05:50 millert
10547 * auth/sudo_auth.c: add check for case where there are no auth
10550 1999-08-28 05:36 millert
10552 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10553 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10555 1999-08-28 05:24 millert
10557 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10558 everywhere we include string.h
10560 1999-08-28 05:22 millert
10562 * version.c: nicer output when showing auth methods
10564 1999-08-28 05:00 millert
10566 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10568 1999-08-28 04:49 millert
10570 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10572 1999-08-28 04:22 millert
10574 * parse.lex, lex.yy.c: fix definition of OCTECT
10576 1999-08-28 04:10 millert
10578 * configure, configure.in: aix_auth.o not authenticate.o
10580 1999-08-27 17:02 millert
10582 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10583 generated from the keyboard). Since we run with ruid/euid == 0
10584 the user can't really signal us in nasty ways.
10586 1999-08-27 17:01 millert
10588 * visudo.c: Don't need to worry about catching too many signals
10589 since we do locking on the tmp file. If a lockfile is really
10590 stale, it will be detected and overwritten.
10592 1999-08-27 16:09 millert
10594 * INSTALL, Makefile.in: include auth/API in tarball
10596 1999-08-27 16:09 millert
10598 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10599 loop and only do the memset if we are *not* in standalone mode.
10601 1999-08-27 13:46 millert
10603 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10605 1999-08-27 11:53 millert
10607 * sudo.c: fix --enable-noargs-shell
10609 1999-08-27 11:06 millert
10611 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10613 1999-08-27 10:54 millert
10615 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10617 1999-08-27 10:50 millert
10619 * auth/dce.c: there were still some return(0)'s hanging around,
10620 make them AUTH_FAILURE
10622 1999-08-27 10:39 millert
10624 * parse.c: typo in comment
10626 1999-08-27 10:03 millert
10628 * version.c: add missing semicolon
10630 1999-08-27 08:31 millert
10632 * auth/sudo_auth.h: missing backslash
10634 1999-08-26 17:24 millert
10636 * CHANGES, config.h.in, configure, configure.in: Kill
10637 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10639 1999-08-26 09:21 millert
10641 * Makefile.in: add parse.h to HDRS
10643 1999-08-26 09:16 millert
10645 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10646 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10647 in LIBS, commong ld flags go in LDFLAGS and network libs like
10648 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10649 on Solaris and is a bit cleaner in general.
10651 1999-08-26 06:56 millert
10653 * UPGRADE: mention ptmp -> sudoers.tmp
10655 1999-08-26 06:12 millert
10657 * configure.in, configure, config.h.in: Define
10658 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10660 1999-08-26 05:37 millert
10662 * RUNSON: add 2 reports
10664 1999-08-26 05:20 millert
10666 * auth/kerb5.c: Minor changes, mostly cosmetic.
10667 verify_krb_v5_tgt() changed to return a value more like a system
10670 1999-08-26 05:19 millert
10672 * auth/dce.c: Add an XXX
10674 1999-08-26 05:19 millert
10676 * TODO: more things todo!
10678 1999-08-26 05:18 millert
10680 * sample.sudoers: update based on what is in the man page
10682 1999-08-26 05:10 millert
10684 * parse.yacc: minor change to first line printed in -l mode
10686 1999-08-26 05:10 millert
10688 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10689 VARIABLES" section to "ENVIRONMENT" to be more standard and add
10692 1999-08-26 05:08 millert
10694 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10695 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10698 1999-08-26 05:06 millert
10700 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10702 1999-08-26 05:05 millert
10704 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10706 1999-08-26 05:04 millert
10708 * UPGRADE: mention timestamp changes
10710 1999-08-26 05:04 millert
10712 * PORTING: cosmetic cleanup
10714 1999-08-26 05:00 millert
10716 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10717 sudoers(8) man page
10719 1999-08-24 13:45 millert
10721 * version.c: Update comments about syslog name tables
10723 1999-08-24 13:37 millert
10725 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10726 configure.in, parse.yacc: include strcasecmp() for those without
10729 1999-08-24 12:43 millert
10731 * sample.sudoers: Use the : operator some more and fix a typo
10733 1999-08-24 12:43 millert
10735 * HISTORY: update the history of sudo
10737 1999-08-24 12:42 millert
10739 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10741 1999-08-24 12:41 millert
10743 * CHANGES: recent changes
10745 1999-08-24 12:40 millert
10747 * sudo.tab.h: these should be generated with byacc, not bison
10749 1999-08-24 12:40 millert
10753 1999-08-24 11:58 millert
10755 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10756 the stored (expanded) alias was not stored with the contents.
10757 This could lead to incorrect output if the sudoers file had
10758 different alias types with the same name. Normal parsing (ie:
10759 not in '-l' mode) is unaffected.
10761 1999-08-23 12:47 millert
10763 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10764 proto on some systems
10766 1999-08-22 13:10 millert
10768 * snprintf.c: fix comment
10770 1999-08-22 13:09 millert
10772 * tgetpass.c: don't need limits.h
10774 1999-08-22 07:36 millert
10776 * snprintf.c: kill bogus reference to vfprintf
10778 1999-08-22 07:26 millert
10780 * sample.sudoers, sudoers: better examples
10782 1999-08-22 07:23 millert
10784 * snprintf.c: Add some const in the K&R defs. This is safe since
10785 we define const away if the compiler doesn't grok it.
10787 1999-08-22 07:22 millert
10789 * aclocal.m4, configure: Better test for working long long support.
10790 Ultrix compiler supports basic long long but not all operations
10793 1999-08-22 05:59 millert
10795 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10796 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10797 MAXINT before including hpsecurity.h to silence an HP-UX warning
10798 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10800 1999-08-21 15:00 millert
10802 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10803 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10804 quads if the compiler does. No floating point yet, perhaps
10807 1999-08-20 16:37 millert
10809 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10810 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10811 code as root, not the invoking user. It doesn't really gain us
10812 anything to run as the user since an attacker can just have an
10813 setuid(0) in their egg. Running as root solves potential
10814 problems wrt signalling.
10816 1999-08-19 13:45 millert
10818 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10819 let the signal handler get it if we are still running, else let
10820 init reap it for us. The extra time it takes to wait lets the
10821 user know that mail is being sent.
10823 Install SIGCHLD handler in main() and for POSIX signals, block
10824 everything *except* SIGCHLD.
10826 1999-08-19 12:30 millert
10828 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10829 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10830 a bitmap instead of an int. This makes it possible to express
10831 things like "failed to validate because user not listed for this
10832 host". Some thigns that were previously VALIDATE_FOO are now
10833 FLAG_FOO. This may change later on.
10835 Reorganized code in log_auth() and sudo.c to deal with above
10838 Safer versions of push/pushcp with in the do { ... } while (0)
10841 parse.yacc now saves info on the stack to allow parse.c to
10842 determine if a user was listed, but not for the host he/she tried
10845 Added --with-mail-if-no-host option
10847 1999-08-17 11:29 millert
10849 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10850 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10851 externally visible. o If pedantic > 1, it is a parse error. o
10852 Add -s (strict) option to visudo which sets pedantic to 2.
10854 1999-08-17 11:26 millert
10856 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10858 1999-08-17 11:20 millert
10860 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10862 1999-08-17 10:29 millert
10864 * configure, configure.in, Makefile.in: Add testsudoers to default
10865 build target if --with-devel Don't clean generated parser files
10866 unless "distclean".
10868 1999-08-17 08:47 millert
10870 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10871 not just those that match, or we get spurious warnings.
10873 1999-08-17 05:32 millert
10875 * TROUBLESHOOTING: reference samples.sylog.conf
10877 1999-08-14 11:50 millert
10879 * sample.syslog.conf: Sample entries for syslog.conf
10881 1999-08-14 11:40 millert
10883 * CHANGES: recent changes
10885 1999-08-14 11:36 millert
10887 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10888 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10889 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10890 configured into flags and add a flag to specify an auth method is
10891 running alone (the only one). Pass auth methods their sudo_auth
10892 pointer, not the data pointer. This allows us to get at the
10893 flags and tell if we are the only auth method. That, in turn,
10894 allows the method to be able to decide what should/should not be
10895 a fatal error. Currently only rfc1938 uses it this way, which
10896 allows us to kill the OTP_ONLY define and te hackery that went
10897 with it. With access to the sudo_auth struct, methods can also
10898 get at a string holding their cannonical name (useful in error
10901 1999-08-14 11:34 millert
10903 * Makefile.in, INSTALL, README, config.h.in, configure,
10904 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10905 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10906 o real dependencies in the Makefile o --with-devel option to
10907 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10908 "foo->bar" o ALL goes back to being a token, not a string but
10909 don't leak memory o rename hsotspec -> host in parse.yacc
10911 1999-08-12 12:26 millert
10913 * BUGS, CHANGES: recent changes
10915 1999-08-12 12:24 millert
10917 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10918 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10919 *snprintf() before -ldb is added to LIBS since -ldb includes a
10920 bogus snprintf(). o Add forward refs for struct mbuf and struct
10921 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10922 to fix -Wall o Add missing includes to fix more -Wall
10924 1999-08-12 10:37 millert
10926 * INSTALL, check.c, config.h.in, configure, configure.in,
10927 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10928 o Add a "pedentic" flag to the parser. This makes sudo warn in
10929 cases where an alias may be used before it is defined. Only
10930 turned on for visudo and testsudoers. o Add
10931 --disable-authentication option that makes sudo not require
10932 authentication by default. The PASSWD tag can be used to require
10933 authentication for an entry. We no longer overload
10936 1999-08-12 10:29 millert
10938 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10939 USERNAME. These days a username can contain just about anything
10940 so be very permissive. Also drop the unused \. punctuation.
10942 1999-08-09 18:25 millert
10944 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10945 parse.h o find_alias() now returns an aliasinfo * instead of
10946 boolean o add_alias() now takes a value parameter to store in the
10947 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10948 return: 1) positive match 0) negative match (due to '!') -1) no
10949 match This means setting $$ explicitly in all cases, which I
10950 should have done in the first place. It also means that we
10951 always store a value that is != -1 and when we see a '!' we can
10952 set *_matches to !rv if rv != -1. The upshot of all of this is
10953 that '!' now works the way it should in lists and some of the
10954 rules are more uniform and sensible.
10956 1999-08-09 18:17 millert
10958 * Makefile.in: add parse.h dependency
10960 1999-08-09 18:17 millert
10962 * parse.h: kill unused *_matched macros
10964 1999-08-09 10:35 millert
10966 * parse.yacc: Allow a list of users as the first thing in a user
10967 spec, not just a single entry. This makes things more uniform,
10968 though it does allow you to write user specs that are hard to
10971 1999-08-09 10:08 millert
10975 1999-08-09 10:08 millert
10977 * configure.in: fix check for crypt() in libufc
10979 1999-08-07 14:03 millert
10981 * README: sudo-users list now exists
10983 1999-08-07 07:46 millert
10985 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10988 1999-08-07 05:59 millert
10990 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10991 config.h.in, configure.in, logging.c, sudo.h, version.c,
10992 visudo.c, configure, fileops.c: o Move lock_file() and touch()
10993 into fileops.c so visudo can use them o Visudo now locks the
10994 sudoers temp file instead of bailing when the temp file already
10995 exists. This fixes the problem of stale temp files but it does
10996 *require* that you not try to put the temp file in a
10997 world-writable directory. This shoud not be an issue as the temp
10998 file should live in the same dir as sudoers. o Visudo now only
10999 installs the temp file as sudoers if it changed.
11001 1999-08-06 09:49 millert
11003 * logging.c: add fcntl locking
11005 1999-08-06 09:33 millert
11007 * configure, config.h.in, configure.in, logging.c: Lock the log
11010 1999-08-06 05:36 millert
11012 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
11013 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
11014 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
11015 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
11016 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
11018 1999-08-05 17:38 millert
11020 * INSTALL, check.c, config.h.in, configure, configure.in,
11021 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
11022 more things to root sudo -V config reporting
11024 1999-08-05 10:56 millert
11026 * configure, configure.in: aix_auth.o not authenticate.o
11028 1999-08-05 10:48 millert
11030 * config.h.in: Add --with-goodpri and --with-badpri configure
11031 options to specify the syslog priority to use.
11033 1999-08-05 10:30 millert
11035 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
11036 and --with-badpri configure options to specify the syslog
11039 1999-08-05 10:25 millert
11041 * compat.h: kill crufty AIX stuff
11043 1999-08-05 06:55 millert
11045 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
11046 deal with $< like I would expect. Both GNU and BSD makes get
11047 this right but... So, we just expand $< inline at the cost of
11050 1999-08-05 06:52 millert
11052 * version.c: If the invoking user is root, sudo will now print
11053 configure info in -V mode. Currently just prints logging info,
11054 to be expanded later.
11056 1999-08-05 06:51 millert
11058 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
11059 facility and priority o use new print_version() functino for -V
11062 1999-08-05 06:49 millert
11064 * check.c: Don't need version.c
11066 1999-08-05 06:21 millert
11068 * configure, configure.in, aclocal.m4, config.h.in: Add check for
11069 syslog facilities and priorities tables in syslog.h
11071 1999-08-05 05:23 millert
11073 * Makefile.in: o authenticate -> aix_auth o add version.c
11075 1999-08-05 05:21 millert
11077 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
11079 1999-08-04 13:32 millert
11081 * TODO: sudo should lock its logfile
11083 1999-08-04 13:28 millert
11085 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
11086 shortcut macros for append() to make things more readable. o The
11087 separator in append() is now a string instead of a char. o In
11088 append(), only prepend the separator if the last char is not a
11089 '!'. This is a hack but it greatly simplifies '!' handling. o
11090 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
11091 inherited across entries in a list (matches current behavior).
11092 o Fix formatting in -l mode such that items in a list are
11093 separated by a space. Greatlt improves readability. o Space
11094 for name field in struct aliasinfo is now allocated dyanically
11095 instead of using a (big) buffer. o In add_alias(), only search
11096 the list once (lsearch instead of lfind + lsearch)
11098 1999-08-04 11:31 millert
11100 * lex.yy.c, sudo.tab.h: regen
11102 1999-08-04 10:54 millert
11104 * configure, configure.in: Solais pam doesn't require anye xtra
11107 1999-08-04 05:35 millert
11109 * parse.yacc: o Simpler '!' support now that the lexer deals with
11110 multiple !'s for us. o In the case of opFOO, have FOO give a
11111 boolean return value and set foo_matches in opFOO, not FOO. o
11112 Treat 'ALL' as a string since it gets fill()'d in
11113 parse.lex--fixes a small memory leak. In the long run it may
11114 be better to just fix parse.lex and make ALL back into a token.
11115 However, having it be a string is useful since it can be
11116 easily passed back to the parent rule if we so desire.
11118 1999-08-04 03:54 millert
11120 * parse.lex: o Remove some unnecessary backslashes o collapse
11121 multiple !'s by using !+ and checking if yyleng is even or odd.
11122 this allows us to simplify ! handling in parse.yacc
11124 1999-08-04 03:53 millert
11126 * sudo.c: -u flag was being ignored
11128 1999-08-01 13:04 millert
11130 * Makefile.in: correct fix
11132 1999-08-01 12:37 millert
11134 * Makefile.in: work around pod2man stupididy
11136 1999-08-01 12:35 millert
11138 * Makefile.in: correct dependencies for .cat
11140 1999-08-01 12:26 millert
11142 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11144 1999-08-01 12:25 millert
11146 * sudo.pod, visudo.pod: Add copyright Update to reality
11148 1999-08-01 11:42 millert
11150 * parse.c, sudo.c, sudo.h: rename validate() to the more
11151 descriptive sudoers_lookup()
11153 1999-08-01 06:49 millert
11155 * auth/aix_auth.c: use tgetpass
11157 1999-07-31 12:32 millert
11161 1999-07-31 12:31 millert
11163 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11164 configure, configure.in, sudo.c: Sudo, not CU Sudo
11166 1999-07-31 12:19 millert
11168 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11169 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11170 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11171 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11172 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11173 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11174 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11175 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11176 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11177 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11178 LICENSE: add 4th term to license similar to term 5 in the apache
11181 1999-07-31 12:02 millert
11183 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11184 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11186 1999-07-28 05:24 millert
11190 1999-07-28 05:21 millert
11192 * check.c: Use dirs instead of files for timestamp. This allows
11193 tty and non-tty schemes to coexist reasonably. Note, however,
11194 that when you update a tty ticket, the mtime on the user dir gets
11197 1999-07-28 05:17 millert
11199 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11200 to link with "-lprot -lx" when linking test program, not just
11201 -lprot. Also add check for getspnam(). The SCO docs indicate
11202 that /etc/shadow can be used but this may be a lie.
11204 1999-07-24 03:35 millert
11206 * auth/API: first cut at auth API description
11208 1999-07-22 15:48 millert
11210 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11211 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11212 now an init method that gets run before the main loop. This
11213 allows auth routines to differentiate between initialization that
11214 happens once vs. setup that needs to run each time through the
11217 1999-07-22 12:23 millert
11219 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11221 1999-07-22 12:22 millert
11223 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11224 versions of asprintf() and vasprintf()
11226 1999-07-22 09:14 millert
11228 * TODO: remove 2 items. One done, one won't do.
11230 1999-07-22 09:10 millert
11232 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11233 visudo.cat, visudo.html, configure, lex.yy.c: regen
11235 1999-07-22 09:06 millert
11237 * CHANGES: new changes
11239 1999-07-22 09:01 millert
11241 * sudo.pod: o Document -K flag and update meaning of -k flag. o
11242 BSD-style copyright o Document clearing of BIND resolver
11243 environment variables o Clarify bit about shared libs o suggest
11244 rc files create /tmp/.odus if your OS gives away files
11246 1999-07-22 08:59 millert
11248 * visudo.pod: BSD license
11250 1999-07-22 08:58 millert
11252 * tgetpass.c: o BSD copyright o no need to block signals, we now do
11253 that in main() o cosmetic changes
11255 1999-07-22 08:57 millert
11257 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11258 sudo_user" instead of old globals. o some cometic cleanup
11260 1999-07-22 08:56 millert
11262 * sudo_setenv.c, version.h: BSD-style copyright
11264 1999-07-22 08:56 millert
11266 * sudo.h: o BSD copyright o logging and parser bits moved to their
11267 own .h files o new "struct sudo_user" to encapsulate many of the
11270 1999-07-22 08:55 millert
11272 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11273 use new logging routines o simplified flow of control o BIND
11274 resolver additions to badenv_table
11276 1999-07-22 08:53 millert
11278 * strerror.c: BSD-style copyright
11280 1999-07-22 08:53 millert
11282 * snprintf.c: Now compiles on more K&R compilers
11284 1999-07-22 08:52 millert
11286 * putenv.c: BSD-style copyright, cosmetic changes
11288 1999-07-22 08:51 millert
11290 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11291 Move parser-specific defines and structs into parse.h + other
11294 1999-07-22 08:51 millert
11296 * logging.h: defines for logging routines
11298 1999-07-22 08:49 millert
11300 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11301 interfaces.h, pathnames.h.in: BSD-style copyright
11303 1999-07-22 08:48 millert
11305 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11306 copyright, cosmetic changes
11308 1999-07-22 08:46 millert
11310 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11311 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11312 changes to fill in AUTH_OBJS for new auth api o check for
11313 strerror(), v?snprintf() and v?asprintf() o replace
11314 --with-AuthSRV with --with-fwtk
11316 1999-07-22 08:43 millert
11318 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11319 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11320 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11323 1999-07-22 08:42 millert
11325 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11328 1999-07-22 08:39 millert
11330 * alloc.c: BSD-style copyright
11332 1999-07-22 08:38 millert
11334 * TROUBLESHOOTING: no more --with-getpass
11336 1999-07-22 08:34 millert
11338 * TODO: Take out things I've done...
11340 1999-07-22 08:34 millert
11342 * README: Refer to LICENSE
11344 1999-07-22 08:34 millert
11346 * PORTING: --with-getpass no longer exists
11348 1999-07-22 08:33 millert
11350 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11351 new files and new auth modules.
11353 1999-07-22 08:32 millert
11355 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11356 --with-fwtk and --without-passwd.
11358 1999-07-22 08:31 millert
11360 * HISTORY: Update history a bit
11362 1999-07-22 08:29 millert
11364 * COPYING, LICENSE: Now distributed under a BSD-style license
11366 1999-07-22 08:28 millert
11368 * auth/sudo_auth.c: o BSD-style copyright o Add support for
11369 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11370 rfc1938 code o new struct sudo_user global
11372 1999-07-22 08:25 millert
11374 * auth/: pam.c, sia.c: BSD-style copyright and use new log
11377 1999-07-22 08:24 millert
11379 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11380 Use asprintf() and snprintf() where sensible.
11382 1999-07-22 08:19 millert
11384 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11385 handling is now done more reasonably--better sanity checks and
11386 tty-based stamps are now done as files in a directory with the
11387 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11388 It is not currently possible to mix tty and non-tty based ticket
11389 schemes but this may change in the future (it requires sudo to
11390 use a directory instead of a file in the non-tty case). Also,
11391 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11392 really deletes the file. That way you don't get the lecture
11393 again just because you killed your ticket in .logout. BSD-style
11396 1999-07-22 08:13 millert
11398 * logging.c: o rewritten logging routines. log_error() now takes
11399 printf-style varargs and log_auth() for the return value of
11400 validate(). o BSD-style copyright
11402 1999-07-22 07:04 millert
11404 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11407 1999-07-22 07:02 millert
11409 * auth/fwtk.c: Use snprintf() where it makes sense and add a
11410 BSD-style copyright
11412 1999-07-22 07:00 millert
11414 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11415 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11418 1999-07-22 06:57 millert
11420 * emul/utime.h, utime.c: BSD-style copyright
11422 1999-07-22 06:57 millert
11424 * emul/search.h: this has been rewritten so use my BSD-style
11427 1999-07-15 11:21 millert
11429 * snprintf.c: include malloc.h if no stdlib.h
11431 1999-07-15 10:21 millert
11433 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11435 1999-07-15 10:20 millert
11437 * strerror.c: strerror() for systems w/o it
11439 1999-07-12 06:53 millert
11441 * visudo.c: stylistic changes
11443 1999-07-12 06:25 millert
11445 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11448 1999-07-11 16:10 millert
11450 * auth/pam.c: remove missed ref to PAM_nullpw
11452 1999-07-11 16:10 millert
11454 * auth/sudo_auth.h: pasto
11456 1999-07-11 15:19 millert
11458 * auth/kerb5.c: more or less complete now--still untested
11460 1999-07-11 15:09 millert
11462 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11464 1999-07-11 14:42 millert
11466 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11467 code into rfc1938.c
11469 1999-07-11 07:22 millert
11471 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11472 unchanged from dce_pwent.c
11474 1999-07-11 06:44 millert
11476 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11477 Could probably be much better
11479 1999-07-11 06:43 millert
11481 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11484 1999-07-11 05:37 millert
11486 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11488 1999-07-11 05:33 millert
11490 * auth/pam.c: don't use prompt global, it will go away
11492 1999-07-11 05:32 millert
11494 * auth/secureware.c: correct copyright years
11496 1999-07-10 20:32 millert
11498 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11499 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11500 New authentication API and methods
11502 1999-07-08 06:46 millert
11504 * parse.yacc: only save an entry if user_matches && host_matches,
11505 even if the stack is empty (fix for previous commit)
11507 1999-07-08 06:35 millert
11509 * parse.yacc: 1) Always save an entry on the stack if it is empty.
11510 This fixes the -l and -v flags that were broken by earlier parser
11513 2) In a Runas list, don't negate FALSE -> TRUE since that would
11514 make !foo match any time the user specified a runas user (via -u)
11517 1999-07-08 05:45 millert
11519 * testsudoers.c: interfaces and num_interfaces are now auto, not
11522 1999-07-07 14:09 millert
11524 * auth.c: use a static global to keep stae about empty passwords
11526 1999-07-07 14:08 millert
11528 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11531 1999-07-05 16:53 millert
11533 * auth.c: PAM prompt code was wrong, looks like we have to kludge
11536 1999-07-05 16:35 millert
11538 * auth.c: In the PAM code, when a user hits return at the first
11539 password prompt, exit without a warning just like the normal auth
11542 1999-07-05 16:15 millert
11544 * configure, configure.in: kludge around cross-compiler false
11547 1999-07-05 16:14 millert
11549 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11550 (correct) PAM code Tgetpass now takes an echo flag for use with
11551 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11552 useless umask setting Change error from BAD_ALLOCATION ->
11553 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11554 auth.c for consistency
11556 1999-07-05 16:11 millert
11558 * sudo.c: Some -Wall and kill some trailing spaces
11560 1999-07-05 16:10 millert
11562 * configure.in: define -D__EXTENSIONS__ for solaris so we get
11565 1999-06-22 09:42 millert
11567 * RUNSON: add Dynix 4.4.4
11569 1999-06-22 09:30 millert
11571 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11572 version, fall back on old kerb4 auth code
11574 1999-06-22 06:41 millert
11576 * INSTALL: clarify some things
11578 1999-06-22 06:38 millert
11580 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11582 1999-06-14 19:47 millert
11584 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11586 1999-06-03 12:34 millert
11588 * tgetpass.c: Fix open(2) return value checking, was NULL for
11589 fopen, should be -1 for open
11591 1999-06-03 12:06 millert
11595 1999-06-03 12:06 millert
11597 * configure.in: better wording for solaris pam notice
11599 1999-06-03 11:52 millert
11601 * CHANGES: document recent changes
11603 1999-06-03 11:52 millert
11605 * TROUBLESHOOTING: Update shadow password section
11607 1999-06-03 11:51 millert
11609 * auth.c: move authentication code from check.c to auth.c
11611 1999-06-03 11:51 millert
11613 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11615 1999-05-16 21:36 millert
11617 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11618 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11619 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11620 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11621 interface-related defines to interfaces.h so we don't have to
11622 include <netinet/in.h> everywhere.
11624 1999-05-14 12:30 millert
11626 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11627 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11628 braindeath with our own SUDO_MAX_PASS.
11629 It turns out the old DES crypt does the right thing with
11631 longert than 8 characters.
11632 o Fix common typo (necesary -> necessary)
11635 1999-05-03 12:00 millert
11637 * sudo.c: set $LOGNAME when we set $USER
11639 1999-04-27 00:00 millert
11641 * INSTALL: add comment about digital unix and interfaces.c warning
11644 1999-04-15 01:12 millert
11646 * sample.sudoers: use modern paths and give examples for some of
11647 the new parser features
11649 1999-04-10 13:03 millert
11651 * parse.c: fix comment
11653 1999-04-10 00:49 millert
11655 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11656 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11657 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11658 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11659 Function names should be flush with the start of the line so they
11660 can be found trivially in an editor and with grep
11662 1999-04-10 00:40 millert
11664 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11665 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11666 is already void, no need to cast it
11668 1999-04-10 00:37 millert
11670 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11671 (this should not be possible)
11673 1999-04-10 00:10 millert
11675 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11676 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11677 listed in sudoers) to the command instead of stashing the struct
11678 stat. Should be safer.
11680 1999-04-08 19:56 millert
11682 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11685 1999-04-07 20:20 millert
11689 1999-04-07 19:18 millert
11691 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11692 sudoers.pod: You can now specifiy a host list instead of just a
11693 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11696 1999-04-07 02:59 millert
11698 * testsudoers.c: Quiet -Wall
11700 1999-04-07 02:50 millert
11702 * parse.yacc: Move the push from the beginning of cmndspec to the
11703 end. This means we no longer have to do a push at the end of
11704 privilege, just reset some values.
11706 1999-04-06 20:24 millert
11708 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11709 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11712 1999-04-06 14:12 millert
11714 * sudoers.pod: modernize paths and update su example based on
11717 1999-04-06 14:06 millert
11719 * sample.sudoers: New runas semantics
11721 1999-04-06 13:54 millert
11723 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11724 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11725 ourselves so we don't need to rely on the system strdup(3) which
11726 may or may not exist. There is now no need to provide strdup()
11727 for those w/o it. Also, the prototype for estrdup() was wrong,
11728 it returns char * and its param is const.
11730 1999-04-06 13:40 millert
11732 * getcwd.c: $Sudo tag
11734 1999-04-06 13:20 millert
11736 * check.c: buf should be prompt; Michael Robokoff
11737 <mrobo@networkcs.com>
11739 1999-04-06 01:40 millert
11741 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11742 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11745 1999-04-06 01:38 millert
11747 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11750 1999-04-06 01:08 millert
11752 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11755 1999-04-06 01:00 millert
11757 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11758 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11759 command but the NOPASSWD flag was set. Make runasspec,
11760 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11761 support for '!' in the runas list Fix double printing of '%' and
11762 '+' for groups and netgroups respectively Add *_matched macros
11763 (no need for local stack variable). Should only be used directly
11764 after a pop (since top must be >= 2).
11766 1999-04-05 23:25 millert
11768 * aclocal.m4, configure.in: Add copyright, somewhat silly
11770 1999-04-05 16:57 millert
11772 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11773 check_sia.c, compat.h, config.h.in, configure, configure.in,
11774 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11775 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11776 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11777 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11778 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11779 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11780 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11781 1.6 and combine copyright statements
11783 1999-04-05 16:30 millert
11785 * sample.sudoers: Use ! not ^ to do negation
11787 1999-04-05 16:29 millert
11791 1999-04-05 16:28 millert
11793 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11794 across entris in a command list. Add a PASSWD tag to reverse
11795 NOPASSWD. When you override a runas or *PASSWD tag the value
11796 given becomes the new default for the rest of the command list.
11798 1999-04-02 16:03 millert
11800 * CHANGES, RUNSON: update for 1.5.9
11802 1999-04-02 16:02 millert
11804 * visudo.c: Shift return value of system(3) by 8 to get real exit
11805 value and if it is not 1 or 0 print the retval along with the
11808 1999-03-30 16:45 millert
11810 * Makefile.in: testsudoers needs LIBOBJS too
11812 1999-03-30 12:17 millert
11814 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11815 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11816 would not allow millert to run ls as root.
11818 1999-03-30 01:08 millert
11820 * CHANGES: new change
11822 1999-03-30 01:03 millert
11824 * parse.yacc: Save entries that match a ! command on the matching
11827 1999-03-30 01:01 millert
11829 * sudo.c: Make sudo's usage info better when mutually exclusive
11830 args are given and don't rely on argument order to detect this;
11833 1999-03-29 15:03 millert
11835 * CHANGES, Makefile.in, RUNSON: updates from CU
11837 1999-03-28 23:38 millert
11839 * Makefile.in: use gzip
11841 1999-03-28 23:31 millert
11843 * parse.yacc: Fix off by one error introduced in *alloc changes
11845 1999-03-28 23:05 millert
11847 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11848 check_sia.c, compat.h, config.h.in, configure, configure.in,
11849 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11850 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11851 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11852 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11853 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11854 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11855 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11856 emul/utime.h: ++version
11858 1999-03-28 21:59 millert
11860 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11861 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11862 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11863 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11864 emalloc/erealloc/estrdup
11866 1999-03-28 20:29 millert
11868 * alloc.c: error checking memory allocation routines
11870 1999-03-28 19:23 millert
11872 * parse.yacc: Still not right, this fixes it for real
11874 1999-03-28 19:08 millert
11876 * parse.yacc: Fix for previous commit
11878 1999-03-28 19:05 millert
11880 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11881 when mixing different runas specs and ! commands. For example:
11882 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11883 allow millert to run whoami as root as well as daemon when it
11884 should just allow daemon. The problem was that comma-separated
11885 commands in a list shared the same entry on the matching stack.
11886 Now they get their own entry iff there is a full match. It may
11887 be better to just make the runas spec persistent across all
11888 commands in a list like the user and host entries of the matching
11889 stack. However, since that is a fairly major change it should
11890 gets its own minor rev increase.
11892 1999-03-28 13:50 millert
11894 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11897 1999-03-26 13:17 millert
11901 1999-03-26 13:12 millert
11903 * sample.sudoers: better su entry
11905 1999-03-26 13:10 millert
11909 1999-03-26 13:09 millert
11911 * check.c, configure.in: new pam code that works on solaris, should
11912 work on linux too; aelberg@home.com
11914 1999-03-19 14:44 millert
11916 * RUNSON: more entries
11918 1999-03-19 14:43 millert
11920 * config.h.in: only include strings.h if there is no string.h
11922 1999-03-17 15:25 millert
11924 * config.guess: Sinix is now being called ReliantUNIX;
11925 bjjackso@us.oracle.com
11927 1999-03-13 13:37 millert
11929 * sudo.c: shost must be set before log functions are called #ifdef
11932 1999-03-07 18:34 millert
11934 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11935 command args. Stop processing an arg when you hit a backslash so
11936 the quoted-character detection can catch it.
11938 1999-02-26 01:19 millert
11940 * interfaces.c: include sys/time.h; aparently AIX needs it.
11943 1999-02-23 19:43 millert
11945 * configure, configure.in: add missing case statement so
11946 --without-sendmail works
11948 1999-02-22 21:51 millert
11952 1999-02-22 15:10 millert
11954 * configure, configure.in: only search for -lsun in irix <= 4.x
11956 1999-02-22 15:01 millert
11958 * configure, configure.in: back out last configure.in change now
11959 that I've hacked autoconf to fix the real problem and add a
11962 1999-02-22 14:32 millert
11966 1999-02-22 14:05 millert
11968 * getcwd.c: add def of dirfd() for those without it
11970 1999-02-22 10:58 millert
11972 * configure.in, configure: When falling back to checking for
11973 socket() when linking with "-lsocket -lnsl" check for main()
11974 instead since autoconf has already cached the results of checking
11975 for socket() in -lsocket. This is really an autoconf bug as it
11976 should use the extra libs as part of the cache variable name.
11978 1999-02-22 10:47 millert
11980 * configure.in: typo
11982 1999-02-21 15:18 millert
11984 * configure.in: fix occurrence of $with_timeout that should be
11985 $with_password_timeout;
11986 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11988 1999-02-17 11:40 millert
11990 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11993 1999-02-11 01:41 millert
11995 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11996 it does not have it
11998 1999-02-09 13:11 millert
12000 * configure, configure.in: define for_BSD_TYPES irix
12002 1999-02-06 19:47 millert
12004 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
12005 clear that it is the user's password, not root's, that we want.
12007 1999-02-06 19:43 millert
12009 * check.c, sudo.h: If the user enters an empty password and really
12010 has no password, accept the empty password they entered.
12011 Perviously, they could enter anything *but* an empty password.
12012 Also, add GETPASS macro that calls either tgetpass() or getpass()
12013 depending on how sudo was configured. Problem noted by
12014 jdg@maths.qmw.ac.uk
12016 1999-02-02 23:32 millert
12018 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12019 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12020 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12021 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12022 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
12023 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
12024 emul/utime.h: add explicate copyright
12026 1999-02-02 23:16 millert
12028 * CHANGES: mention -lsocket, -lnsl configure changes
12030 1999-02-02 17:54 millert
12032 * sudo.c: Don't clobber errno after calling check_sudoers().
12034 1999-01-31 19:46 millert
12036 * configure.in, configure: When linking with both -lsocket and
12037 -lnsl be sure to do so in that order. Also, when we can't find
12038 socket() or inet_addr() and have to try linking with both libs,
12041 1999-01-31 19:45 millert
12043 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
12045 1999-01-23 12:18 millert
12047 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
12050 1999-01-22 13:13 millert
12052 * configure, CHANGES, INSTALL, configure.in: fix and correctly
12053 document --with-umask; problem noted by adap@adap.org
12055 1999-01-19 20:38 millert
12057 * configure.in, configure: only use /usr/{man,catman}/local to
12058 store man pages if suer didn't override prefix or mandir
12060 1999-01-19 20:24 millert
12062 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
12065 1999-01-18 21:53 millert
12067 * RUNSON: updates from users
12069 1999-01-18 21:04 millert
12071 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
12072 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
12074 1999-01-18 20:00 millert
12076 * configure, configure.in: better fix for the problem of unresolved
12077 symbols in -lnsl or -lsocket
12079 1999-01-18 19:39 millert
12081 * configure, configure.in: when checking for functions in -lnsl and
12082 -lsocket link with both of them to avoid unresolved symbols on
12083 some weirdo systems
12085 1999-01-17 20:49 millert
12087 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
12088 RCS before the RCS->CVS switch
12090 1999-01-17 18:16 millert
12092 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12093 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
12094 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12095 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
12096 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
12097 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
12098 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
12099 emul/utime.h: add sudo tags
12101 1999-01-17 17:53 millert
12103 * version.h, sudo.h: testing Sudo tag
12105 1999-01-17 17:40 millert
12107 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12108 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12109 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12110 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12111 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12112 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12113 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12114 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12115 emul/utime.h: crank version and regen files
12117 1999-01-17 17:27 millert
12119 * Makefile.in: kill rcs goop in update_version and fix now that
12122 1999-01-17 17:08 millert
12124 * INSTALL, check.c, config.h.in, configure, configure.in,
12125 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12126 fcusack@iconnet.net
12128 1999-01-17 16:45 millert
12130 * realpath.c, sudo_realpath.c: we no longer use realpath
12132 1999-01-17 16:44 millert
12134 * qualify.c: replaced by find_path.c
12136 1999-01-17 16:43 millert
12138 * options.h: all options are now configure flags
12140 1999-01-17 16:42 millert
12144 1999-01-17 16:41 millert
12146 * getwd.c: superceded by getcwd.c
12148 1999-01-17 16:36 millert
12150 * getpass.c: superceded by tgetpass.c
12152 1999-01-17 16:36 millert
12154 * SUPPORTED: superceded by RUNSON
12156 1999-01-17 16:33 millert
12158 * OPTIONS: No longer used now that we have configure options for
12161 1999-01-17 16:32 millert
12163 * configure: regen based on configure.in
12165 1999-01-17 16:31 millert
12167 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12168 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12169 on sudo.pod, sudoers.pod, and visudo.pod
12171 1998-12-11 12:16 millert
12173 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12175 1998-12-07 16:16 millert
12177 * interfaces.c: close sock when we are done with it
12179 1998-11-27 19:37 millert
12181 * parse.yacc: never say "error on line -1"
12183 1998-11-23 23:38 millert
12185 * configure.in: check for -lnsl before -lsocket
12187 1998-11-23 23:29 millert
12189 * configure.in: quote '[', ']' used in ranges correctly
12191 1998-11-21 17:54 millert
12193 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12195 1998-11-20 18:33 millert
12199 1998-11-20 18:33 millert
12201 * INSTALL: more info for 1.5.7
12203 1998-11-20 18:30 millert
12205 * README: update for 1.5.7
12207 1998-11-20 14:26 millert
12209 * parse.yacc: make increases of cm_list_size and ga_list_size be
12210 similar to increases of stacksize (ie: >= not > in initial
12213 1998-11-20 14:22 millert
12215 * parse.yacc: when we get a syntax error, report it for the
12216 previous line since that's generally where the error occurred.
12218 1998-11-18 15:31 millert
12220 * config.h.in, configure.in, interfaces.c: add back check for
12221 sys/sockio.h but only use it if SIOCGIFCONF is not defined
12223 1998-11-18 15:25 millert
12225 * config.h.in: define BSD_COMP for svr4
12227 1998-11-17 23:16 millert
12229 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12230 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12231 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12232 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12235 1998-11-17 23:10 millert
12237 * configure.in: kill check for sockio,h
12239 1998-11-17 23:10 millert
12241 * config.h.in: no more HAVE_SYS_SOCKIO_H
12243 1998-11-17 22:51 millert
12245 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12246 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12247 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12248 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12251 1998-11-16 17:38 millert
12253 * sudo.c: add missing inform_user()
12255 1998-11-13 19:21 millert
12257 * find_path.c: return NOT_FOUND if given fully qualified path and
12258 it does not exist previously it would perror(ENOENT) which
12259 bypasses the option to not leak path info
12261 1998-11-13 19:20 millert
12263 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12264 for kerb, check for -ldes
12266 1998-11-13 14:19 millert
12268 * INSTALL: tty tickets are user:tty now
12270 1998-11-13 14:10 millert
12272 * check.c: when using tty tickets make it user:tty not user.tty as
12273 a username could have a '.' in it
12275 1998-11-09 19:15 millert
12277 * sudo.c: add "ignoring foo found in ." for auth successful case
12279 1998-11-09 17:57 millert
12281 * sudo.c: add missing printf param
12283 1998-11-08 15:56 millert
12285 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12286 go back to printing "command not found" unless
12287 --disable-path-info specified. Also, tell user when we ignore
12288 '.' in their path and it would have been used but for
12291 1998-11-08 13:51 millert
12293 * check.c, sudo.c: Only one space after a colon, not two, in
12296 1998-11-05 12:59 millert
12298 * sudo.pod: document setting $USER
12300 1998-11-04 22:24 millert
12302 * check.c: fix bugs with prompt expansion
12304 1998-11-04 21:21 millert
12306 * sudo.c: set $USER for root too
12308 1998-11-04 17:13 millert
12310 * getspwuid.c: typo
12312 1998-11-04 17:07 millert
12314 * configure.in: HP-UX's iscomsec is in -lsec, not libc
12316 1998-11-03 22:24 millert
12318 * configure.in: remove some entries in the OS case statement that
12321 1998-11-03 22:19 millert
12323 * TROUBLESHOOTING: add "cd" section and flush out syslog section
12325 1998-11-03 20:51 millert
12327 * Makefile.in: no more sudo-lex.yy.c
12329 1998-11-03 20:50 millert
12331 * check_sia.c: add custom prompt support
12333 1998-11-03 20:40 millert
12335 * sudo.c: kill perror("malloc") since we already have a good error
12336 messages pw_ent -> pw for brevity set $USER if -u specified
12338 1998-11-03 20:39 millert
12340 * parse.c: kill perror("malloc") since we already have a good error
12341 messages pw_ent -> pw for brevity when checking if %group
12342 matches, look up user in password file so that %groups works in a
12345 1998-11-03 20:39 millert
12347 * logging.c, parse.yacc: kill perror("malloc") since we already
12348 have a good error messages
12350 1998-11-03 20:38 millert
12352 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12353 perror("malloc") since we already have a good error messages
12354 pw_ent -> pw for brevity
12356 1998-11-03 15:03 millert
12358 * tgetpass.c: the prompt is expanded before tgetpass is called
12360 1998-11-03 15:03 millert
12362 * sudo.h: tgetpass now has the same args as getpass again
12364 1998-11-03 15:02 millert
12366 * getspwuid.c: add iscomsec, issecure support
12368 1998-11-03 15:02 millert
12370 * check.c: we now expand any %h or %u in the prompt before passing
12373 1998-11-03 14:58 millert
12375 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12377 1998-11-03 14:56 millert
12379 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12381 1998-11-03 14:55 millert
12383 * configure.in: add check for iscomsec in HP-UX
12385 1998-11-03 14:51 millert
12387 * configure.in: check for issecure if we have getpwanam on SunOS
12388 some options are incompatible with DUNIX SIA check for dispcrypt
12391 1998-10-25 15:21 millert
12393 * config.h.in: add HAVE_DISPCRYPT
12395 1998-10-25 15:21 millert
12397 * secureware.c: add back support for non-dispcrypt based checking
12400 1998-10-25 00:51 millert
12402 * INSTALL: sia changes
12404 1998-10-25 00:48 millert
12406 * configure.in: SIA becomes the default on Digital UNIX now havbe
12407 --disable-sia to turn it off...
12409 1998-10-24 23:52 millert
12411 * check.c: move local includes after system ones
12413 1998-10-24 19:28 millert
12415 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12416 INCORRECT_PASSWORD or an insult to stderr
12418 1998-10-24 19:07 millert
12420 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12421 password. Only the first iteration was working.
12423 1998-10-21 21:00 millert
12425 * aclocal.m4: don't trust UID_MAX or MAXUID
12427 1998-10-21 20:35 millert
12429 * configure.in: fix two pastos
12431 1998-10-21 20:30 millert
12433 * configure.in: fix typo
12435 1998-10-21 20:19 millert
12437 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12438 legal to be negative in DUNX 5.0
12440 1998-10-21 20:15 millert
12442 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12443 -lm but check for -ldb since DUNX < 4.0 lacks it
12445 1998-10-21 19:50 millert
12447 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12448 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12449 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12452 1998-10-20 17:22 millert
12454 * INSTALL: updated --with-editor blurb
12456 1998-10-20 17:21 millert
12458 * TROUBLESHOOTING: tell how to put sudoers in a different dir
12460 1998-10-20 16:22 millert
12462 * configure.in: add missing quotes around $with_editor
12464 1998-10-20 14:00 millert
12466 * configure.in: typo in --with-editor bits
12468 1998-10-20 01:24 millert
12470 * INSTALL: I don't expect it to work on Solaris
12472 1998-10-20 01:24 millert
12474 * check.c: add back security/pam_misc.h
12476 1998-10-19 17:13 millert
12478 * INSTALL: remove dunix note since configure checks for this now
12480 1998-10-19 16:30 millert
12482 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12485 1998-10-19 14:32 millert
12487 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12490 1998-10-19 14:32 millert
12492 * config.h.in: add HAVE_INITPRIVS
12494 1998-10-19 14:31 millert
12496 * sudo.c: call initprivs() if we have it for getprpwuid later on
12498 1998-10-19 14:30 millert
12500 * Makefile.in: clean pathnames.h too
12502 1998-10-19 14:28 millert
12504 * configure.in: quote "Sorry, try again." with [] since it has a
12505 comma in it set LIBS when we add stuff to SUDO_LIBS set
12506 SECUREWARE when we find getprpwuid() so we can check for
12507 bigcrypt, set_auth_parameters, and initprivs later.
12509 1998-10-19 13:48 millert
12511 * INSTALL: update Digital UNIX note about acl.h
12513 1998-10-18 20:26 millert
12515 * INSTALL: add --with-sia --without-root-sudo ->
12516 --disable-root-sudo some reordering
12518 1998-10-18 20:22 millert
12520 * secureware.c: add whitespace
12522 1998-10-18 20:22 millert
12524 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12525 sudo.h: add SIA support
12527 1998-10-18 20:21 millert
12529 * check_sia.c: Initial revision
12531 1998-10-18 19:42 millert
12533 * configure.in: when checking for -lsocket, -lnsl, and -linet,
12534 check for the specific functions we need from them.
12536 1998-10-18 19:10 millert
12538 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12540 1998-10-18 18:15 millert
12542 * sudo.h, Makefile.in: added check_secureware
12544 1998-10-18 18:12 millert
12546 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12549 1998-10-18 18:00 millert
12551 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12552 other sets defined. configure now does that for us
12554 1998-10-18 17:45 millert
12556 * configure.in: move some --with options around change a bunch of
12557 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12559 1998-10-18 01:09 millert
12561 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12562 that caused a syntax error add some echo verbage
12564 1998-10-17 18:08 millert
12566 * check.c: moved SecureWare stuff into secureware.c
12568 1998-10-17 18:07 millert
12570 * secureware.c: Initial revision
12572 1998-10-17 17:02 millert
12574 * INSTALL: update url to solaris gcc bins
12576 1998-10-17 16:39 millert
12578 * INSTALL: change option formatter and flesh out someentries
12580 1998-10-17 16:18 millert
12582 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12583 environment variable
12585 1998-10-17 16:01 millert
12587 * BUGS: everything is now done via configure
12589 1998-10-17 16:00 millert
12591 * README: prev rev was 1.5.6
12593 1998-10-17 00:33 millert
12595 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12598 1998-10-17 00:32 millert
12600 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12603 1998-10-17 00:31 millert
12605 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12606 sudoers_gid, sudoers_mode from configure
12608 1998-10-17 00:30 millert
12610 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12611 substituted into the Makefile, not config.h
12613 1998-10-17 00:30 millert
12615 * INSTALL: document all --with/--enable options
12617 1998-10-15 02:25 millert
12619 * insults.h: options.h is no more
12621 1998-10-15 02:25 millert
12623 * config.h.in: assimilated options.h
12625 1998-10-15 02:24 millert
12627 * configure.in: moved options from options.h to configure
12629 1998-10-15 01:41 millert
12631 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12632 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12633 sudo_setenv.c, visudo.c: no more options.h
12635 1998-10-15 01:39 millert
12637 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12640 1998-10-15 01:32 millert
12642 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12644 1998-10-15 00:10 millert
12646 * tgetpass.c: if select return < -1 still prompt for pw
12648 1998-10-15 00:03 millert
12650 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12651 IGNORE_DOT_PATH into configure options
12653 1998-10-14 23:57 millert
12655 * parse.c: FAST_MATCH is no longer an optino
12657 1998-10-14 23:52 millert
12659 * check.c: remove_timestamp() if timestamp is preposterous
12661 1998-10-14 23:36 millert
12663 * options.h: convert more options to --with/--enable
12665 1998-10-14 23:36 millert
12667 * INSTALL, aclocal.m4: logfile -> logpath
12669 1998-10-14 23:31 millert
12671 * configure.in: convert more options into --with and --enable
12673 1998-10-14 23:28 millert
12675 * tgetpass.c: catch EINTR in select and restart
12677 1998-10-14 23:15 millert
12679 * logging.c: sys/errno -> errno
12681 1998-09-24 11:40 millert
12683 * sudo.c: UMASK -> SUDO_UMASK.
12685 1998-09-24 11:36 millert
12687 * check.c, logging.c: time.h, not sys/time.h
12689 1998-09-21 19:52 millert
12691 * logging.c: MAILER -> _PATH_SENDMAIL
12693 1998-09-21 00:06 millert
12695 * INSTALL, configure.in: no more --with-C2, now it is
12698 1998-09-21 00:00 millert
12700 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12701 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12702 Always include shadow support if the platform supports it and the
12703 user did not disable it via configure
12705 1998-09-20 19:48 millert
12707 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12709 1998-09-20 19:16 millert
12711 * Makefile.in: pathnames.h -> pathnames.h.in
12713 1998-09-20 19:14 millert
12715 * check.c: fix version string
12717 1998-09-20 19:12 millert
12719 * check.c: move pam_conv to be static to auth function remove
12720 pam_misc.h (solaris doesn't have one)
12722 1998-09-20 19:10 millert
12724 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12727 1998-09-20 19:10 millert
12729 * configure.in: munge pathnames.h.in -> pathnames.h kill
12732 1998-09-20 19:10 millert
12734 * pathnames.h.in: convert to pathnames.h.in
12736 1998-09-18 20:20 millert
12738 * configure.in: fix typo in sysv4 matching case /.
12740 1998-09-18 01:29 millert
12742 * check.c: pam stuff needs to run as root, not user, for shadow
12745 1998-09-17 12:26 millert
12747 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12748 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12749 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12750 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12751 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12752 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12753 BUGS, INSTALL, README, configure.in: updated version
12755 1998-09-17 12:13 millert
12757 * check.c: user version.h for long message
12759 1998-09-17 11:53 millert
12761 * check.c: this is version 1.5.6
12763 1998-09-16 13:42 millert
12765 * Makefile.in: remove errant backslash
12767 1998-09-14 22:25 millert
12769 * options.h, parse.yacc, pathnames.h.in: fix version string
12771 1998-09-14 22:02 millert
12773 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12775 1998-09-14 22:02 millert
12777 * RUNSON: updated for 1.5.6
12779 1998-09-14 11:48 millert
12781 * interfaces.c: kill unused localhost_mask var copy if name to
12782 ifr_tmp after we zero it
12784 1998-09-13 15:50 millert
12786 * INSTALL: Better description of new vs. old sudoers modes fix some
12787 typos better description of /usr/ucb/cc gotchas on slowaris
12789 1998-09-13 15:49 millert
12791 * Makefile.in: add sample.pam
12793 1998-09-13 15:32 millert
12795 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12797 1998-09-12 11:10 millert
12799 * README: mention TROUBLESHOOTING more fix some typos
12801 1998-09-11 20:30 millert
12803 * configure.in: move --enable/--disable to be after --with
12805 1998-09-11 20:30 millert
12807 * INSTALL: document --enable/--disable
12809 1998-09-11 20:26 millert
12811 * INSTALL: document --with-pam
12813 1998-09-11 19:47 millert
12815 * configure.in: Add message for pam users
12817 1998-09-11 19:27 millert
12819 * sample.pam: Initial revision
12821 1998-09-11 19:23 millert
12823 * config.h.in: fix HAVE_PAM
12825 1998-09-11 19:19 millert
12827 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12828 <GCalvin@kenwoodusa.com>
12830 1998-09-10 18:51 millert
12832 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12834 1998-09-10 18:51 millert
12836 * logging.c: add WRAP_LOG and HOST_IN_LOG
12838 1998-09-10 18:37 millert
12840 * configure.in: add --enable-log-host and --enable-log-wrap
12842 1998-09-10 18:32 millert
12844 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12847 1998-09-08 20:45 millert
12849 * compat.h: add howmany macro
12851 1998-09-08 20:43 millert
12853 * tgetpass.c: include sys/param.h to get howmany macro
12855 1998-09-07 20:42 millert
12857 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12860 1998-09-07 12:51 millert
12862 * fnmatch.c: bring in stdio.h for NULL
12864 1998-09-07 12:50 millert
12866 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12868 1998-09-07 12:43 millert
12870 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12872 1998-09-07 12:42 millert
12874 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12876 1998-09-07 12:41 millert
12878 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12881 1998-09-07 12:39 millert
12883 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12885 1998-09-07 12:06 millert
12887 * interfaces.c: initialize previfname
12889 1998-09-07 11:51 millert
12891 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12892 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12893 IFF_LOOPBACK instead of kludging it
12895 1998-09-07 11:49 millert
12897 * configure.in: typo
12899 1998-09-07 00:01 millert
12901 * Makefile.in: don't need special build line for sudo.tab.o
12903 1998-09-06 23:58 millert
12905 * Makefile.in: don't clean sudo.tab.[ch]
12907 1998-09-06 23:48 millert
12909 * sudo.c: Sudo should prompt for a password before telling the user
12910 that a command could not be found.
12912 1998-09-06 23:47 millert
12916 1998-09-06 23:25 millert
12918 * INSTALL, README: no longer require yacc
12920 1998-09-06 23:19 millert
12922 * Makefile.in: typo
12924 1998-09-06 23:18 millert
12926 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12928 1998-09-06 23:09 millert
12930 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12931 command args if you get a '='
12933 1998-09-06 22:59 millert
12935 * insults.h: fix version ,
12937 1998-09-06 22:57 millert
12939 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12942 1998-09-06 22:55 millert
12944 * getcwd.c: getcwd(3) from OpenBSD for those without it.
12946 1998-09-06 22:51 millert
12948 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12950 1998-09-06 22:49 millert
12952 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12955 1998-09-06 22:41 millert
12957 * parse.c: use NAMLEN() macro
12959 1998-09-06 22:34 millert
12961 * fnmatch.c: remove duplicate include of string.h
12963 1998-09-06 22:28 millert
12965 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12967 1998-09-06 22:28 millert
12969 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12971 1998-09-06 22:28 millert
12973 * config.h.in: add dev_t and ino_t
12975 1998-07-28 12:44 millert
12977 * check.c: fix OTP_ONLY for opie
12979 1998-06-24 12:22 millert
12981 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12983 1998-05-19 00:10 millert
12985 * Makefile.in: make update_version saner
12987 1998-05-18 23:32 millert
12989 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12991 1998-05-18 23:32 millert
12993 * configure.in: check for waitpid and wait3 or no waitpid
12995 1998-05-18 23:31 millert
12997 * logging.c: used waitpid or wait3 if we have 'em
12999 1998-05-02 14:16 millert
13001 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
13004 1998-04-27 20:09 millert
13006 * configure.in: don't need to explicately mention -lsocket -lnsl
13009 1998-04-25 01:56 millert
13011 * configure.in: dynix should not link with -linet
13013 1998-04-10 15:32 millert
13015 * INSTALL: mention that HP-UX doesn't ship with yacc
13017 1998-04-06 22:35 millert
13019 * check.c: ignore kerberos if we can't get the local realm
13021 1998-04-05 23:37 millert
13023 * configure.in, BUGS, INSTALL, README: ++version
13025 1998-04-05 23:36 millert
13029 1998-04-05 23:35 millert
13031 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
13032 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
13033 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
13034 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
13035 visudo.c: updated version
13037 1998-04-05 23:34 millert
13039 * check.c, sudo.h: fix version
13041 1998-04-05 23:33 millert
13043 * getcwd.c: don't use popen/pclose. Do it inline.
13045 1998-04-05 23:25 millert
13047 * lsearch.c: add rcsid
13049 1998-04-05 23:21 millert
13053 1998-04-05 23:17 millert
13055 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
13056 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13057 check.c: updated version
13059 1998-04-05 23:15 millert
13061 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
13064 1998-04-05 23:14 millert
13066 * Makefile.in: getwd.c -> getcwd.c
13068 1998-04-05 22:49 millert
13070 * config.h.in: kill HAVE_GETWD
13072 1998-04-05 22:49 millert
13074 * configure.in: getcwd, not getwd
13076 1998-04-05 22:48 millert
13078 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
13079 defeats the purpose
13081 1998-03-31 00:15 millert
13083 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
13085 1998-03-31 00:05 millert
13087 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13088 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13089 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13090 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13091 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13092 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13095 1998-03-30 23:54 millert
13097 * configure.in: support *-ccur-sysv4 and fix two typos
13099 1998-03-27 19:52 millert
13101 * configure.in: don't echo about with_logfile and with_timedir
13103 1998-03-27 19:49 millert
13105 * INSTALL: document --with-logfile and --with-timedir
13107 1998-03-27 19:46 millert
13109 * aclocal.m4: support --with-logfile and --with-timedir
13111 1998-03-27 19:46 millert
13113 * configure.in: Add --with-logfile and --with-timedir
13115 1998-03-27 19:27 millert
13117 * sudo.c: change size computation of NewArgv for UNICOS
13119 1998-02-18 20:10 millert
13121 * configure.in: treate -*-sysv4* like *-*-svr4
13123 1998-02-18 18:19 millert
13125 * configure.in: fix spacing for --with-authenticate help
13127 1998-02-18 16:39 millert
13129 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13130 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13131 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13132 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13133 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13134 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13137 1998-02-18 16:23 millert
13139 * parse.yacc: fix off by one error in push macro
13141 1998-02-17 01:15 millert
13143 * configure.in: removed bogus alloca hack
13145 1998-02-17 01:15 millert
13147 * check.c: added AIX 4.x authenticate() support
13149 1998-02-17 01:11 millert
13151 * parse.yacc: include alloca.h if using bison and not gcc and it
13152 exists. fixes an alloca problem on hpux 10.x
13154 1998-02-17 00:39 millert
13156 * INSTALL: mention --with-authenticate
13158 1998-02-17 00:37 millert
13160 * configure.in: added AIX authenticate() support
13162 1998-02-17 00:22 millert
13164 * config.h.in: add HAVE_AUTHENTICATE
13166 1998-02-16 23:58 millert
13168 * interfaces.c: dynamically size ifconf buffer
13170 1998-02-16 23:56 millert
13172 * configure.in: quote '[' and ']'
13174 1998-02-16 21:42 millert
13176 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13177 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13178 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13179 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13180 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13181 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13184 1998-02-16 19:06 millert
13186 * visudo.pod: add ERRORS section
13188 1998-02-16 18:57 millert
13190 * TROUBLESHOOTING: add busy stmp file explanation
13192 1998-02-15 18:49 millert
13194 * configure.in: the name of the cached var that signals whether or
13195 not you are cross compiling changed. It is now
13196 ac_cv_prog_cc_cross
13198 1998-02-11 16:26 millert
13200 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13202 1998-02-06 21:55 millert
13204 * sample.sudoers, sudoers.pod: better example of su but not root su
13206 1998-02-06 15:49 millert
13208 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13209 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13210 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13211 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13212 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13213 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13216 1998-02-06 15:48 millert
13218 * Makefile.in: correct regexp for updating version
13220 1998-02-06 14:05 millert
13222 * tgetpass.c: remove bogus flush of stderr spew prompt before
13223 turning off echo. Seems to fix a weird problem where if sudo
13224 complained about a bogus stamp file the user would sometimes not
13225 have a chance to enter a password
13227 1998-02-06 14:05 millert
13229 * check.c: fix bogus flush of stderr
13231 1998-02-05 19:19 millert
13233 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13235 1998-02-05 19:18 millert
13237 * configure.in: support hpux1[0-9] not just hpux10
13239 1998-01-30 14:59 millert
13241 * parse.c: set sudoers_fp to nil after closing
13243 1998-01-24 01:05 millert
13245 * config.guess, config.sub: updated from autoconf 2.12
13247 1998-01-24 00:50 millert
13249 * configure.in: add *-*-svr4 rule
13251 1998-01-22 22:53 millert
13253 * tgetpass.c: fix select usage for high fd's (dynamically allocate
13256 1998-01-22 22:49 millert
13258 * check.c: kill extra whitespace
13260 1998-01-22 19:28 millert
13262 * sudo.c: do an initgroups() before running a command, unless the
13263 target user is root.
13265 1998-01-22 12:22 millert
13267 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13270 1998-01-21 01:56 millert
13272 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13273 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13276 1998-01-21 01:32 millert
13278 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13281 1998-01-21 01:29 millert
13283 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13284 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13285 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13288 1998-01-21 01:20 millert
13290 * Makefile.in: more tweaks to update_version
13292 1998-01-21 01:19 millert
13294 * Makefile.in: fixed up update_version rule
13296 1998-01-21 00:55 millert
13298 * configure.in: ++version
13300 1998-01-21 00:53 millert
13302 * Makefile.in: removed supe of check.c
13304 1998-01-21 00:51 millert
13306 * INSTALL: ++version I missed
13308 1998-01-21 00:51 millert
13312 1998-01-21 00:48 millert
13314 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13315 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13316 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13317 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13318 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13319 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13320 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13322 1998-01-21 00:47 millert
13324 * CHANGES: updated for 1.5.5
13326 1998-01-21 00:35 millert
13328 * Makefile.in: add rules to update version stuff in files so I
13329 don't need to do it by hand
13331 1998-01-21 00:04 millert
13333 * sudo.h: sudoers_fp is now extern
13335 1998-01-21 00:03 millert
13337 * sudo.c: in check_sudoers, cache the sudoers file handle in
13338 sudoers_fp so we don't have to open it again in the parse. This
13339 may help with weird solaris problems where EAGAIN sometime
13342 1998-01-21 00:02 millert
13344 * parse.c: sudoers file open is now done only in check_sudoers() so
13345 we just do a rewind() instead of an open. May help people on
13346 solaris who were getting EAGAIN.
13348 1998-01-16 11:43 millert
13350 * INSTALL: mention that newer glibc is fixed
13352 1998-01-13 12:58 millert
13354 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13355 so ignore _RLD* instead of _RLD_*
13357 1998-01-13 10:32 millert
13361 1998-01-13 10:19 millert
13363 * parse.c: fix that bug for real
13365 1998-01-13 02:39 millert
13367 * INSTALL: document Linux's libc6 brokenness.
13369 1998-01-13 02:00 millert
13371 * parse.yacc: -Wall
13373 1998-01-13 01:22 millert
13377 1998-01-13 00:50 millert
13379 * TROUBLESHOOTING: remind people to HUP syslogd
13381 1998-01-13 00:05 millert
13383 * Makefile.in: add -O flag to tar
13385 1998-01-13 00:00 millert
13387 * TODO, RUNSON: updated
13389 1998-01-12 23:59 millert
13391 * sudo.pod: remove author's email addr. people should mail
13394 1998-01-12 23:49 millert
13396 * INSTALL: fix version
13398 1998-01-12 23:48 millert
13400 * README, check.c, compat.h, config.h.in, configure.in,
13401 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13402 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13403 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13404 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13405 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13406 visudo.c: ++version
13408 1998-01-12 23:44 millert
13412 1998-01-12 23:42 millert
13414 * INSTALL, Makefile.in: ++version
13416 1998-01-12 23:41 millert
13418 * CHANGES: updated fort 1.5.4
13420 1998-01-12 23:41 millert
13422 * check.c: exit(1) if user enters no passwd
13424 1998-01-12 23:37 millert
13428 1998-01-12 23:10 millert
13430 * parse.c: commands can start with ./* not just /* -- fixes a
13431 serious security hole.
13433 1997-12-21 18:17 millert
13435 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13436 leave it as "unknown".
13438 1997-11-23 13:29 millert
13440 * sample.sudoers: fix usage of (username) in conjunction with , and
13443 1997-11-23 13:28 millert
13445 * visudo.c: catch the case where the user is not in the passwd file
13447 1997-11-23 13:24 millert
13449 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13450 the nfds arg to select(2)
13452 1997-11-23 01:53 millert
13454 * sudo.c: define tty global to an initial value to avoid dumping
13455 core in logging functions when passwd file is unavailable.
13457 1997-11-23 01:51 millert
13459 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13460 gotten the passwd entry
13462 1997-11-23 00:21 millert
13464 * sudo.pod: talk about problem of ALL
13466 1997-10-10 00:54 millert
13468 * README: new web location
13470 1997-10-10 00:54 millert
13472 * INSTALL: fdesc bug is fixed in Open/Net BSD
13474 1997-10-10 00:52 millert
13476 * HISTORY: updates from Nieusma
13478 1997-10-09 18:37 millert
13480 * dce_pwent.c: move compat.h after the system includes
13482 1997-08-06 14:58 millert
13484 * logging.c: save errno from being clobbered by wait(). From Theo
13486 1997-05-21 11:57 millert
13488 * compat.h: fix an occurence of setresuid -> setreuid (typo)
13490 1997-03-19 17:45 millert
13492 * install-sh: check for path to strip
13494 1997-01-15 19:05 millert
13496 * logging.c: deal with maxfilelen < 0 case
13498 1997-01-15 19:05 millert
13500 * OPTIONS: fixed descriptin
13502 1996-12-11 23:10 millert
13504 * sudo.c: correct error message if mode/owner wrong and not
13505 statable by owner but is statable by root.
13507 1996-11-23 02:18 millert
13509 * config.guess, config.sub: autoconf 2.11
13511 1996-11-16 14:42 millert
13513 * CHANGES, RUNSON, TODO: sudo 1.5.3.
13515 1996-11-14 15:08 millert
13517 * sudo.h, parse.yacc: command_alias -> generic_alias
13519 1996-11-13 22:50 millert
13521 * sample.sudoers: added Runas_Alias example and fixed syntax errors
13523 1996-11-13 22:50 millert
13525 * OPTIONS, options.h: updated MAILSUBJECT
13527 1996-11-13 22:49 millert
13529 * logging.c: added %h expansion
13531 1996-11-13 21:37 millert
13533 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13534 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13535 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13536 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13537 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13538 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13539 visudo.c, INSTALL, README, configure.in: ++version
13541 1996-11-13 20:01 millert
13543 * emul/utime.h, BUGS: ++version
13545 1996-11-13 19:45 millert
13547 * sudoers.pod: document Runas_Alias
13549 1996-11-13 19:22 millert
13551 * visudo.pod: q (uid) -> Q
13553 1996-11-13 19:21 millert
13555 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13558 1996-11-13 19:05 millert
13560 * parse.yacc: add size params to sprintf
13562 1996-11-13 19:04 millert
13564 * parse.lex: allow trailing space after '\\' but before '\n'
13566 1996-11-13 19:04 millert
13568 * find_path.c: off by one error in path size check
13570 1996-11-13 19:03 millert
13572 * check.c: sprintf paranoia
13574 1996-11-12 11:59 millert
13576 * parse.yacc: fixed more_aliases
13578 1996-11-12 11:58 millert
13580 * visudo.c: now warns if killed by signal ./
13582 1996-11-11 10:49 millert
13584 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13585 expanded (but it is gross)
13587 1996-11-10 20:32 millert
13589 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13592 1996-11-10 20:08 millert
13594 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13597 1996-11-10 20:02 millert
13599 * parse.lex: Add Runas_Alias and simplify a rule.
13601 1996-11-10 19:15 millert
13603 * parse.yacc: always store User_Alias's since they can be used
13604 inside of a runas list. Sigh. Really need a Runas_Alias
13607 1996-10-30 18:04 millert
13609 * visudo.c: deal with case where there is no sudoers file
13611 1996-10-11 23:01 millert
13613 * TROUBLESHOOTING: added one
13615 1996-10-10 22:11 millert
13617 * HISTORY, testsudoers.c: developement -> development
13619 1996-10-10 22:08 millert
13621 * INSTALL: added a note
13623 1996-10-10 20:36 millert
13625 * RUNSON: for 1.5.2
13627 1996-10-10 20:36 millert
13631 1996-10-10 00:56 millert
13633 * PORTING: removed seteuid() notes
13635 1996-10-09 13:37 millert
13637 * compat.h: better seteuid() emulatino
13639 1996-10-09 13:36 millert
13641 * configure.in: added check for seteuid
13643 1996-10-09 13:36 millert
13645 * config.h.in: added HAVE_SETEUID
13647 1996-10-08 19:22 millert
13649 * configure.in: first stab at sequent support
13651 1996-10-08 19:21 millert
13653 * config.h.in: added HAVE_SYS_SELECT_H
13655 1996-10-08 19:21 millert
13657 * compat.h: sequent -> _SEQUENT_
13659 1996-10-08 19:11 millert
13661 * compat.h: added seteuid() macro for DYNIX
13663 1996-10-08 18:54 millert
13665 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13667 1996-10-07 01:05 millert
13669 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13670 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13671 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13672 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13673 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13674 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13675 visudo.c, tgetpass.c: ++version
13677 1996-10-07 00:59 millert
13679 * sudo.pod: added -H and SUDO_PS1
13681 1996-10-07 00:55 millert
13683 * configure.in: use SUDO_FUNC_FNMATCH
13685 1996-10-07 00:54 millert
13687 * aclocal.m4: added SUDO_FUNC_FNMATCH
13689 1996-10-07 00:53 millert
13691 * sudo.c: added -H flag
13693 1996-10-07 00:53 millert
13695 * sudo.h: added MODE_RESET_HOME /
13697 1996-10-05 00:00 millert
13699 * INSTALL: mention OPIE
13701 1996-10-04 23:59 millert
13703 * configure.in: added opie support
13705 1996-10-04 23:59 millert
13707 * check.c: added HAVE_OPIE and changed to *_OTP_*
13709 1996-10-04 23:58 millert
13711 * compat.h, config.h.in: added HAVE_OPIE
13713 1996-10-04 23:58 millert
13715 * OPTIONS, options.h: SKEY -> OTP
13717 1996-10-03 23:27 millert
13719 * check.c: moved fclose() in skey stuff.
13721 1996-10-03 19:53 millert
13723 * putenv.c: index -> strchr remove unnecesary stuff
13725 1996-10-03 19:43 millert
13727 * check.c: now call skeychallenge() to get challenge instead of
13728 making one up ourselves. this way, we get extra goodies in the
13731 1996-09-10 00:32 millert
13733 * CHANGES: added one
13735 1996-09-10 00:18 millert
13737 * parse.lex: allow logins to start with a number (YUCK!)
13739 1996-09-08 15:18 millert
13741 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13743 1996-09-08 15:15 millert
13745 * configure.in: DUNIX doesn't need -lnsl
13747 1996-09-07 20:22 millert
13749 * CHANGES: [no log message]
13751 1996-09-07 20:21 millert
13753 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13754 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13755 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13756 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13757 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13758 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13760 1996-09-07 20:13 millert
13762 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13765 1996-09-07 20:12 millert
13767 * visudo.pod: [no log message]
13769 1996-09-07 20:00 millert
13771 * sudo.pod, visudo.pod: courtesan
13773 1996-09-07 19:45 millert
13775 * HISTORY: added courtesan ./
13777 1996-09-06 00:12 millert
13779 * sudo.c: added $SUDO_PROMPT support
13781 1996-09-04 17:19 millert
13783 * check.c: print long skey challemged to stderr, not stdout
13785 1996-08-31 23:10 millert
13787 * CHANGES: updated for 1.5.1
13789 1996-08-31 23:07 millert
13791 * emul/utime.h: ++version
13793 1996-08-31 12:34 millert
13795 * RUNSON: updated for 1.5.1
13797 1996-08-30 10:49 millert
13799 * check.c: use shost, not host for tgetpass
13801 1996-08-30 00:21 millert
13803 * OPTIONS, sudo.pod: documented %u and %h
13805 1996-08-29 20:40 millert
13807 * configure.in: fixed typo
13809 1996-08-29 20:37 millert
13811 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13812 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13813 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13814 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13815 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13816 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13817 visudo.c: ++version
13819 1996-08-29 20:30 millert
13823 1996-08-29 18:32 millert
13825 * configure.in, Makefile.in, version.h: ++version
13827 1996-08-29 17:58 millert
13829 * sudo.h: new tgetpass() params
13831 1996-08-29 17:58 millert
13833 * check.c: pass use and host to tgetpass
13835 1996-08-29 17:57 millert
13837 * tgetpass.c: added %u and %h escapes
13839 1996-08-29 16:56 millert
13841 * OPTIONS, options.h, check.c: added NO_MESSAGE
13843 1996-08-29 16:23 millert
13845 * configure.in: added cray (unicos) support
13847 1996-08-27 11:36 millert
13849 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13851 1996-08-25 17:56 millert
13853 * INSTALL: added note about "make install"
13855 1996-08-25 17:50 millert
13857 * parse.yacc: changed length/size params from int to size_t
13859 1996-08-25 13:35 millert
13861 * OPTIONS: now get CSOPS insults as well by default
13863 1996-08-25 13:33 millert
13865 * insults.h: use csops insults too by default
13867 1996-08-25 13:31 millert
13869 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13870 version.h: version = 1.5
13872 1996-08-25 13:27 millert
13874 * sudo.c: added runas_homedir
13876 1996-08-25 13:27 millert
13878 * TODO: updated for 1.5
13880 1996-08-25 13:23 millert
13882 * RUNSON: updated for 1.5
13884 1996-08-25 13:19 millert
13886 * CHANGES: 1.5 release
13888 1996-08-25 13:17 millert
13890 * INSTALL: added "upgrading" notes
13892 1996-08-22 14:00 millert
13894 * visudo.c: now do chmod and chown after edit of temp file and
13897 1996-08-18 12:52 millert
13899 * Makefile.in: ++version added INSTALL.configure
13901 1996-08-18 12:52 millert
13903 * version.h, configure.in: ++version
13905 1996-08-18 12:51 millert
13907 * TROUBLESHOOTING: [no log message]
13909 1996-08-18 12:50 millert
13911 * parse.yacc: added missing cast
13913 1996-08-17 20:37 millert
13915 * sudo.c: sets $HOME to pw_dir of runas user
13917 1996-08-17 20:02 millert
13919 * sudo.pod: document $HOME change
13921 1996-08-17 19:43 millert
13923 * sudo.pod: fixed up some wording
13925 1996-08-17 19:25 millert
13927 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13928 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13929 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13930 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13932 1996-08-17 19:19 millert
13934 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13935 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13938 1996-08-17 19:18 millert
13940 * sudo.h: name nad type changes
13942 1996-08-17 19:17 millert
13944 * testsudoers.c: now works with new sudo
13946 1996-08-17 19:07 millert
13948 * parse.yacc: fixed some XXX
13950 1996-08-17 18:52 millert
13952 * parse.yacc: some variable name changes + comment headers for
13955 1996-08-17 18:41 millert
13957 * tgetpass.c: added extra paren's to make compilers happy
13959 1996-08-17 18:34 millert
13961 * sudo.c: [no log message]
13963 1996-08-17 18:30 millert
13965 * parse.c: now uses init_parser() if not in sudoers and tries
13966 "list" or "validate" scold but don't be nasty.
13968 1996-08-17 18:29 millert
13970 * TROUBLESHOOTING: now can use upper case login names
13972 1996-08-17 18:29 millert
13974 * visudo.c: now uses init_parser()
13976 1996-08-17 18:28 millert
13978 * PORTING: added info about PASSWORD_TIMEOUT
13980 1996-08-17 18:28 millert
13982 * INSTALL, README: updated
13984 1996-08-17 18:28 millert
13986 * INSTALL.configure: Initial revision
13988 1996-08-17 18:27 millert
13990 * BUGS: fixed a bug ,
13992 1996-08-17 18:27 millert
13994 * parse.yacc: now dynamically allocates memory for the stacks -- no
13997 1996-08-17 18:26 millert
13999 * sudo.pod: -l now explands command aliases
14001 1996-08-17 13:22 millert
14003 * parse.yacc: hacks to expand command aliases for `sudo -l'
14005 1996-08-17 13:22 millert
14007 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
14010 1996-08-17 13:22 millert
14012 * sudo.h: added struct command_alias
14014 1996-08-17 13:20 millert
14016 * sudo.pod: fixed a bug
14018 1996-08-17 13:15 millert
14020 * lsearch.c: in compar() key should be first arg
14022 1996-08-15 15:48 millert
14024 * BUGS: fixed some bugs
14026 1996-08-15 15:47 millert
14028 * parse.yacc: can now deal with upcase HOST and USER names
14030 1996-08-15 15:47 millert
14032 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
14034 1996-08-15 15:46 millert
14036 * sudo.pod: fixed thinko
14038 1996-08-15 15:46 millert
14040 * parse.c: fix comment
14042 1996-08-09 18:07 millert
14044 * parse.c, parse.yacc: added support for new `sudo -l' stuff
14046 1996-08-09 18:06 millert
14048 * sudo.c: now uses list_matches()
14050 1996-08-09 18:06 millert
14052 * sudo.h: added struct sudo_match
14054 1996-08-09 17:37 millert
14056 * configure.in: now more -lgnumalloc
14058 1996-08-01 13:12 millert
14060 * install-sh: added more paths for chown and whoami
14062 1996-07-31 10:41 millert
14066 1996-07-30 13:45 millert
14068 * aclocal.m4: fixed DUNIX check for shadow pw
14070 1996-07-30 13:41 millert
14072 * tgetpass.c: now only turn off echo if it is already on. this
14073 fixes a race when you use sudo in a pipelin
14075 1996-07-30 12:53 millert
14079 1996-07-29 22:29 millert
14081 * configure.in: changed "test -z $foo && do_this" to if; then
14084 1996-07-28 22:47 millert
14086 * configure.in: added missing defines of SHADOW_TYPE
14088 1996-07-26 14:10 millert
14090 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
14091 they are only in dunix 4.x
14093 1996-07-26 14:09 millert
14095 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
14097 1996-07-26 13:23 millert
14099 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
14100 that didn't match. Now we can have runas stuff on more than one
14103 1996-07-25 23:45 millert
14105 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
14106 defined to something
14108 1996-07-25 23:45 millert
14110 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14112 1996-07-25 23:44 millert
14114 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14115 instead of HAVE_C2_SECURITY
14117 1996-07-25 23:44 millert
14119 * check.c: SHADOW_TYPE is always defined so just against its value
14121 1996-07-25 23:44 millert
14123 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14125 1996-07-25 18:47 millert
14127 * sudoers.pod: * -> ?* in one example added another instance of
14128 (runas) and one of NOPASSWD:
14130 1996-07-24 13:02 millert
14132 * configure.in: added back check for config.cache from other host
14135 1996-07-24 12:49 millert
14137 * parse.lex: removed an instance of \"
14139 1996-07-24 12:49 millert
14141 * sample.sudoers: added an example
14143 1996-07-24 12:44 millert
14145 * sudoers.pod: updated wrt new wildcard matching
14147 1996-07-24 10:28 millert
14149 * configure.in: new check for shadow passwords if we don't know
14152 1996-07-24 10:28 millert
14154 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14156 1996-07-24 02:19 millert
14158 * configure.in: added back check for -lsocket (oops)
14160 1996-07-24 02:16 millert
14162 * configure.in: better (working) check for shadow passwd type if we
14165 1996-07-24 01:59 millert
14167 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14169 1996-07-24 01:59 millert
14171 * Makefile.in: added config.{guess,sub}
14173 1996-07-24 01:58 millert
14175 * aclocal.m4: removed unused stuff to figure out os type
14177 1996-07-23 22:58 millert
14179 * config.sub: added openbsd
14181 1996-07-23 22:54 millert
14183 * config.sub: Initial revision
14185 1996-07-23 22:40 millert
14187 * config.guess: Initial revision
14189 1996-07-23 21:18 millert
14191 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14192 it can only be a pathname. need to check against sudoers_args
14193 even if user_args is nil
14195 1996-07-23 21:18 millert
14197 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14198 can only be a pathname need to check against sudoers_args even if
14201 1996-07-23 18:52 millert
14203 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14205 1996-07-23 01:18 millert
14207 * testsudoers.c: now takes command line args and uses cmnd_args
14209 1996-07-23 01:10 millert
14211 * parse.lex: fill_args was adding an extra leading space
14213 1996-07-22 15:50 millert
14215 * visudo.c: fixed dummy command_matches()
14217 1996-07-22 15:50 millert
14219 * parse.yacc: fixed prototype
14221 1996-07-22 15:31 millert
14223 * sudo.h: added cmnd_args
14225 1996-07-22 15:31 millert
14227 * parse.yacc: now uses flat args string
14229 1996-07-22 15:30 millert
14231 * parse.c, parse.lex: now uses flat arg string
14233 1996-07-22 15:29 millert
14235 * visudo.c: added cmnd_args def
14237 1996-07-22 14:30 millert
14239 * sudo.c: now sets cmnd_args global
14241 1996-07-22 14:30 millert
14243 * logging.c: cmnd_args is now exported from sudo.[ch]
14245 1996-07-21 18:41 millert
14247 * parse.yacc: can't rely on cmnd_matches as much as I thought --
14248 added some $$ stuff back in to prevent namespace pollution
14251 1996-07-21 18:01 millert
14253 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14256 1996-07-20 00:45 millert
14258 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14259 starts a 'runas' if in the initial state to avoid collision with
14262 1996-07-20 00:23 millert
14264 * configure.in: added checks for specific shadow passwd schemes
14266 1996-07-20 00:18 millert
14268 * aclocal.m4: added routines to check for specific shadow passwd
14271 1996-07-18 18:27 millert
14273 * configure.in: added support for ncr boxen
14275 1996-07-18 18:26 millert
14277 * aclocal.m4: added support for detecting ncr boxen
14279 1996-07-16 14:57 millert
14281 * configure.in: added sinix support
14283 1996-07-13 22:29 millert
14285 * TROUBLESHOOTING: added info about "config.cache from other other"
14288 1996-07-13 22:22 millert
14290 * aclocal.m4: now makes sure you don't have a config.cache file
14293 1996-07-13 21:36 millert
14295 * configure.in: now sets $LIBS when needed to configure links with
14296 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14297 check for bigcrypt(3) if SPW_SECUREWARE
14299 1996-07-13 21:30 millert
14301 * getspwuid.c: fixed typo
14303 1996-07-13 21:05 millert
14305 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14306 AUTH_MAX_PASSWD_LENGTH
14308 1996-07-13 21:05 millert
14310 * getspwuid.c: no more SPW_HPUX10
14312 1996-07-13 21:04 millert
14314 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14316 1996-07-13 21:04 millert
14318 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14320 1996-07-13 21:04 millert
14322 * check.c: SPW_SECUREWARE now uses bigcrypt
14324 1996-07-13 18:24 millert
14326 * sample.sudoers: fixed 2 syntax errors
14328 1996-07-13 18:24 millert
14330 * sudoers: root may now run ALL as ALL
14332 1996-07-11 20:59 millert
14334 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14336 1996-07-08 16:08 millert
14338 * check.c, configure.in: updated AFS support
14340 1996-07-08 16:07 millert
14342 * TROUBLESHOOTING: added entry about /usr/ucb/cc
14344 1996-07-08 16:06 millert
14346 * INSTALL: prep no longer holds gcc binaries
14348 1996-07-08 15:48 millert
14350 * INSTALL: updated AFS note
14352 1996-07-08 15:43 millert
14354 * Makefile.in: added @AFS_LIBS@
14356 1996-07-08 15:33 millert
14358 * compat.h: AFS allows long passwords
14360 1996-07-08 14:16 millert
14362 * testsudoers.c: fixed -u user support
14364 1996-07-08 14:16 millert
14366 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14368 1996-07-08 13:30 millert
14370 * parse.yacc: fixed no_passwd vs. runas_matched
14372 1996-07-08 10:30 millert
14374 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14377 1996-07-08 10:30 millert
14379 * INSTALL: added --with-libraries > --with-libpath --with-incpath
14381 1996-07-08 10:21 millert
14383 * parse.yacc: was setting runas_matches to -1 in wrong place
14385 1996-07-08 09:58 millert
14387 * check.c: removed usersec.h which is not present in new AFS
14390 1996-07-08 09:55 millert
14392 * tgetpass.c: now deals with timeout <= 0
14394 1996-07-08 09:51 millert
14398 1996-07-08 00:04 millert
14400 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14402 1996-07-07 22:30 millert
14404 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14405 for root readable/writable filesystems
14407 1996-07-07 20:49 millert
14409 * Makefile.in: now gives INSTALL -c flag
14411 1996-07-07 20:34 millert
14413 * parse.yacc: slightly simpler initialization of no_passwd and
14416 1996-07-07 20:33 millert
14418 * testsudoers.c: added -u username support
14420 1996-07-07 20:32 millert
14422 * configure.in: improved --with-libraries support
14424 1996-07-07 16:27 millert
14426 * configure.in: added --with-incpath, --with-libpath,
14429 1996-07-07 16:01 millert
14431 * parse.yacc: now initializes some fields that weren't getting set
14432 to -1 pretty gross -- need a rewrite.
14434 1996-06-25 23:19 millert
14436 * alloca.c: removed emacs'isms
14438 1996-06-25 22:29 millert
14440 * configure.in: no longer add -lPW to *_LIBS since we include
14443 1996-06-25 22:29 millert
14445 * config.h.in: added HAVE_ALLOCA_H
14447 1996-06-25 22:28 millert
14449 * Makefile.in: added alloca.c
14451 1996-06-25 22:18 millert
14453 * alloca.c: Initial revision
14455 1996-06-25 21:58 millert
14457 * configure.in: ++version
14459 1996-06-25 19:32 millert
14461 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14462 nobody is not always set to a valid uid.
14464 1996-06-25 19:31 millert
14466 * OPTIONS: fixed entry for SUDO_MODE
14468 1996-06-25 18:02 millert
14470 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14471 *and* gid were being set to -2. Now beat NFS to the punch and
14472 set uid to "nobody" ourselves, preserving group 0 to read
14475 1996-06-25 18:02 millert
14477 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14479 1996-06-25 18:00 millert
14481 * logging.c: fixed a typo
14483 1996-06-25 18:00 millert
14485 * configure.in: no longer need AC_PROG_INSTALL
14487 1996-06-25 17:59 millert
14489 * Makefile.in: always use install-sh to avoid install(1)'s that use
14492 1996-06-25 16:07 millert
14494 * INSTALL: make clean -> make distclean
14496 1996-06-20 01:17 millert
14498 * parse.yacc: removed some unnecsary if's
14500 1996-06-20 01:16 millert
14502 * Makefile.in, version.h: ++version
14504 1996-06-20 01:16 millert
14506 * parse.c, testsudoers.c: now includes netgroup.h
14508 1996-06-20 00:45 millert
14510 * interfaces.c: removed cats of ioctl to int since they didn't shut
14513 1996-06-20 00:43 millert
14515 * interfaces.c: explicately cast ioctl() to int since it it not
14518 1996-06-20 00:41 millert
14520 * sudo.h: added declarations for yyparse() and yylex()
14522 1996-06-20 00:27 millert
14524 * parse.yacc: fixed an occurence of '==' -> '='
14526 1996-06-20 00:22 millert
14528 * config.h.in, configure.in: added check for netgroup.h
14530 1996-06-20 00:20 millert
14532 * sudo.c: fixed 2 compiler warnings
14534 1996-06-20 00:08 millert
14536 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14537 weren't being initialized
14539 1996-06-19 13:53 millert
14541 * sudo.pod: fixed a typo
14543 1996-06-17 12:19 millert
14545 * parse.yacc: fixed a formatting thingie
14547 1996-06-17 12:16 millert
14549 * parse.c, parse.yacc: fixed -u support with multiple user lists on
14552 1996-06-17 10:23 millert
14554 * configure.in: unixware needs -lgen
14556 1996-06-17 10:23 millert
14558 * README: updated ftp location
14560 1996-06-17 00:08 millert
14562 * sudoers.pod: add net_addr/netmask support
14564 1996-06-17 00:07 millert
14566 * sample.sudoers: added net_addr/mask example
14568 1996-06-17 00:02 millert
14570 * parse.lex, parse.c: added support for net_addr/netmask
14572 1996-06-15 20:13 millert
14574 * sudoers.pod: ^ -> !
14576 1996-06-15 18:12 millert
14578 * RUNSON: updated for 1.4.3
14580 1996-06-15 18:12 millert
14582 * CHANGES: udpated for 1.4.3
14584 1996-06-15 18:11 millert
14586 * TROUBLESHOOTING, TODO, BUGS: updated
14588 1996-06-15 18:11 millert
14590 * sample.sudoers: updated with examples of new stuff
14592 1996-06-15 18:10 millert
14594 * INSTALL, README: ++version
14596 1996-06-15 18:01 millert
14598 * sudoers.pod: updated wrt -u and NOPASSWD
14600 1996-06-15 17:58 millert
14602 * sudo.pod: updated wrt -u and CAVEATS
14604 1996-06-08 23:15 millert
14606 * sudo.c: fixed usage()
14608 1996-06-08 22:57 millert
14610 * parse.lex: now use :foo: character classes (makes no diff for
14613 1996-06-07 14:33 millert
14615 * check.c: fixed LONG_SKEY_PROMPT stuff
14617 1996-06-06 15:35 millert
14619 * visudo.c: fixed a comment
14621 1996-06-06 15:03 millert
14623 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14625 1996-06-06 15:02 millert
14627 * emul/search.h: fixed decls of lsearch()
14629 1996-06-05 22:20 millert
14631 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14633 1996-06-05 22:20 millert
14635 * check.c: hpux 10 uses bigcrypt() if C2
14637 1996-06-04 19:57 millert
14639 * parse.c: now always uses fnmatch to match args
14641 1996-06-04 19:40 millert
14643 * tgetpass.c: back to using stdio instead of raw i/o since that
14644 caused some problems
14646 1996-05-28 22:14 millert
14648 * sudo.c: now give usage warning if use -l,-v,-k with args
14650 1996-05-28 18:22 millert
14652 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14654 1996-05-28 12:50 millert
14656 * sudo.c: now sets sudoers to correct group if mode is 0400
14658 1996-05-28 12:02 millert
14660 * install-sh: updated to version used by inn and bind
14662 1996-05-28 00:08 millert
14664 * configure.in: now uses -lgnumalloc if it exists
14666 1996-05-28 00:02 millert
14668 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14671 1996-05-28 00:01 millert
14673 * sudo.c: rmeoved debugging statements
14675 1996-05-28 00:00 millert
14677 * parse.yacc: added a missing free()
14679 1996-05-27 23:58 millert
14681 * sudo.c: now uses user_gid instead of getegid (which was wrong
14682 anyway) to set SUDO_GID Now sets command line args in
14683 SUDO_COMMAND envariabled (logging.c depends on args being in the
14686 1996-05-27 23:57 millert
14688 * logging.c: now uses SUDO_COMMAND envariable to get command args
14689 rather than building it up again.
14691 1996-05-27 22:42 millert
14693 * parse.c: now uses user_gid
14695 1996-05-27 20:02 millert
14697 * sudo.c: fixed off by one error in allocation NewArgv
14699 1996-05-27 20:01 millert
14701 * parse.c: in sudoers, 'command ""' now means command with no args
14703 1996-05-27 20:01 millert
14705 * configure.in: added check for fnmatch(3) and fnmatch.h
14707 1996-05-27 20:01 millert
14709 * config.h.in: added HAVE_FNMATCH
14711 1996-05-27 20:00 millert
14713 * Makefile.in: replaced wildcat.* with fnmatch.*
14715 1996-05-27 20:00 millert
14717 * testsudoers.c: now uses fnmatch()
14719 1996-05-27 19:38 millert
14721 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14722 (*) by itself now matches multiple args added support for
14723 wildcards in the pathname in sudoers
14725 1996-05-25 19:23 millert
14727 * fnmatch.c: now includes compat.h and config.h
14729 1996-05-25 18:09 millert
14731 * config.h.in: added HAVE_FNMATCH_H
14733 1996-05-25 18:07 millert
14735 * configure.in: now checks for alloca() (if needed by bison or dce)
14736 and links with -lPW if it contains alloca() and libv and compiler
14739 1996-05-25 18:03 millert
14741 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14743 1996-04-28 22:38 millert
14745 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14748 1996-04-28 17:44 millert
14750 * Makefile.in: fixed pod2man usage
14752 1996-04-28 17:40 millert
14754 * configure.in, Makefile.in, version.h: ++version
14756 1996-04-28 17:20 millert
14758 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14760 1996-04-28 17:20 millert
14762 * sudo.h: removed PERM_FULL_ROOT
14764 1996-04-28 17:18 millert
14766 * sudo.c: runas_user defaults to "root" so no more need to
14769 1996-04-28 17:16 millert
14771 * parse.c: will now only running commands as root if there was no
14772 runas list (or if root is in the runas list)
14774 1996-04-28 17:15 millert
14776 * logging.c: now logs "USER=%s"
14778 1996-04-28 17:12 millert
14780 * parse.yacc: runas_matches is now set to false if we get a
14783 1996-04-28 15:01 millert
14785 * parse.lex: make #uid work + some minor cleanup
14787 1996-04-27 21:04 millert
14789 * sample.sudoers: added support for NOPASSWD and "runas" from
14792 1996-04-27 21:03 millert
14794 * visudo.c: added support for "runas" from garp@opustel.com
14795 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14796 support for SUDOERS_MODE
14798 1996-04-27 21:03 millert
14800 * testsudoers.c: added support for "runas" from garp@opustel.com
14802 1996-04-27 21:02 millert
14804 * sudo.h: added support for NO_PASSWD and runas from
14805 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14806 SUDOERS_GID and added support fro SUDOERS_MODE
14808 1996-04-27 21:00 millert
14810 * sudo.c: added support for NO_PASSWD and runas from
14811 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14812 SUDOERS_GID and added support fro SUDOERS_MODE
14814 1996-04-27 21:00 millert
14816 * parse.yacc: added support for NO_PASSWD and runas from
14819 1996-04-27 20:58 millert
14821 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14824 1996-04-27 20:56 millert
14826 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14828 1996-04-27 20:40 millert
14830 * configure.in: added --with-CC only link with -lshadow on linux
14831 (with shadow pw) if libc lacks getspnam()
14833 1996-04-27 20:39 millert
14835 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14836 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14837 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14839 1996-04-27 20:26 millert
14841 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14843 1996-04-27 11:20 millert
14845 * INSTALL: added --with-CC
14847 1996-04-06 16:31 millert
14849 * parse.lex: added double quote support
14851 1996-04-06 16:29 millert
14853 * sudoers.pod: documented double quoting
14855 1996-04-05 16:53 millert
14857 * mkinstalldirs: Initial revision
14859 1996-04-05 16:53 millert
14861 * check.c: fixed some indentation
14863 1996-04-05 16:48 millert
14865 * Makefile.in: fixed a typo
14867 1996-04-04 19:39 millert
14869 * Makefile.in: added install-dirs .
14871 1996-04-04 14:16 millert
14873 * dce_pwent.c: new version from "Jeff A. Earickson"
14874 <jaearick@colby.edu>
14876 1996-04-03 13:40 millert
14878 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14880 1996-04-03 13:40 millert
14884 1996-04-03 13:36 millert
14886 * parse.lex: FQHOST now has same constraints as non-FQHOST
14888 1996-04-02 19:00 millert
14890 * INSTALL: added note about OS's w/ shadow passwords turned on by
14893 1996-04-02 18:58 millert
14895 * configure.in: fixed a typo
14897 1996-04-02 18:48 millert
14899 * configure.in: added support for --without-THING sanitized shadow
14900 pw situtation by adding support for --without-C2
14902 1996-04-02 16:42 millert
14904 * tgetpass.c: fixed a typo wrt placement of an end paren
14906 1996-04-02 14:57 millert
14908 * check.c: was closing an fd that may not have been opened
14910 1996-03-21 19:55 millert
14912 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14914 1996-03-19 19:40 millert
14916 * configure.in: now always use shadow pw on some arches
14918 1996-03-19 17:07 millert
14920 * configure.in: added pyramid support
14922 1996-03-19 17:04 millert
14924 * configure.in: no longer check for C2 if alternate passwd method
14925 is used no longer check for some libs twice
14927 1996-03-19 17:00 millert
14929 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14931 1996-03-19 17:00 millert
14933 * parse.lex: added FQHOST rules
14935 1996-03-18 20:57 millert
14937 * tgetpass.c: now define TCSASOFT in necesary
14939 1996-03-18 20:31 millert
14941 * tgetpass.c: now uses read/write instead of stdio string goop to
14942 avoid problems with select(2)
14944 1996-03-18 19:37 millert
14946 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14949 1996-03-17 16:18 millert
14951 * INSTALL: added note about no shadow auto-detect if using
14952 alternate auth schemes
14954 1996-03-17 15:33 millert
14956 * configure.in: don't check for C2 if AFS or DCE (unless they said
14959 1996-03-17 15:08 millert
14961 * testsudoers.c: now groks shost
14963 1996-03-17 15:01 millert
14965 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14967 1996-03-16 14:43 millert
14969 * find_path.c: checkdot now works correctly
14971 1996-03-12 18:01 millert
14973 * configure.in: can't have DCE and C2 passwords both...
14975 1996-03-11 14:05 millert
14977 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14980 1996-03-11 14:04 millert
14982 * configure.in: now looks for skey in /usr/lib and doesn't require
14983 libskey to be in /usr/local/lib just because skey.h is (for my
14986 1996-03-11 02:00 millert
14988 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14991 1996-03-10 21:01 millert
14993 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14995 1996-03-10 20:59 millert
14997 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14999 1996-03-10 20:59 millert
15001 * OPTIONS: udpated FQDN
15003 1996-03-10 20:58 millert
15005 * config.h.in: added _SUDO_PATH_TIMEDIR
15007 1996-03-10 20:58 millert
15009 * aclocal.m4, configure.in: added SUDO_TIMEDIR
15011 1996-03-10 20:58 millert
15013 * sudo.pod: updated wrt /var/run/sudo
15015 1996-03-10 20:16 millert
15017 * sudo.c, sudo.h: added support for shost if FQDN
15019 1996-03-10 20:14 millert
15021 * parse.yacc, visudo.c: now uses shost if FQDN
15023 1996-03-10 20:12 millert
15025 * check.c: Now use skeylookup() instead off skeychallenge()
15027 1996-02-27 20:41 millert
15029 * logging.c: mail_argv should not contain ALERTMAIL as it includes
15032 1996-02-22 17:06 millert
15034 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
15036 1996-02-22 16:27 millert
15038 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
15040 1996-02-22 16:27 millert
15042 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
15044 1996-02-05 19:20 millert
15046 * README, INSTALL: ++version
15048 1996-02-05 19:20 millert
15050 * Makefile.in: ++versoin
15052 1996-02-05 19:16 millert
15054 * Makefile.in: fixed a typo
15056 1996-02-05 19:16 millert
15058 * configure.in: ++version
15060 1996-02-05 18:53 millert
15064 1996-02-05 18:47 millert
15066 * CHANGES: done for 1.4.1 (I hope)
15068 1996-02-05 18:45 millert
15070 * sudoers.pod: added info on wildcards
15072 1996-02-05 18:39 millert
15074 * sample.sudoers: added wildcard example
15076 1996-02-05 17:03 millert
15078 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
15080 1996-02-05 17:03 millert
15082 * configure.in: addedSUDO_PROG_BSHELL !ll
15084 1996-02-05 16:10 millert
15086 * visudo.pod: fixed up some formatting
15088 1996-02-05 16:10 millert
15090 * sudoers.pod: redid section describing sample sudoers stuff
15092 1996-02-05 16:10 millert
15094 * sudo.pod: fixed some formatting
15096 1996-02-04 22:50 millert
15098 * getspwuid.c: now treats "" as bourne shell
15100 1996-02-04 22:49 millert
15102 * Makefile.in: TESTOBJS nwo includes wildmat.o
15104 1996-02-04 22:48 millert
15106 * testsudoers.c: now works with NewArg[cv]
15108 1996-02-04 21:59 millert
15110 * sudo.c: removed an XXX (fixed it in getspwuid.c)
15112 1996-02-04 21:58 millert
15114 * aclocal.m4: added check for bourne shell
15116 1996-02-04 21:58 millert
15118 * pathnames.h.in: added _PATH_BSHELL
15120 1996-02-04 21:58 millert
15122 * config.h.in: added _SUDO_PATH_BSHELL
15124 1996-02-04 16:36 millert
15126 * visudo.c: unixware vi returns 256 instead of 0
15128 1996-02-04 16:24 millert
15130 * INSTALL: added Linux note
15132 1996-02-04 16:13 millert
15134 * logging.c: fixed up some XXX's. file log format now looks a
15135 little more like real syslog(3) format.
15137 1996-02-04 16:13 millert
15139 * README, TROUBLESHOOTING: updated wrt lex/flex
15141 1996-02-04 16:11 millert
15143 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15144 since we ship with a pre-flex'd parser
15146 1996-02-04 16:09 millert
15148 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15150 1996-02-04 02:28 millert
15152 * logging.c: eliminated some strcat()'s
15154 1996-02-04 02:10 millert
15156 * configure.in: no longer checks for lex/flex (now assumes flex)
15158 1996-02-04 02:08 millert
15160 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15161 just kerb_dir_candidate
15163 1996-02-02 20:48 millert
15165 * parse.yacc: now use a 'hook' expression instead of an iffy one
15168 1996-02-02 01:14 millert
15170 * visudo.c: now works with new sudo arg stuff
15172 1996-02-02 01:14 millert
15174 * parse.yacc: fixed dereferencing deadbeef
15176 1996-02-01 23:53 millert
15178 * sudo.c: changed an occurrence of Argv to NewArgv
15180 1996-02-01 23:53 millert
15182 * parse.lex: took out support for quoted commands since there is no
15185 1996-02-01 23:52 millert
15187 * parse.c: fixed a typo in a for() loop
15189 1996-02-01 23:52 millert
15191 * logging.c: protected against dereferencing rogue pointers
15193 1996-02-01 22:34 millert
15195 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15196 needed this also allows us to eliminate some kludges in
15197 parse_args() and eliminate superfluous code.
15199 1996-02-01 22:34 millert
15201 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15203 1996-02-01 22:32 millert
15205 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15206 cmnd_args (no longer used)
15208 1996-02-01 22:31 millert
15210 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15212 1996-02-01 22:30 millert
15214 * parse.yacc: COMMAND is now a struct containing the path and args
15216 1996-02-01 22:30 millert
15218 * parse.lex: replaced append() with fill_cmnd() and fill_args.
15219 command args from a sudoers entry are now stored in an arrary for
15222 1996-02-01 22:28 millert
15224 * parse.c: command line args from sudoers file are now in an array
15225 like ones passed in from the command line
15227 1996-01-31 20:59 millert
15229 * parse.c: wildwat stuff now works
15231 1996-01-29 00:44 millert
15233 * version.h: ++version
15235 1996-01-29 00:44 millert
15237 * Makefile.in: ++version added wildmat.*
15239 1996-01-28 17:55 millert
15241 * parse.lex: added support for quoted commands (w/ or w/o args)
15243 1996-01-22 01:55 millert
15245 * sudo.pod, visudo.pod: cleaned up formatting
15247 1996-01-21 20:53 millert
15249 * sudo.pod, visudo.pod: Initial revision
15251 1996-01-21 02:07 millert
15253 * sudoers.pod: looks reasonable, could be mroe readable
15255 1996-01-20 23:47 millert
15257 * sudoers.pod: Initial revision
15259 1996-01-16 14:38 millert
15263 1996-01-16 14:37 millert
15265 * OPTIONS: updated NO_ROOT_SUDO entry
15267 1996-01-15 11:37 millert
15269 * RUNSON: [no log message]
15271 1996-01-15 11:34 millert
15273 * sudo.c: fixed SECURE_PATH
15275 1996-01-14 20:55 millert
15277 * RUNSON: udpa`ted for 1.4
15279 1996-01-14 20:52 millert
15281 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15283 1996-01-14 20:32 millert
15285 * TROUBLESHOOTING: added entry for anal ansi compilers
15287 1996-01-14 16:13 millert
15289 * INSTALL: added info on libcrypt_i for SCO
15291 1996-01-14 16:05 millert
15293 * TODO: [no log message]
15295 1996-01-14 15:39 millert
15297 * sample.sudoers: added comments
15299 1996-01-14 15:25 millert
15301 * TODO: 1.4 release
15303 1996-01-14 15:22 millert
15305 * README, config.h.in, configure.in, CHANGES: ++version
15307 1996-01-14 15:21 millert
15309 * BUGS: ++version and fixed ISC
15311 1996-01-14 15:19 millert
15313 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15314 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15315 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15316 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15317 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15320 1996-01-14 15:16 millert
15322 * interfaces.c: added STUB_LOAD_INTERFACES ++version
15324 1996-01-14 15:14 millert
15326 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15327 emul/utime.h: ++version
15329 1996-01-14 15:13 millert
15331 * PORTING: added info about fd_set in tgetpass added info on
15334 1996-01-11 13:22 millert
15336 * dce_pwent.c: added sudo header
15338 1996-01-11 13:04 millert
15340 * tgetpass.c: fixed a typo
15342 1996-01-11 13:01 millert
15344 * Makefile.in: tgetpass.o is now only linked in with sudo (not
15347 1996-01-09 12:56 millert
15349 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15350 configure.in: ++version
15352 1996-01-09 12:54 millert
15354 * emul/utime.h: added copyright notice
15356 1996-01-09 12:52 millert
15358 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15359 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15360 interfaces.c, logging.c, options.h, parse.c, parse.lex,
15361 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15362 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15363 visudo.c: ++version
15365 1996-01-09 12:46 millert
15367 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15370 1996-01-09 12:42 millert
15372 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15374 1996-01-09 12:41 millert
15376 * config.h.in: added check for sys/bsdtypes.h
15378 1996-01-07 16:00 millert
15380 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15382 1996-01-07 15:55 millert
15384 * TROUBLESHOOTING: added 2 entries
15386 1996-01-07 15:55 millert
15388 * Makefile.in: added FAQ
15390 1996-01-07 14:26 millert
15392 * TROUBLESHOOTING: added section on syslog
15394 1996-01-07 14:25 millert
15396 * configure.in: added AC_ISC_POSIX for better ISC support
15398 1996-01-07 14:25 millert
15400 * config.h.in: fixed typo
15402 1996-01-07 14:25 millert
15404 * config.h.in: added define for _POSIX_SOURCE
15406 1996-01-04 00:41 millert
15408 * configure.in: fixed check for lsearch()
15410 1995-12-21 21:53 millert
15412 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15413 (should not happen)
15415 1995-12-20 17:02 millert
15417 * configure.in: now only define HAVE_LSEARCH if there is a
15418 corresponding search.h
15420 1995-12-20 15:52 millert
15422 * interfaces.c: works on ISC again
15424 1995-12-18 17:36 millert
15426 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15429 1995-12-18 17:32 millert
15431 * lsearch.c: char * -> const char *
15433 1995-12-18 17:29 millert
15435 * configure.in: now looks in -lcompat for lsearch()
15437 1995-12-18 17:23 millert
15439 * Makefile.in: remove sudo.core visudo.core for clan target
15441 1995-12-17 22:53 millert
15443 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15445 1995-12-17 22:36 millert
15447 * Makefile.in: fixed another occurence of sudo_getpwuid.*
15449 1995-12-17 22:30 millert
15451 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15453 1995-12-17 22:22 millert
15455 * configure.in: moved the "echo"
15457 1995-12-17 22:09 millert
15459 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15460 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15461 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15462 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15463 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15464 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15465 tgetpass.c, utime.c, version.h, visudo.c: ++version
15467 1995-12-17 22:04 millert
15469 * testsudoers.c: added group support
15471 1995-12-17 22:00 millert
15473 * sample.sudoers: added group entry
15475 1995-12-17 21:59 millert
15477 * sudoers.man: documented group support
15479 1995-12-17 21:50 millert
15481 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15483 1995-12-15 17:45 millert
15485 * check.c: tkfile was too short and overflowed the kerberos realm
15487 1995-12-11 17:09 millert
15489 * sudo.c: now copy command args directly from Argv
15491 1995-12-11 15:55 millert
15493 * sudo.c: replaced code to copy cmnd_args so that is does not use
15494 realloc since most realloc()'s really stink
15496 1995-12-08 14:11 millert
15498 * configure.in: syslog() fixed in hpux 10.01
15500 1995-12-06 17:45 millert
15502 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15505 1995-12-06 17:30 millert
15507 * configure.in: better error if cannot find skey incs or libs
15509 1995-12-06 17:26 millert
15511 * aclocal.m4: now use a temp file for determining max len of uid_t
15512 in string form. the old hacky way broke on netbsd
15514 1995-12-05 19:02 millert
15516 * sudo.c: added set of parens and a space
15518 1995-12-05 18:58 millert
15520 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15522 1995-12-05 18:58 millert
15524 * check.c: modified a comment
15526 1995-12-05 18:57 millert
15528 * Makefile.in: fixed up testsudoers target
15530 1995-12-05 18:56 millert
15532 * configure.in: DCE changes from Jeff Earickson
15533 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15534 SUDO_FDFLAGS and VISUDO_LDFLAGS
15536 1995-12-05 18:17 millert
15538 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15539 SUDO_LDFLAGS, VISUDO_LDFLAGS
15541 1995-11-27 23:32 millert
15543 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15545 1995-11-27 23:17 millert
15547 * check.c: LONG_SKEY_PROMPT is less of a klusge /
15549 1995-11-27 23:17 millert
15551 * configure.in: fixed typos w/ dce stuff
15553 1995-11-27 23:14 millert
15555 * Makefile.in: added dce_pwent.c
15557 1995-11-26 13:48 millert
15559 * INSTALL: amended section on combining authentication mechanisms
15561 1995-11-26 13:48 millert
15563 * PORTING: minor updates for 1.3.6
15565 1995-11-26 13:47 millert
15567 * TROUBLESHOOTING: added 2 more entries
15569 1995-11-26 13:39 millert
15571 * BUGS: updated for 1.3.6
15573 1995-11-26 13:39 millert
15575 * README: overhauled
15577 1995-11-25 21:23 millert
15579 * INSTALL: rewrote for sudo 1.3.6
15581 1995-11-25 21:23 millert
15583 * TROUBLESHOOTING: added 3 entries
15585 1995-11-25 13:53 millert
15587 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15588 since many includes don't prototype it. gag me.
15590 1995-11-25 13:23 millert
15592 * sudo.h: removed prototype for sudo_getpwuid() since convex C
15593 compiler choked on it.
15595 1995-11-25 13:23 millert
15597 * sudo.c: added prototype for sudo_getpwuid()
15599 1995-11-25 13:23 millert
15601 * lsearch.c: now compiles on strict ANSI compilers
15603 1995-11-24 23:56 millert
15605 * check.c: added LONG_SKEY_PROMPT support
15607 1995-11-24 23:55 millert
15609 * Makefile.in: added extra $'s for make to eat up, yum.
15611 1995-11-24 23:38 millert
15613 * OPTIONS, options.h: added LONG_SKEY_PROMPT
15615 1995-11-24 18:48 millert
15617 * check.c: s/key support now works with normal s/key as well as
15620 1995-11-24 18:46 millert
15622 * options.h, OPTIONS: added SKEY_ONLY
15624 1995-11-24 18:46 millert
15626 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15628 1995-11-24 00:42 millert
15630 * INSTALL: added DCE note added more AIX notes
15632 1995-11-24 00:39 millert
15634 * sudo.c: now include pthread.h for DCE support
15636 1995-11-23 22:22 millert
15638 * check.c: dce_pwent() is ok after all .,
15640 1995-11-23 22:21 millert
15642 * logging.c: now uses SYSLOG() macro that equates to either
15643 syslog() or syslog_wrapper
15645 1995-11-23 21:44 millert
15647 * dce_pwent.c: minor formatting changes. renamed check() to
15648 somthing less generic
15650 1995-11-23 21:27 millert
15652 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15653 visudo.c: now uses user_pw_ent and simple macros to get at the
15656 1995-11-22 20:35 millert
15658 * check.c: simpler dec unix C2 support
15660 1995-11-22 20:35 millert
15662 * getspwuid.c: now sets crypt_type for DEC unix C2
15664 1995-11-21 18:00 millert
15666 * configure.in: added csops paths for skey
15668 1995-11-21 16:27 millert
15670 * getspwuid.c: now includes string.h for strdup() prototype
15672 1995-11-21 01:47 millert
15674 * getspwuid.c: fixed a few typos
15676 1995-11-20 22:59 millert
15678 * check.c: now includes skey.h
15680 1995-11-20 22:10 millert
15682 * getspwuid.c: fixed up comments
15684 1995-11-20 22:04 millert
15686 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15688 1995-11-20 22:01 millert
15690 * sudo.c: now uses sudo_pw_ent
15692 1995-11-20 21:50 millert
15694 * testsudoers.c: now uses sudo_pw_ent
15696 1995-11-20 21:40 millert
15698 * visudo.c: now sets sudo_pw_ent
15700 1995-11-20 21:28 millert
15702 * getspwuid.c: Initial revision
15704 1995-11-20 21:28 millert
15706 * tgetpass.c: moved dce stuff into compat.h
15708 1995-11-20 21:27 millert
15710 * sudo.h, logging.c: now uses sudo_pw_ent
15712 1995-11-20 21:27 millert
15714 * Makefile.in: added sudo_getpwuid.c
15716 1995-11-20 21:25 millert
15718 * compat.h: added dce support
15720 1995-11-20 21:13 millert
15722 * parse.yacc: now uses sudo_pw_ent
15724 1995-11-20 14:40 millert
15726 * check.c: fixed exempt_group stuff for OS's that don't put base
15727 gid in group vector
15729 1995-11-20 01:39 millert
15731 * check.c: S/Key support now works with sunos4 shadow passwords
15733 1995-11-19 22:31 millert
15735 * Makefile.in: fixed clean rule
15737 1995-11-19 22:31 millert
15739 * config.h.in, configure.in: added DCE support
15741 1995-11-19 22:30 millert
15743 * tgetpass.c: DCE & KERB support
15745 1995-11-19 22:30 millert
15747 * check.c: first stab at dce support
15749 1995-11-19 22:24 millert
15751 * dce_pwent.c: now smells like sudo
15753 1995-11-19 22:11 millert
15755 * dce_pwent.c: Initial revision
15757 1995-11-19 21:36 millert
15759 * check.c: skey'd sudo now works w/ normal password as well
15761 1995-11-19 18:37 millert
15763 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15764 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15765 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15766 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15767 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15768 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15770 1995-11-19 18:32 millert
15772 * README: updated to reflect version change
15774 1995-11-19 18:27 millert
15776 * configure.in: --with options now line up ++version
15778 1995-11-19 18:26 millert
15780 * sudo.h: removed unecesary S/Key stuff
15782 1995-11-19 18:25 millert
15784 * configure.in: fixed S/Key support
15786 1995-11-19 18:24 millert
15788 * Makefile.in: -I stuff now goes in CPPFLAGS
15790 1995-11-19 18:23 millert
15792 * check.c: fixed SKey support
15794 1995-11-19 15:23 millert
15796 * README: updated version
15798 1995-11-19 13:59 millert
15800 * OPTIONS: fixed description of EXEMPTGROUP
15802 1995-11-19 10:47 millert
15804 * sudo.c: more people use _RLD_ than just alphas...
15806 1995-11-18 21:35 millert
15808 * Makefile.in: replaced $man_prefix with $mandir
15810 1995-11-18 21:30 millert
15812 * configure.in: fixed a typo
15814 1995-11-18 21:28 millert
15816 * Makefile.in: now use more GNU'ish dir names
15818 1995-11-18 21:27 millert
15820 * configure.in: now set *dir correctly (can override from command
15823 1995-11-18 19:17 millert
15825 * sudo.c: now deal with situations where we getwd() fails
15827 1995-11-17 00:37 millert
15829 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15831 1995-11-17 00:37 millert
15833 * configure.in: added sbin_dir
15835 1995-11-16 21:28 millert
15837 * Makefile.in: now ship a flex-generated lex.yy.c
15839 1995-11-16 21:09 millert
15841 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15844 1995-11-16 21:06 millert
15846 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15847 overridden via Makefile
15849 1995-11-16 21:05 millert
15851 * options.h: no more error for redefining SUDOERS_OWNER
15853 1995-11-16 21:05 millert
15855 * OPTIONS: expanded SUDOERS_OWNER section
15857 1995-11-16 03:05 millert
15859 * visudo.c: now warn if chown(2) failed
15861 1995-11-16 02:55 millert
15863 * logging.c: better default warning for NO_SUDOERS_FILE
15865 1995-11-16 02:54 millert
15867 * sudo.c: added missing set_perms() no more cryptic message if the
15868 sudoers file is zero length, now just give a parse error
15870 1995-11-16 02:42 millert
15872 * logging.c: better diagnostics if NO_SUDOERS_FILE
15874 1995-11-16 02:41 millert
15876 * sudo.c: check_sudoers() now catches sudoers files that are not
15877 readable (but are stat'able).
15879 1995-11-13 01:12 millert
15881 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15883 1995-11-13 00:52 millert
15885 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15888 1995-11-13 00:52 millert
15890 * Makefile.in: now uses exec_prefix & prefix from configure
15892 1995-11-13 00:16 millert
15894 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15895 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15896 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15897 so shadow build trees can have a custom copy of options.h
15899 1995-11-13 00:15 millert
15901 * check.c: user_is_exempt() is no longer a hack, it now uses
15904 1995-11-12 23:56 millert
15906 * options.h: EXEMPTGROUP is now "sudo"
15908 1995-11-12 22:25 millert
15910 * configure.in: MAN_POSTINSTALL now contains a leading space
15912 1995-11-12 22:25 millert
15914 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15915 now removes testsudoers in clean:
15917 1995-11-12 22:24 millert
15919 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15921 1995-10-30 15:51 millert
15923 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15924 don't get spoofed into using a bogus server
15926 1995-09-29 17:50 millert
15928 * parse.yacc: now explicately initialize match[] tp be FALSE
15930 1995-09-23 16:48 millert
15932 * sudo.c: removed unused variable now passes -Wall
15934 1995-09-23 16:48 millert
15936 * parse.yacc: yyerror and dumpaliases are now void's now passes
15939 1995-09-23 16:48 millert
15941 * parse.lex: added prototype for yyerror
15943 1995-09-23 16:47 millert
15945 * interfaces.c: rmeoved unused cruft now passes -Wall
15947 1995-09-23 16:47 millert
15949 * check.c, logging.c, parse.c: now passes -Wall
15951 1995-09-23 16:46 millert
15953 * Makefile.in: fixed headers that moved to emul dir
15955 1995-09-23 12:05 millert
15957 * logging.c: fixed deref of nil pointer if no args
15959 1995-09-15 19:18 millert
15961 * OPTIONS: added a caveat to FQDN section
15963 1995-09-13 19:48 millert
15965 * Makefile.in: more $srcdir support for install targets
15967 1995-09-13 17:17 millert
15969 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15970 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15971 visudo.c: don't include malloc.h if we include stdlib.h
15973 1995-09-12 21:44 millert
15975 * parse.yacc: local search.h now lives in emul
15977 1995-09-12 21:41 millert
15979 * lsearch.c: local search.h now lives in emul
15981 1995-09-12 21:41 millert
15983 * check.c, utime.c: local utime.h now lives in emul dir
15985 1995-09-12 21:38 millert
15987 * Makefile.in: added support for building in other than the
15990 1995-09-10 14:01 millert
15992 * OPTIONS: annotated CSOPS_INSULTS option
15994 1995-09-10 13:56 millert
15996 * TROUBLESHOOTING: updated shadow passwords blurb
15998 1995-09-09 21:00 millert
16000 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
16001 shell and passes along foo as the arguments
16003 1995-09-09 18:52 millert
16005 * parse.lex: collapsed pathname and dir sections into one -- its
16008 1995-09-09 18:34 millert
16010 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
16011 append() and fill() now take args to make the above work
16013 1995-09-08 20:51 millert
16015 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
16016 a tty on fd 1 to erroneously have "none" as their tty
16018 1995-09-04 15:35 millert
16020 * check.c: timestampfile is now a global static removed decl of
16021 timestampfile in remove_timestamp since we can just use the
16024 1995-09-04 15:28 millert
16026 * check.c: created touch() to update timestamps added
16027 USE_TTY_TICKETS support (bit of a kludge)
16029 1995-09-04 15:28 millert
16031 * compat.h: added _S_IFDIR and S_ISDIR
16033 1995-09-04 15:22 millert
16035 * OPTIONS, options.h: added USE_TTY_TICKETS
16037 1995-09-04 00:38 millert
16039 * parse.yacc: removed const from casts for lsearch() & lfind() to
16040 placate irix 4.x C compiler
16042 1995-09-03 14:12 millert
16044 * sudo.c: now only strip '/dev/' off of a tty if it starts with
16047 1995-09-03 14:12 millert
16049 * pathnames.h.in: added _PATH_DEV
16051 1995-09-03 14:11 millert
16053 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
16054 tcgetattr only if have termios.h
16056 1995-09-03 14:09 millert
16058 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
16059 not int for c_?flag
16061 1995-09-03 13:19 millert
16063 * parse.lex, parse.yacc: fixed a spelling error
16065 1995-09-03 13:17 millert
16067 * Makefile.in: fixed typo
16069 1995-09-02 12:55 millert
16071 * Makefile.in: fixed a comment
16073 1995-09-02 12:54 millert
16075 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
16076 now that we dynamically allocate strings they need to be free()'d
16078 1995-09-02 12:46 millert
16080 * parse.lex: dynamically allocates space for strings
16082 1995-09-02 12:34 millert
16084 * sudo.h: no more MAXCOMMANDLENGTH
16086 1995-09-01 22:25 millert
16088 * sudo.h: added decl of tty
16090 1995-09-01 22:25 millert
16092 * logging.c, sudo.c: moved tty stuff into sudo.c
16094 1995-09-01 14:18 millert
16096 * parse.c: fixed a logic bug. Was denying a command if user gave
16097 command line args but there were none in the sudoers file which
16100 1995-09-01 01:18 millert
16102 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
16104 1995-09-01 01:13 millert
16106 * parse.lex: return foo; -> return(foo);
16108 1995-09-01 01:03 millert
16110 * parse.yacc: fixed netgr_matches() prototype
16112 1995-09-01 01:02 millert
16114 * parse.lex: added support for escaping "termination" characters
16116 1995-09-01 00:55 millert
16118 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16121 1995-09-01 00:50 millert
16123 * sudo.c: fixed comments
16125 1995-09-01 00:49 millert
16127 * goodpath.c: fixed negation problem (doh!)
16129 1995-09-01 00:25 millert
16131 * parse.yacc: fixed 2nd parameter to lfind()
16133 1995-09-01 00:24 millert
16135 * parse.lex: now do bounds checking in fill() and append()
16137 1995-09-01 00:23 millert
16139 * sudo.c: include netdb.h as we should added a missing void cast
16140 added SHELL_IF_NO_ARGS support now use realloc() properly. would
16141 fail if realloc actually moved the string instead of shrinking it
16143 1995-09-01 00:17 millert
16145 * sample.sudoers: updated with examples of new features
16147 1995-09-01 00:05 millert
16149 * goodpath.c: now set errno to EACCES if not a regular file or not
16152 1995-09-01 00:04 millert
16154 * find_path.c: if given a fully-qualified or relative path we now
16155 check it with sudo_goodpath() and error out with the appropriate
16156 error message if the file does not exist or is not executable
16158 1995-09-01 00:03 millert
16160 * lsearch.c, emul/search.h: now use correct args for lfind
16162 1995-09-01 00:03 millert
16164 * logging.c: added a comment
16166 1995-08-31 23:52 millert
16168 * insults.h: added in CSOps insults
16170 1995-08-31 23:51 millert
16172 * ins_csops.h: Initial revision
16174 1995-08-31 23:35 millert
16176 * tgetpass.c: added RCS id
16178 1995-08-31 22:56 millert
16180 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16183 1995-08-31 22:55 millert
16185 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16187 1995-08-31 22:54 millert
16189 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16190 -p now works with -s
16192 1995-08-31 22:54 millert
16194 * parse.c: don't try to stat() "pseudo commands" like "validate"
16196 1995-08-31 22:53 millert
16198 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16201 1995-08-31 22:53 millert
16203 * configure.in: added SecurID support added other insults to
16206 1995-08-31 22:52 millert
16208 * config.h.in: added HAVE_SECURID
16210 1995-08-31 22:52 millert
16212 * Makefile.in: added clobber target added ins_csops.h now gets
16213 CFLAGS from configure
16215 1995-08-31 22:46 millert
16217 * aclocal.m4: relaxed SUDO_FULL_VOID
16219 1995-08-31 22:44 millert
16221 * visudo.c: function comment blocks are now in same style as rest
16224 1995-08-31 22:44 millert
16226 * testsudoers.c: added support for command line args in
16229 1995-08-31 22:43 millert
16231 * sudoers.man: updated to have command args in the sudoers file
16233 1995-08-31 22:42 millert
16235 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16238 1995-08-19 19:32 millert
16240 * parse.yacc: PATH renamed to COMMAND
16242 1995-08-19 19:31 millert
16244 * parse.lex: it is now a parse error for directories to have args
16247 1995-08-19 19:30 millert
16249 * logging.c: now say command args if telling user to buzz off
16251 1995-08-19 19:30 millert
16253 * sudo.c: -s no longer indicates end of args sped up loading on
16254 cmnd_args in load_cmnd()
16256 1995-08-19 19:29 millert
16258 * parse.c: removed an unreachable statement
16260 1995-08-19 17:53 millert
16262 * parse.lex: made more efficient by pulling out the terminators
16263 when in GOTCMND state and making them their own rule
16265 1995-08-14 00:07 millert
16267 * sudo.h: removed MAXLOGLEN since it is no longer used
16269 1995-08-14 00:07 millert
16271 * parse.lex: now allows command args
16273 1995-08-14 00:06 millert
16275 * parse.c: now groks command arguments
16277 1995-08-13 23:39 millert
16279 * logging.c: now sets tty correctly when piped input
16281 1995-08-13 23:35 millert
16283 * sudo.c: fixed loading of cmnd_args (was including command name
16286 1995-08-13 23:34 millert
16288 * logging.c: fixed a core dump due to incorrect if construct
16290 1995-08-13 00:33 millert
16292 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16295 1995-08-13 00:33 millert
16297 * aclocal.m4: fixed check for ISC
16299 1995-08-13 00:32 millert
16301 * sudo.c: now sets cmnd_args used by log_error() and that will be
16302 used by the parse to check against command args
16304 1995-08-13 00:32 millert
16306 * sudo.h: added cmnd_args
16308 1995-08-13 00:31 millert
16310 * logging.c: now dynamically allocate logline since we can guess at
16313 1995-08-05 13:52 millert
16315 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16316 buffer remove "register" since the compiler knows more than I do
16317 now do a "basename" of the tty
16319 1995-07-31 18:20 millert
16321 * configure.in: ++version
16323 1995-07-30 22:37 millert
16325 * sudo.h: added shell extern changed MODE_* to be bit masks to
16326 allow for several options together
16328 1995-07-30 22:36 millert
16330 * sudo.c: added -s (shell) option made MODE_* masks so we can do
16331 bitwise & and | to see if multiple flags are set.
16333 1995-07-30 22:01 millert
16335 * check.c: added securid support
16337 1995-07-30 14:38 millert
16339 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16342 1995-07-29 17:17 millert
16344 * Makefile.in, version.h: ++version
16346 1995-07-27 06:52 millert
16348 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16350 1995-07-26 22:00 millert
16352 * testsudoers.c: added netgr_matches
16354 1995-07-26 21:29 millert
16356 * parse.c: cleaned up netgr_matches
16358 1995-07-26 00:26 millert
16360 * RUNSON: updated for 1.3.4
16362 1995-07-24 21:51 millert
16364 * Makefile.in: now installs sudoers.man -- really should clean this
16367 1995-07-24 21:18 millert
16369 * Makefile.in: added sudoers.cat and sudoers.man
16371 1995-07-24 21:15 millert
16373 * sudo.man: pulled out stuff on the sudoers file format into a
16376 1995-07-24 21:14 millert
16378 * sudoers.man: Initial revision
16380 1995-07-24 21:04 millert
16382 * HISTORY: fixed up my email address
16384 1995-07-24 20:03 millert
16386 * configure.in: added checks for innetgr and getdomainname
16388 1995-07-24 20:02 millert
16390 * visudo.c: added dummy netgr_matches function
16392 1995-07-24 20:01 millert
16394 * parse.c: added netgr_matches
16396 1995-07-24 20:01 millert
16398 * parse.lex, parse.yacc: added NETGROUP support
16400 1995-07-24 20:01 millert
16402 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16404 1995-07-24 18:07 millert
16406 * sudo.c: rewrote clean_env() that has rm_env() builtin
16408 1995-07-23 19:58 millert
16410 * check.c: now cast uid to long in sprintf
16412 1995-07-23 19:58 millert
16414 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16416 1995-07-23 19:57 millert
16418 * options.h: added _INSULTS suffix to HAL & GOONS
16420 1995-07-23 19:35 millert
16422 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16423 new scheme of insult "unions" end
16425 1995-07-23 17:48 millert
16427 * sudo.c: now uses MAX_UID_T_LEN
16429 1995-07-23 17:48 millert
16431 * configure.in: added SUDO_UID_T_LEN !l
16433 1995-07-23 17:48 millert
16435 * config.h.in: added MAX_UID_T_LEN
16437 1995-07-23 17:47 millert
16439 * check.c: now use MAX_UID_T_LEN
16441 1995-07-23 17:47 millert
16443 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16446 1995-07-19 19:05 millert
16448 * configure.in: corrected version
16450 1995-07-19 17:29 millert
16452 * configure.in: added sco support
16454 1995-07-19 17:29 millert
16456 * aclocal.m4: hack to check for sco
16458 1995-07-18 21:27 millert
16460 * interfaces.c: removed #include <net/route.h> since it was hosing
16463 1995-07-18 13:35 millert
16465 * find_path.c: fixed prreadlink() prototype
16467 1995-07-17 23:54 millert
16469 * check.c: added parens in #if's
16471 1995-07-17 23:53 millert
16473 * configure.in: added SPW_ prefix
16475 1995-07-17 23:20 millert
16477 * sudo.h: moved SPW_* to config.h.in
16479 1995-07-17 23:19 millert
16481 * sudo.c: added a set of parens
16483 1995-07-17 23:19 millert
16485 * config.h.in: added SPW_*
16487 1995-07-17 22:50 millert
16489 * sudo.h: added SPW_* reordered error codes
16491 1995-07-17 22:49 millert
16493 * check.c: moved SPW_* to sudo.h
16495 1995-07-17 14:29 millert
16497 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16499 1995-07-17 14:29 millert
16501 * configure.in: AUTH -> SECUREWARE
16503 1995-07-17 14:29 millert
16505 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16507 1995-07-17 00:22 millert
16509 * check.c: now uses SHADOW_TYPE to make shadow pw support more
16510 readable and modular. It's a start...
16512 1995-07-17 00:21 millert
16514 * configure.in: added autodetection of shadow passwords
16516 1995-07-17 00:20 millert
16518 * sudo.c: now uses SHADOW_TYPE define
16520 1995-07-17 00:19 millert
16522 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16525 1995-07-17 00:19 millert
16527 * aclocal.m4: added SUDO_CHECK_SHADOW
16529 1995-07-12 17:09 millert
16531 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16532 took out test for memmove() since we dno longer use it...
16534 1995-07-12 17:08 millert
16538 1995-07-12 17:05 millert
16540 * logging.c: added BROKEN_SYSLOG support
16542 1995-07-12 17:05 millert
16544 * config.h.in: added BROKEN_SYSLOG
16546 1995-07-12 17:04 millert
16548 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16549 allow for a machine udpating its time from a server
16551 1995-07-12 17:04 millert
16553 * sudo.man: added 2 security notes updated Nieusma's email addr
16555 1995-07-12 14:18 millert
16557 * lsearch.c: changed a memmove() to memcpy() since we don't have to
16558 worry about overlapping segments.
16560 1995-07-11 15:41 millert
16562 * interfaces.c: cleanup up the loop when interfaces are groped in
16563 so that it is readable
16565 1995-07-11 14:52 millert
16567 * Makefile.in, version.h: ++version
16569 1995-07-09 18:17 millert
16571 * CHANGES: annotated 124-126
16573 1995-07-07 16:06 millert
16575 * check.c: fixed permissions check on /tmp/.odus
16577 1995-07-06 19:35 millert
16579 * check.c: fixed some comments
16581 1995-07-06 14:49 millert
16583 * check.c: now checks owner & mode of timedir also checks for bogus
16584 dates on timestamp file
16586 1995-07-06 14:49 millert
16588 * OPTIONS: updated TIMEOUT info
16590 1995-07-06 14:48 millert
16592 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16594 1995-07-06 14:47 millert
16596 * compat.h: added definition of S_IRWXU
16598 1995-07-06 14:47 millert
16602 1995-07-03 14:16 millert
16604 * interfaces.c: added #ifdef to make it compile on strange arches
16606 1995-07-02 18:13 millert
16608 * aclocal.m4: fixed check for fulkl void impl.
16610 1995-07-02 09:56 millert
16612 * check.c: added mssing "static"
16614 1995-07-01 20:41 millert
16616 * insults.h: replaced #elif with #else #if constructs for ancient C
16619 1995-07-01 20:18 millert
16621 * INSTALL: updated irix c2 & kerb5 info
16623 1995-07-01 20:15 millert
16625 * configure.in: added shadow pw support for irix
16627 1995-07-01 16:07 millert
16629 * CHANGES: last changes for sudo 1.3.3
16631 1995-07-01 16:07 millert
16633 * TODO, BUGS: updated
16635 1995-07-01 16:04 millert
16637 * configure.in: now calls SUDO_SOCK_SA_LEN
16639 1995-07-01 16:04 millert
16641 * config.h.in: added HAVE_SA_LEN
16643 1995-07-01 16:04 millert
16645 * aclocal.m4: added SUDO_SOCK_SA_LEN
16647 1995-07-01 15:49 millert
16649 * interfaces.c: now works with ip implementations that use sa_len
16652 1995-07-01 14:26 millert
16654 * INSTALL: added note about buggy AIX compiler
16656 1995-07-01 14:24 millert
16658 * interfaces.c: now include sys/time.h for AIX
16660 1995-06-27 22:35 millert
16662 * Makefile.in: getcwd -> getwd
16664 1995-06-27 21:28 millert
16666 * interfaces.c: now works for ISC and others. yay.
16668 1995-06-26 14:24 millert
16670 * Makefile.in, version.h: version++
16672 1995-06-22 20:26 millert
16674 * aclocal.m4: fixed test for full void impl
16676 1995-06-22 20:25 millert
16678 * sudo.c: now check to see that st_dev is non-zero before assuming
16679 that we are being spoofed
16681 1995-06-20 16:56 millert
16683 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16686 1995-06-19 16:32 millert
16688 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16690 1995-06-19 16:10 millert
16692 * logging.c: added cast for ttyname()
16694 1995-06-19 15:23 millert
16696 * configure.in: fixed typo
16698 1995-06-19 15:19 millert
16700 * check.c: now deal correctly with all known variation of utime()
16703 1995-06-19 15:19 millert
16705 * configure.in: added SUDO_FUNC_UTIME_POSIX
16707 1995-06-19 15:19 millert
16709 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16711 1995-06-19 15:14 millert
16713 * config.h.in: added HAVE_UTIME_POSIX
16715 1995-06-19 13:38 millert
16717 * check.c: fixed a typo
16719 1995-06-19 13:29 millert
16721 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16723 1995-06-19 13:20 millert
16725 * check.c: fixed fascist C compiler warning
16727 1995-06-18 23:14 millert
16729 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16730 initialize num_interfaces to 0 (just to be anal)
16732 1995-06-18 18:06 millert
16734 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16736 1995-06-18 18:05 millert
16738 * logging.c: added tty logging
16740 1995-06-18 16:04 millert
16742 * interfaces.c: reworked the ISC code
16744 1995-06-18 15:27 millert
16746 * Makefile.in, version.h: updated version
16748 1995-06-18 15:24 millert
16750 * check.c: now expect old-style utime(3) if utime() can't take NULL
16753 1995-06-18 15:08 millert
16755 * configure.in: added check for utime.h
16757 1995-06-18 15:08 millert
16759 * config.h.in: added HAVE_UTIME_H
16761 1995-06-18 14:48 millert
16763 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16765 1995-06-18 13:58 millert
16767 * configure.in: now search for kerb libs and includes
16769 1995-06-18 13:03 millert
16771 * check.c: added support for utime(2)'s that can't take a NULL
16774 1995-06-18 13:03 millert
16776 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16779 1995-06-17 20:46 millert
16781 * configure.in: added utime(s) stuff
16783 1995-06-17 20:46 millert
16785 * check.c: now use utime()
16787 1995-06-17 20:46 millert
16789 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16791 1995-06-17 19:12 millert
16793 * utime.c: now use HAVE_UTIME_NULL
16795 1995-06-17 19:02 millert
16797 * utime.c, emul/utime.h: Initial revision
16799 1995-06-17 18:24 millert
16801 * check.c: need to setuid(0) to make kerb4 stuff work.
16803 1995-06-17 18:14 millert
16805 * tgetpass.c: no more special case for kerberos
16807 1995-06-17 18:13 millert
16809 * config.h.in: took out setreuid and setresuid stuff added kerb5
16810 stuff (use kerb4 emulation)
16812 1995-06-17 18:13 millert
16814 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16817 1995-06-17 18:12 millert
16819 * check.c: now use private ticket file for kerberos support to
16820 avoid trouncing on system one
16822 1995-06-15 00:48 millert
16824 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16826 1995-06-15 00:47 millert
16828 * sudo.c: added anti-spoofing support
16830 1995-06-15 00:47 millert
16832 * parse.c: now use global cmnd_st
16834 1995-06-15 00:47 millert
16836 * logging.c: added SPOOF_ATTEMPT suypport
16838 1995-06-14 23:41 millert
16840 * testsudoers.c, visudo.c: added void casts where appropriate
16842 1995-06-14 23:40 millert
16844 * parse.yacc: fixed up spacing and added void casts where
16847 1995-06-14 23:27 millert
16849 * sudo.c: fixed problem with "-p prompt" but no args
16851 1995-06-14 04:43 millert
16853 * sudo.man: added BUGS and annotated -l description
16855 1995-06-14 04:43 millert
16857 * sudo.h: validate() now takes a flag
16859 1995-06-14 04:43 millert
16861 * sudo.c: validate() now takes a flag added -l
16863 1995-06-14 04:42 millert
16865 * parse.yacc: added support for -l
16867 1995-06-14 04:41 millert
16869 * parse.c: validate() now takes a flag that says whether or not to
16872 1995-06-07 21:36 millert
16874 * logging.c: now deals with Argv == 1
16876 1995-06-07 21:34 millert
16878 * sudo.man: added -p option
16880 1995-06-07 21:27 millert
16882 * sudo.c: added prompt support reworked parse_args()
16884 1995-06-07 20:49 millert
16886 * sudo.h: added prompt
16888 1995-06-07 20:49 millert
16890 * options.h: added PASSPROMPT
16892 1995-06-07 20:48 millert
16894 * check.c: now use BUFSIZ as length of kerb password added kpass so
16895 pass is always a char * now use prompt global when asking for a
16898 1995-06-07 20:47 millert
16900 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16902 1995-06-07 20:43 millert
16904 * OPTIONS: added PASSPROMPT
16906 1995-06-07 01:44 millert
16908 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16911 1995-06-07 01:43 millert
16913 * check.c: don't exit on kerb error, just warn if k_errno ==
16914 KDC_PR_UNKNOWN (unknown user) silently fail
16916 1995-06-06 22:44 millert
16918 * INSTALL: added kerb4 note
16920 1995-06-06 22:43 millert
16922 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16924 1995-06-06 22:41 millert
16926 * check.c: removed debugging printf
16928 1995-06-06 22:33 millert
16930 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16933 1995-06-06 22:32 millert
16935 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16938 1995-06-06 22:32 millert
16940 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16941 setreuid emulation with setresuid if applic
16943 1995-06-06 22:31 millert
16945 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16946 chown() hack if no setreuid() or a broken one
16948 1995-06-05 23:44 millert
16950 * config.h.in: added HAVE_KERBEROS
16952 1995-06-05 23:43 millert
16954 * tgetpass.c: added KERBEROS support (long passwords)
16956 1995-06-05 23:42 millert
16958 * check.c, configure.in: added kerberos support
16960 1995-06-03 19:36 millert
16962 * sudo.h: added MODE_BACKGROUND
16964 1995-06-03 19:36 millert
16966 * sudo.man: escaped dashes added -b option
16968 1995-06-03 19:34 millert
16970 * sudo.c: added -b option
16972 1995-06-03 18:52 millert
16974 * check.c: added crypt() for osf/1 3.x enhanced secuiry
16976 1995-06-03 18:18 millert
16978 * configure.in: now check for -lcrypt
16980 1995-06-03 18:00 millert
16982 * interfaces.c: added ENXIO like EADDRNOTAVAIL
16984 1995-05-07 23:14 millert
16986 * configure.in: now emulate getwd(), not getcwd()
16988 1995-05-07 23:13 millert
16990 * sudo.c: getcwd() -> getwd()
16992 1995-05-07 23:12 millert
16994 * getwd.c: getcwd -> getwd
16996 1995-05-02 01:34 millert
16998 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
17000 1995-05-02 01:34 millert
17002 * insults.h: broke out insults into separate include files
17004 1995-05-02 01:32 millert
17006 * options.h, OPTIONS: added GOONS
17008 1995-05-02 01:32 millert
17010 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
17012 1995-05-01 23:34 millert
17014 * Makefile.in, version.h: ++version
17016 1995-05-01 23:34 millert
17018 * visudo.c: moved signal handler setup to setup_signals()
17020 1995-05-01 23:33 millert
17022 * sudo.h: added load_interfaces()
17024 1995-05-01 23:33 millert
17026 * sudo.c: moved load_interfaces to interfaces.c
17028 1995-05-01 23:33 millert
17030 * parse.yacc: added clearaliases
17032 1995-05-01 23:33 millert
17034 * OPTIONS, options.h: added FAST_MATCH
17036 1995-05-01 23:32 millert
17038 * parse.lex: now uses clearaliases variable
17040 1995-05-01 23:31 millert
17042 * interfaces.c: Initial revision
17044 1995-05-01 23:31 millert
17046 * Makefile.in: added interfaces.[co]
17048 1995-05-01 23:30 millert
17050 * testsudoers.c: now uses ip addrs and netmasks via
17053 1995-05-01 22:47 millert
17055 * sudo.c: now remove IFS instead of setting to "sane" value
17057 1995-05-01 16:30 millert
17059 * parse.c: added FAST_MATCH
17061 1995-04-29 20:19 millert
17063 * Makefile.in: sudo_goodpath.c-> goodpath.c
17065 1995-04-29 20:15 millert
17067 * sudo.c: added Andy's new ISC changes
17069 1995-04-14 14:06 millert
17071 * OPTIONS: added a sentence to SECURE_PATH info
17073 1995-04-14 13:57 millert
17077 1995-04-14 13:54 millert
17079 * RUNSON, CHANGES: updated
17081 1995-04-13 17:04 millert
17083 * RUNSON: updated for beta3
17085 1995-04-13 14:32 millert
17087 * Makefile.in, version.h: ++version
17089 1995-04-13 13:56 millert
17091 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
17093 1995-04-13 13:54 millert
17095 * sudo.c: fixed indentation
17097 1995-04-13 13:35 millert
17099 * aclocal.m4: fixed a typo
17101 1995-04-13 13:19 millert
17103 * sudo.c: updated ISC mods
17105 1995-04-13 13:19 millert
17107 * configure.in: added unixware case
17109 1995-04-13 13:19 millert
17111 * check.c: user_is_exempt is no longer hidden
17113 1995-04-13 13:19 millert
17117 1995-04-13 13:19 millert
17119 * aclocal.m4: isc and riscos changes
17121 1995-04-13 13:18 millert
17123 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17126 1995-04-13 13:18 millert
17128 * Makefile.in: fixed a typo and added testsudoers stuff
17130 1995-04-13 12:34 millert
17132 * testsudoers.c: Initial revision
17134 1995-04-12 19:31 millert
17136 * parse.yacc: applied fixed patch from Chris
17138 1995-04-11 14:30 millert
17140 * Makefile.in: fixed a typo
17142 1995-04-11 14:14 millert
17144 * parse.yacc: added a set of braces for bison
17146 1995-04-11 14:01 millert
17148 * parse.yacc: merged in Chris' changes to dekludge the parser.
17150 1995-04-11 00:38 millert
17152 * logging.c: send_mail() was calling find_path() which is wrong
17153 since find_path() stores cmnd in a static var. Anyhow, it
17154 doesn't make much sense since MAILER should always be fully
17157 1995-04-10 19:51 millert
17159 * sample.sudoers: added User_Alias stuff
17161 1995-04-10 19:50 millert
17163 * aclocal.m4: SUDO_NEXT now looks for
17164 /usr/lib/NextStep/software_version
17166 1995-04-10 19:50 millert
17168 * RUNSON: added DEC UNIX 3.0 w/ gcc
17170 1995-04-10 19:49 millert
17172 * visudo.c: Exit was being used in places where exit should be used
17174 1995-04-10 19:44 millert
17176 * sudoers: added "User alias specification"
17178 1995-04-10 18:04 millert
17180 * parse.yacc: fixed probs caused by making nslots and naliases a
17183 1995-04-10 15:09 millert
17185 * RUNSON: added KSR, upped rev to 1.3.1b2
17187 1995-04-10 15:07 millert
17189 * logging.c, parse.yacc: 1024 -> BUFSIZ
17191 1995-04-10 15:05 millert
17193 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17194 to appease lsearch on 64-bit machines
17196 1995-04-09 19:30 millert
17198 * TODO: did a bunch of things and added a bunch :-)
17200 1995-04-09 19:30 millert
17204 1995-04-09 19:24 millert
17206 * visudo.man: closer to BSD manpage style
17208 1995-04-09 19:15 millert
17210 * sudo.man: closer to standard BSD man format
17212 1995-04-09 18:58 millert
17214 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17215 sudo.h, version.h, emul/search.h: added RCS id
17217 1995-04-09 17:35 millert
17219 * sudo.h: removed crufty #defines that are no longer used
17221 1995-04-09 17:13 millert
17223 * BUGS: fixed a bug
17225 1995-04-09 17:12 millert
17227 * sudo.man: updated based on sudo changes
17229 1995-04-09 17:11 millert
17231 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17232 keyword as well as a NAME or ALIAS
17234 1995-04-09 17:11 millert
17238 1995-04-09 17:04 millert
17240 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17242 1995-04-09 15:24 millert
17244 * aclocal.m4: fixed bug with full void impl check
17246 1995-04-08 23:11 millert
17248 * parse.yacc: fixed User_Alias supoprt
17250 1995-04-08 22:27 millert
17252 * parse.yacc: added stubs for User_Alias support
17254 1995-04-08 22:27 millert
17256 * sudo.c: now sets removes # bogus interfaces from num_interfaces
17258 1995-04-08 22:26 millert
17260 * parse.lex: added User_Alias support
17262 1995-04-07 21:10 millert
17264 * Makefile.in: removed extraneous TODO
17266 1995-04-07 19:48 millert
17268 * visudo.c: ntwk_matches -> addr_matches
17270 1995-04-07 15:38 millert
17272 * parse.yacc: ntwk_matches -> addr_matches
17274 1995-04-07 15:37 millert
17276 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17277 inet_network() (which expects octet boundaries) fixes for OSF
17278 (sizeof(int) != sizeof(long))
17280 1995-04-07 15:08 millert
17282 * sudo.c: took out debugging info
17284 1995-04-06 23:45 millert
17286 * aclocal.m4: OS was being set to unknown before non-uname based
17287 host checks. This caused no checks to happen since $OS was not
17290 1995-04-06 23:30 millert
17292 * sudo.c: fixed loading of interfaces struct still has debugging
17295 1995-04-06 22:23 millert
17297 * parse.c: fixed typo
17299 1995-04-06 16:17 millert
17301 * Makefile.in: ++version
17303 1995-04-06 16:16 millert
17307 1995-04-06 16:16 millert
17309 * visudo.c: removed extraneous extern decl of "top
17311 1995-04-06 16:14 millert
17313 * visudo.c: now zeros "top"
17315 1995-04-06 16:13 millert
17317 * parse.yacc: removed parser_cleanup (no need for it now)
17319 1995-04-06 16:13 millert
17321 * parse.lex: now calls reset_aliases() directly
17323 1995-04-04 18:21 millert
17325 * OPTIONS: added a sentence to SECURE_PATH description
17327 1995-04-04 18:17 millert
17329 * parse.c: fixed my stupid bug where I used NAMLEN on something I
17330 wanted to just get the name from. argh.
17332 1995-04-03 16:58 millert
17334 * lsearch.c: fixed argument order of memmove() that i hosed when
17335 converting from bcopy(). arghh.
17337 1995-04-03 15:33 millert
17339 * Makefile.in: finally fixed DISTFILES line
17341 1995-04-03 15:21 millert
17343 * Makefile.in: tabs -> spaces
17345 1995-04-03 15:15 millert
17347 * Makefile.in: added missing files to DISTFILES
17349 1995-04-03 14:50 millert
17351 * Makefile.in: SUPPORTED -> RUNSON
17353 1995-04-01 03:12 millert
17357 1995-04-01 01:54 millert
17359 * RUNSON: updated for pl5b1 release
17361 1995-04-01 01:53 millert
17363 * BUGS, TODO: updated
17365 1995-04-01 01:52 millert
17367 * check.c: fixed bug where if you hit return at first sudo prompt
17368 it would still log as a failure
17370 1995-04-01 01:29 millert
17374 1995-04-01 01:25 millert
17376 * aclocal.m4: better test for bogus void * implementation
17378 1995-03-31 20:33 millert
17380 * logging.c: added PASSWORDS_NOT_CORRECT
17382 1995-03-31 20:32 millert
17384 * check.c: added PASSWORDS_NOT_CORRECT stuff]
17386 1995-03-31 20:30 millert
17388 * sudo.h: added PASSWORDS_NOT_CORRECT
17390 1995-03-31 19:16 millert
17392 * tgetpass.c: moved pathnames.h
17394 1995-03-31 19:16 millert
17396 * sudo.c: removed some unused vars and fixed up uid2str
17398 1995-03-31 19:15 millert
17400 * putenv.c: moved compat.h
17402 1995-03-31 19:14 millert
17404 * getcwd.c, getwd.c: added pathnames.h
17406 1995-03-31 18:18 millert
17408 * parse.yacc: fixed a typo I introduced in the last checkin :-(
17410 1995-03-31 18:11 millert
17412 * parse.lex: can't have #ifdef's where N is defined so just do this
17413 the broken way for AIX
17415 1995-03-31 18:08 millert
17417 * parse.yacc: better hack from Chris (but still a hack)
17419 1995-03-31 18:05 millert
17421 * parse.lex: stupid hack for broken aix lex
17423 1995-03-31 17:47 millert
17425 * tgetpass.c: now includes compat.h
\ 6
17427 1995-03-31 17:27 millert
17429 * visudo.c: now includes fcntl.h
17431 1995-03-31 17:27 millert
17433 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17435 1995-03-31 16:12 millert
17437 * parse.yacc: dirty hack to fix parser bug. i don't really like
17438 this but it works for now...
17440 1995-03-31 16:12 millert
17442 * sudo.c: uid2str is now static like the prototype says
17444 1995-03-29 23:48 millert
17446 * RUNSON: Initial revision
17448 1995-03-29 23:47 millert
17450 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17452 1995-03-29 23:46 millert
17454 * sudo.c: check_sudoers now returns an error code and sudo calls
17455 inform_user and log_error based on the return value.
17457 1995-03-29 23:45 millert
17459 * logging.c, sudo.h: added entries for new errors
17461 1995-03-29 23:03 millert
17463 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17466 1995-03-29 22:52 millert
17468 * Makefile.in: took out testsudoers
\ 6
17470 1995-03-29 22:36 millert
17472 * sudo.c: now explicately checks that it is setuid root
17474 1995-03-29 22:28 millert
17476 * sudo.c: If a user has no passwd entry sudo would segv (writing to
17477 a garbage pointer). Now allocate space before writing :-)
17479 1995-03-29 22:06 millert
17481 * configure.in: reordered AC_CHECK_FUNCS
17483 1995-03-29 22:06 millert
17485 * config.h.in: fixed memset macro
17487 1995-03-29 21:47 millert
17489 * logging.c: bzero -> memset when a parse error is logged the line
17490 number of the error is now logged too
17492 1995-03-29 21:46 millert
17494 * tgetpass.c, visudo.c: bzero -> memset
17496 1995-03-29 21:46 millert
17498 * INSTALL: added Sunos to blurb about c2 security
17500 1995-03-29 21:45 millert
17502 * configure.in: added a SUN4 define for C2 security
17504 1995-03-29 21:44 millert
17506 * config.h.in: bcopy -> memmove bzero -> memset
17508 1995-03-29 21:43 millert
17510 * lsearch.c: bcopy -> memmove char * -> VOID *
17512 1995-03-29 21:30 millert
17514 * check.c: added support for sunos with C2 security
17516 1995-03-29 21:12 millert
17518 * OPTIONS, options.h: reordered
17520 1995-03-29 21:12 millert
17522 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17524 1995-03-29 21:12 millert
17526 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17528 1995-03-29 21:12 millert
17530 * config.h.in: added _SUDO_PATH_LOGFILE
17532 1995-03-29 21:11 millert
17534 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17535 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17536 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17538 1995-03-29 18:17 millert
17540 * TROUBLESHOOTING: Initial revision
17542 1995-03-29 17:59 millert
17544 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17545 load_global() to work around a problem is trusted hpux shadow
17548 1995-03-29 17:41 millert
17550 * parse.yacc: backed out a change in malloc/realloc
17552 1995-03-29 17:38 millert
17554 * parse.yacc: now include stdlib.h
17556 1995-03-29 17:22 millert
17558 * visudo.c: now do an freopen() of the stmp file so that yyin will
17559 always point to the same thing. This is important for flex since
17560 we are doing a YY_NEWFILE
17562 1995-03-29 17:20 millert
17564 * parse.yacc: replaced yywrap() with parser_cleanup() since
17565 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17568 1995-03-29 17:18 millert
17570 * parse.lex: now have a rule that matches anything that doesn't
17571 match an explicite rule. well, you know what i mean (. matches
17572 anything not yet matched). However, this means that there is
17573 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17574 So, yywrap has moved into parse.lex and it calls parser_cleanup()
17575 which is most of the old yywrap() sigh.
17577 1995-03-29 17:17 millert
17579 * SUPPORTED: no longer used
17581 1995-03-29 16:13 millert
17583 * getcwd.c, getwd.c: moved compat.h to be the last include file
17585 1995-03-29 16:11 millert
17587 * parse.yacc: fixed type of aliascmp() args
17589 1995-03-29 15:58 millert
17591 * find_path.c: NULL -> '\0'
17593 1995-03-29 15:42 millert
17595 * parse.yacc: added casts to lfind and lsearch args for irix
17597 1995-03-29 08:20 millert
17599 * Makefile.in: bsdinstall -> install-sh
17601 1995-03-29 08:20 millert
17603 * INSTALL: added info about make realclean
17605 1995-03-29 08:17 millert
17607 * Makefile.in: updated VERSION added dependencies for visudo.cat
17609 1995-03-29 08:17 millert
17611 * version.h: -> pl5b1
17613 1995-03-29 08:16 millert
17615 * sudo.c: took out -l
17617 1995-03-29 00:03 millert
17619 * Makefile.in: now there is a real visudo.man and visudo.cat
17621 1995-03-28 23:54 millert
17623 * sudo.man: took out visudo stuff
17625 1995-03-28 23:54 millert
17627 * visudo.man: Initial revision
17629 1995-03-28 23:12 millert
17631 * parse.c, parse.lex, parse.yacc: updated copyright
17633 1995-03-28 23:05 millert
17635 * README: updated for pl5
17637 1995-03-28 20:02 millert
17639 * sudo.man: updated Nieusma & Hieb email addresses
17641 1995-03-28 19:57 millert
17643 * INSTALL: updated to include options.h and OPTIONS
17645 1995-03-28 19:35 millert
17647 * CHANGES, TODO: updated
17649 1995-03-28 19:35 millert
17651 * BUGS: eliminated bug #1 (yay)
17653 1995-03-28 19:31 millert
17655 * configure.in: sunos no longer gets linked statically
17657 1995-03-28 18:58 millert
17659 * parse.lex: prototype now uses __P()
17661 1995-03-28 18:49 millert
17663 * parse.lex: make fill() non-ansi
17665 1995-03-28 15:26 millert
17667 * parse.c: made -v (validate) work
17669 1995-03-28 15:26 millert
17671 * logging.c: now gives host
17673 1995-03-28 10:34 millert
17675 * find_path.c: don't check for execute/statable if fq or relative
17678 1995-03-28 01:07 millert
17680 * parse.c: added a cast
17682 1995-03-28 00:49 millert
17684 * visudo.c: now include ctype.h for islower and tolower macros
17686 1995-03-28 00:48 millert
17688 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17690 1995-03-28 00:48 millert
17692 * sudo.c: moved a set of parens
17694 1995-03-28 00:48 millert
17696 * strdup.c: now include compat.h
17698 1995-03-28 00:47 millert
17700 * parse.yacc: now cast malloc & realloc return vals added search
17701 for HAVE_LSEARCH now use strcmp if no strcasecmp available
17703 1995-03-28 00:46 millert
17705 * lsearch.c, emul/search.h: void * -> VOID *
17707 1995-03-28 00:45 millert
17709 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17710 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17712 1995-03-28 00:44 millert
17714 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17716 1995-03-28 00:44 millert
17718 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17719 echo and results to most SUDO_* macros
17721 1995-03-28 00:43 millert
17723 * Makefile.in: no more -I.
17725 1995-03-28 00:22 millert
17727 * configure.in: various 1.x ro 2.x autoconf changes now check for
17728 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17729 check for fully woorking void implementation
17731 1995-03-28 00:02 millert
17733 * Makefile.in: added lsearch & search.h visudo links into
17736 1995-03-27 23:43 millert
17738 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17740 1995-03-27 23:40 millert
17742 * visudo.c: whatnow_help was prototyped to be static be was not
17745 1995-03-27 21:15 millert
17747 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17748 used) added check for dirent/dir/ndir.h
17750 1995-03-27 21:09 millert
17752 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17754 1995-03-27 20:38 millert
17756 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17758 1995-03-27 20:23 millert
17760 * emul/search.h, lsearch.c: Initial revision
17762 1995-03-27 18:26 millert
17764 * parse.yacc: eliminated bison warnings
17766 1995-03-27 17:10 millert
17768 * parse.lex: added missing case
17770 1995-03-27 17:04 millert
17772 * visudo.c: now iincludes signal.h
17774 1995-03-27 15:16 millert
17776 * parse.yacc: only clear data structures on a parse error
17778 1995-03-27 15:01 millert
17780 * visudo.c: whatnow() now gives help on invalid input
17782 1995-03-27 14:54 millert
17784 * visudo.c: added a whatnow() function (sort of like mh)
17786 1995-03-27 14:53 millert
17788 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17789 by calling reset_aliases() and clearing top took reset stuff out
17790 of yyerror() since it doesn't beling there (and doesn't work
17791 anyway). errorlineno is now initially set to -1 so we can set it
17792 to the first error that occurrs (it was getting set to the last)
17794 1995-03-27 14:53 millert
17796 * parse.lex: added a void cast
17798 1995-03-27 13:26 millert
17800 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17802 1995-03-26 01:33 millert
17804 * sudo.c, sudo.h: removed ocmnd
17806 1995-03-26 01:19 millert
17808 * sudo.h: no more sudo_realpath() and find_path() changed params
17810 1995-03-26 01:19 millert
17812 * sudo.c: find_path() changed since no more realpath()
17814 1995-03-26 01:18 millert
17816 * parse.yacc: on error, errorlineno is set to the line where the
17817 error occurred added kill_aliases() to free the aliases struct
17818 now clean up in yyerror() so we can reparse cleanly
17820 1995-03-26 01:17 millert
17822 * logging.c: changed to use new find_path()
17824 1995-03-26 01:17 millert
17826 * options.h, parse.c: no more USE_REALPATH
17828 1995-03-26 01:16 millert
17830 * find_path.c: removed all the realpath() stuff
17832 1995-03-26 01:16 millert
17834 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17836 1995-03-26 01:12 millert
17838 * visudo.c: now works correctly with utk parser
17840 1995-03-26 00:04 millert
17842 * goodpath.c: Initial revision
17844 1995-03-25 23:23 millert
17846 * sudo_realpath.c: eliminated a compiler warning
17848 1995-03-25 21:56 millert
17850 * sudo.c: elinated compiler warning
17852 1995-03-25 20:40 millert
17854 * sudo_realpath.c: added sudo_goodpath()
17856 1995-03-25 20:40 millert
17858 * sudo.h: added prototype for sudo_goodpath
17860 1995-03-25 20:39 millert
17862 * parse.c: added support for /sys/dir.h
17864 1995-03-25 20:39 millert
17866 * options.h: USE_REALPATH turned off
17868 1995-03-25 20:39 millert
17870 * find_path.c: added calls to sudo_goodpath()
17872 1995-03-25 20:39 millert
17874 * configure.in: added check for dirent.h
17876 1995-03-25 20:38 millert
17878 * config.h.in: added HAVE_DIRENT_H
17880 1995-03-25 19:27 millert
17882 * configure.in: added in linux shadow pass stuff
\ 6
17884 1995-03-24 14:43 millert
17886 * visudo.c: added back host, user, cmnd, parse_error
17888 1995-03-24 14:19 millert
17890 * visudo.c: added in utk changes plus some minor cosmetic changes
17892 1995-03-24 14:17 millert
17894 * sudo.c, sudo_realpath.c: added void casts for printf's
17896 1995-03-24 14:17 millert
17898 * options.h: added a define of USE_REALPATH
17900 1995-03-24 14:17 millert
17902 * configure.in: there is no more visudoers/Makefile
17904 1995-03-24 14:16 millert
17906 * Makefile.in: added in utk changes (visudo is now built from the
17909 1995-03-24 14:15 millert
17911 * find_path.c: added (void) casts to printf's
17913 1995-03-23 22:32 millert
17915 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17918 1995-03-22 23:13 millert
17920 * find_path.c: now check to see that what we are trying to run is a
17921 file (or a link to a file, we do a stat(2) so there is no diff)
17923 1995-03-13 15:56 millert
17927 1995-03-13 15:56 millert
17929 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17932 1995-03-13 15:11 millert
17934 * sudo.man: added myself as maintainer
17936 1995-02-16 23:31 millert
17938 * sudo.c: changed setegid -> setgid
17940 1995-02-06 17:43 millert
17942 * configure.in: fixed the test for irix 5.x to skip bad libs
17944 1995-02-06 17:43 millert
17946 * aclocal.m4: now initialize OS and OSREV
17948 1995-01-26 20:52 millert
17950 * configure.in: irix5 changes
17952 1995-01-26 20:28 millert
17954 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17955 for autoconf 2.1 compatibility
17957 1995-01-18 19:49 millert
17959 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17960 do the righ thing wrt yyrestart (grrrr)
17962 1995-01-16 18:44 millert
17964 * Makefile.in: added visudoers/compat.h to DISTFILES
17966 1995-01-16 17:01 millert
17968 * configure.in: fixed an echo
17970 1995-01-16 16:36 millert
17972 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17975 1995-01-16 16:35 millert
17977 * sudo.h: added ocmnd extern adjusted find_path() prototype
17979 1995-01-16 16:34 millert
17981 * parse.c: cmndcmp() now takes 3 arguments and checks against the
17982 qualified as well as the unqualified pathname. more code that
17983 should use cmndcmp() but did not, now does
17985 1995-01-16 16:34 millert
17987 * options.h: added to a comment
17989 1995-01-16 16:33 millert
17991 * logging.c: changed to use new find_path() parameter passing
17993 1995-01-16 16:32 millert
17995 * find_path.c: find_path() now takes 2 copyout parameters (one for
17996 the qualified pathname and one for the unqualified pathname).
17997 The third parameter may be NULL.
17999 1995-01-16 16:31 millert
18001 * configure.in: no longer munge pathnames.h
18003 1995-01-16 16:30 millert
18005 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
18006 defined in config.h) as a result, pathnames.h does not need to be
18007 run through configure and the user can override the configured
18010 1995-01-16 16:30 millert
18012 * config.h.in: added _SUDO_PATH_* entries
18014 1995-01-16 16:30 millert
18016 * aclocal.m4: _PATH* -> _SUDO_PATH_*
18018 1995-01-16 16:28 millert
18020 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
18023 1995-01-13 12:52 millert
18025 * compat.h: removed extraneous #endif
18027 1995-01-13 12:48 millert
18029 * aclocal.m4: added SUDO_PROG_MV
18031 1995-01-13 12:47 millert
18033 * configure.in: added SUDO_PROG_MV added riscos and isc os types
18034 took out -DSHORT_MESSAGE from --with-csops since it is now the
18037 1995-01-13 12:46 millert
18039 * sudo.c: move the include of id.h to compat.h now includes
18042 1995-01-13 12:45 millert
18044 * sudo.h: moved compatibility #defines to compat.h
18046 1995-01-13 12:45 millert
18048 * pathnames.h.in: added _PATH_MV
18050 1995-01-13 12:43 millert
18052 * config.h.in: move __P to compat.h
18054 1995-01-13 12:39 millert
18056 * getcwd.c, getwd.c, putenv.c: now includes compat.h
18058 1995-01-13 12:39 millert
18060 * compat.h: Initial revision
18062 1995-01-11 19:11 millert
18064 * sudo.h: pull user-configurable stuff out and put in options.h
18066 1995-01-11 18:43 millert
18068 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
18069 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
18072 1995-01-11 18:41 millert
18074 * Makefile.in: added visudoers/options.h
18076 1995-01-11 18:40 millert
18078 * options.h, OPTIONS: Initial revision
18080 1995-01-11 18:39 millert
18082 * Makefile.in: added OPTIONS and options.h
18084 1995-01-11 18:36 millert
18086 * logging.c: changed #ifdef's to use LOGGING and
18087 SLOG_SYSLOG/SLOG_FILE
18089 1995-01-11 11:02 millert
18091 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
18093 1994-12-17 18:18 millert
18095 * visudo.c: now only do Editor +line_num if line_num != 0
18097 1994-12-15 21:06 millert
18099 * visudo.c: now use mv if rename(2) fails
18101 1994-12-15 20:32 millert
18103 * BUGS: added a visudo bug
18105 1994-12-15 19:46 millert
18107 * check.c: expanded comment
18109 1994-11-12 18:33 millert
18111 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18114 1994-11-09 19:49 millert
18116 * sudo.c: added mips & isc support
18118 1994-11-09 19:49 millert
18120 * parse.c: added support for non-root owned sudoers file
18122 1994-11-09 19:48 millert
18124 * check.c: added exempt group support
18126 1994-11-09 19:47 millert
18128 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18129 non-root own sudoers file added exempt group support added isc
18132 1994-11-09 19:46 millert
18134 * visudo.c: now copy sudoers to temp file via read/write (not
18135 stdio) now chown new sudoers file to SUDOERS_OWNER
18137 1994-11-07 20:40 millert
18139 * configure.in: added skey support
18141 1994-11-07 20:39 millert
18143 * sudo.h: fixed typo added set_perms support added skey support
18144 added seteuid()/setegid() emulation for AIX
18146 1994-11-07 20:38 millert
18148 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18149 owned by root nread/write by only root
18151 1994-11-07 20:38 millert
18153 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18155 1994-11-07 20:38 millert
18157 * check.c: be_* -> set_perms() added skey support
18159 1994-11-06 18:59 millert
18161 * Makefile.in: ++version
18163 1994-11-06 18:59 millert
18167 1994-10-21 13:16 millert
18169 * sudo.c: now sets IFS
18171 1994-10-21 12:02 millert
18173 * insults.h: fixed typo
18175 1994-10-15 15:48 millert
18177 * config.h.in: added HAVE_SKEY
18179 1994-10-04 13:00 millert
18183 1994-10-04 12:57 millert
18185 * Makefile.in: ++version
18187 1994-10-04 12:57 millert
18191 1994-10-04 12:56 millert
18193 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18195 1994-10-04 12:56 millert
18197 * configure.in: added function check for tcgetattr(3)
18199 1994-10-04 12:55 millert
18201 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18203 1994-10-04 12:53 millert
18205 * config.h.in: added check for tcgetattr
18207 1994-09-26 17:38 millert
18211 1994-09-22 13:30 millert
18213 * parse.lex: now only include unistd.h for linux
18215 1994-09-21 14:29 millert
18217 * Makefile.in: added visudo.8 generation
18219 1994-09-21 14:07 millert
18221 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18223 1994-09-20 19:39 millert
18227 1994-09-20 19:39 millert
18231 1994-09-20 19:38 millert
18233 * README: added mailing list info
18235 1994-09-20 19:37 millert
18237 * parse.yacc: now use sudolineno instead of yylineno fixed bison
18240 1994-09-20 19:37 millert
18242 * configure.in: now use -no_library_replacement for osf don't make
18243 a static binary for hpux >= 9.0
18245 1994-09-20 19:21 millert
18247 * tgetpass.c: added string.h/strings.h inclusion
18249 1994-09-20 19:21 millert
18251 * config.h.in: added ssize_t def
18253 1994-09-20 19:18 millert
18255 * parse.lex: added inclusion of string.h/strings.h
18257 1994-09-20 18:48 millert
18259 * aclocal.m4: fixed uname | sed (needed to quote the '[')
18261 1994-09-20 18:42 millert
18263 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18266 1994-09-20 18:13 millert
18268 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18271 1994-09-20 18:10 millert
18275 1994-09-20 17:52 millert
18277 * parse.c: added code to support command listings
18279 1994-09-20 17:36 millert
18281 * sudo.c: added code for -l flag
18283 1994-09-20 17:35 millert
18285 * sudo.man: fixed typo added info for -l flag
18287 1994-09-20 14:45 millert
18289 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18291 1994-09-20 14:45 millert
18293 * aclocal.m4: added SUDO_SSIZE_T
18295 1994-09-20 14:44 millert
18297 * sudo.h: added MODE_LIST
18299 1994-09-20 14:43 millert
18301 * configure.in: added AC_SSIZE_T
18303 1994-09-19 20:53 millert
18305 * find_path.c, sudo_realpath.c: readlink() is now declared as
18308 1994-09-19 20:44 millert
18310 * configure.in: added -laud for OSF c2
18312 1994-09-02 15:55 millert
18314 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18315 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18316 sudo-bugs@cs.colorado.edu
18318 1994-09-02 15:54 millert
18320 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18321 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18322 sudo_setenv.c, tgetpass.c, version.h: changed
18323 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18325 1994-09-01 15:56 millert
18327 * Makefile.in: ++version
18329 1994-09-01 15:55 millert
18333 1994-09-01 15:55 millert
18335 * logging.c: added host to alertmail messages
18337 1994-09-01 15:55 millert
18339 * CHANGES, TODO: udpated
18341 1994-09-01 15:26 millert
18343 * logging.c: fixed logging problem where mail would not say which
18346 1994-09-01 13:45 millert
18348 * configure.in: added -laud for gcc if osf & c2
18350 1994-09-01 13:39 millert
18352 * check.c: moved set_auth_parameters to sudo.c
18354 1994-09-01 13:38 millert
18356 * sudo.c: added set_auth_parameters for osf
18358 1994-09-01 13:22 millert
18360 * configure.in: cleaned up -static stuff
18362 1994-09-01 13:15 millert
18364 * Makefile.in: ++version
18366 1994-09-01 13:15 millert
18370 1994-09-01 13:15 millert
18372 * sudo.c: changed setenv() to sudo_setenv()
18374 1994-09-01 13:12 millert
18376 * check.c: fixed osf problem
18378 1994-08-31 22:17 millert
18380 * configure.in: added OSF C2 stuff
18382 1994-08-31 22:00 millert
18386 1994-08-31 21:56 millert
18388 * check.c: added osf auth support & removed some extra spaces
18390 1994-08-31 21:52 millert
18392 * INSTALL, SUPPORTED: added osf C2 stuff
18394 1994-08-31 19:52 millert
18396 * TODO: added 2 suggestions
18398 1994-08-31 19:33 millert
18400 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18402 1994-08-31 18:48 millert
18406 1994-08-30 18:31 millert
18408 * version.h: 1.3.1final
18410 1994-08-30 18:30 millert
18412 * Makefile.in: added HISTORY
18414 1994-08-30 18:30 millert
18416 * sudo.man: mention HISTPRY file
18418 1994-08-30 18:30 millert
18420 * sudo.c: use sizeof instead of a constant in 1 place
18422 1994-08-30 18:30 millert
18424 * parse.yacc: added unistd.h
18426 1994-08-30 18:29 millert
18428 * parse.lex: added unistd.h
18430 1994-08-30 18:27 millert
18434 1994-08-30 18:15 millert
18436 * HISTORY: Initial revision
18438 1994-08-17 12:45 millert
18442 1994-08-17 12:39 millert
18446 1994-08-17 12:36 millert
18448 * sudo_setenv.c: added unistd.h include
18450 1994-08-16 15:46 millert
18452 * sudo.c: added sys/time.h for AIX
18454 1994-08-14 21:22 millert
18456 * configure.in: added check for -lsocket and sys/sockio.h
18458 1994-08-14 21:21 millert
18460 * config.h.in: took out libshadow check and added in sys/sockio.h
18463 1994-08-14 21:21 millert
18465 * sudo.c: now include sockio.h instead of ioctl.h if it exists
18466 "sudo -" now gets a better error message
18468 1994-08-14 20:47 millert
18470 * sample.sudoers: now has a dir and subnet entry
18472 1994-08-13 18:15 millert
18474 * sudo.c: removed if_ether.h
18476 1994-08-13 17:16 millert
18478 * TODO: added an item
18480 1994-08-13 17:15 millert
18482 * sudo.man: added network and ip addresses to man page
18484 1994-08-13 17:09 millert
18486 * sudo.c: no error if can't get interfaces or netmask since
18487 networking may not be in the kernel.
18489 1994-08-13 17:08 millert
18491 * parse.c: nwo check for interfaces == NULL
18493 1994-08-12 21:22 millert
18495 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18496 to fail if the last entry in the spec failed (ie: it was only
18497 looking at the last entry). CLeaned things up by adding the
18498 cmndcmp() function--all neat & tidy
18500 1994-08-12 21:21 millert
18502 * CHANGES: added one
18504 1994-08-11 23:42 millert
18506 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18508 1994-08-11 21:58 millert
18510 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18513 1994-08-11 21:58 millert
18515 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18516 visudo.c: added include of netinet/in.h
18518 1994-08-11 21:57 millert
18522 1994-08-11 21:57 millert
18524 * sudo.h: added interfaces global
18526 1994-08-11 21:56 millert
18528 * parse.c: now uses new interfaces global
18530 1994-08-11 21:56 millert
18532 * sudo.c: now ip addresses are gleaned fw/o dns
18534 1994-08-10 19:21 millert
18536 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18538 1994-08-10 19:21 millert
18540 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18543 1994-08-10 19:20 millert
18545 * sudo.h: added ip_addrs def added load_ip_addrs prototype
18547 1994-08-08 16:03 millert
18551 1994-08-08 15:57 millert
18553 * Makefile.in: removed multiple entries in DISTFILES
18555 1994-08-08 13:05 millert
18557 * visudo.c: ansified the !STDC_HEADERS decls
18559 1994-08-08 13:05 millert
18561 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18562 malloc decl if gnuc
18564 1994-08-08 13:04 millert
18566 * sudo.c: can't use getopt(3) since it munges args to the command
18567 to be run as root don't do malloc decl if gnuc
18569 1994-08-08 00:41 millert
18571 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18572 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18575 1994-08-08 00:27 millert
18577 * getcwd.c, getwd.c: added missing paren
18579 1994-08-08 00:23 millert
18581 * Makefile.in: added putenv.c to DISTFILES
18583 1994-08-08 00:08 millert
18585 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18586 not defined now can count on putenv() being there
18588 1994-08-08 00:08 millert
18590 * sudo_realpath.c: took out errno decl since sudo.h does it for us
18591 fixed up a next cc warning added params to func decls when
18592 STDC_HEADERS is not defined
18594 1994-08-08 00:07 millert
18596 * sudo.h: took out environ extern added local declaratio of
18597 putenv() if local version is needed
18599 1994-08-08 00:05 millert
18601 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18602 func decls when STDC_HEADERS is not defined
18604 1994-08-08 00:04 millert
18606 * config.h.in: added memcpy check check to see that ansi vs bsd
18607 macros are ntot already defiend before defining (ie: avoid
18610 1994-08-08 00:03 millert
18612 * configure.in: removed fluff setenv check plus check w/ replace
18613 for putenv if also no setenv
18615 1994-08-08 00:01 millert
18617 * putenv.c: Initial revision
18619 1994-08-06 19:19 millert
18621 * sudo_setenv.c: Initial revision
18623 1994-08-06 19:19 millert
18625 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18627 1994-08-06 19:19 millert
18629 * sudo.c: now use sudo_setenvc
18631 1994-08-06 19:18 millert
18633 * configure.in: added puteenv and setenv, removed realpath
18635 1994-08-06 19:18 millert
18637 * config.h.in: added putenv & setenv
18639 1994-08-06 19:18 millert
18641 * Makefile.in: added sudo_setenv
18643 1994-08-06 19:16 millert
18647 1994-08-05 19:43 millert
18649 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18652 1994-08-05 19:43 millert
18654 * Makefile.in: added MAN_POSTINSTALL
18656 1994-08-05 19:43 millert
18660 1994-08-05 19:10 millert
18662 * sudo.man: added SUDO_* plus new options
18664 1994-08-05 19:10 millert
18666 * CHANGES: added one
18668 1994-08-05 19:07 millert
18670 * configure.in: took out shadow lib
18672 1994-08-05 18:35 millert
18676 1994-08-05 17:52 millert
18678 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18680 1994-08-05 17:49 millert
18682 * Makefile.in: support for installing a cat page instead of a man
18685 1994-08-05 17:48 millert
18687 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18688 looks for nroff to determine whether or not to install a cat or
18691 1994-08-05 17:48 millert
18693 * config.h.in: added HAVE_FLEX
18695 1994-08-05 16:14 millert
18697 * sudo.c: not set ret to MODE_RUN initially
18699 1994-08-05 16:12 millert
18701 * find_path.c: made command (and therefor cmnd dynamically
18704 1994-08-04 20:25 millert
18708 1994-08-04 20:24 millert
18712 1994-08-04 20:24 millert
18714 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18716 1994-08-04 20:24 millert
18718 * sudo.h: added MODE_ removed validate_only and added
18721 1994-08-04 20:22 millert
18723 * sudo.c: usage() now takes an int (exit value) added parse_args()
18724 to parse command line arguments moved call to find_path() from
18725 load_globals to new function load_cmnd() removed validate_only
18726 global -- now use the concept of "modes" added -h and -k options
18728 1994-08-04 20:21 millert
18730 * parse.c: no longer use global validate_only now checks for
18731 command called "validate" removed check for non-fully qualified
18732 commands since that is done by find_path
18734 1994-08-04 20:20 millert
18736 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18738 1994-08-04 20:17 millert
18740 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18743 1994-08-04 20:17 millert
18745 * check.c: check_timestamp no longer runs reminder(), it is implied
18746 in the return val added remove_timestamp()
18748 1994-08-04 20:16 millert
18752 1994-08-04 16:38 millert
18756 1994-08-04 16:38 millert
18758 * sudo_realpath.c: took out old_errno
18760 1994-08-04 16:37 millert
18764 1994-08-03 12:08 millert
18766 * logging.c: moved send_mail to after syslog
18768 1994-08-02 22:41 millert
18770 * sudo.c: now set SUDO_ envariables
18772 1994-08-01 13:40 millert
18776 1994-08-01 13:39 millert
18778 * sudo_realpath.c: now print error if chdir fails
18780 1994-08-01 13:39 millert
18782 * find_path.c: removed an XXX
18784 1994-07-25 20:40 millert
18788 1994-07-25 20:36 millert
18790 * configure.in: no more static binaries for aix
18792 1994-07-25 18:37 millert
18794 * INSTALL: fixed typo
18796 1994-07-25 18:33 millert
18798 * sudo_realpath.c: took out stuff not needed for sudo now does
18799 be_root/be_user itself now uses cwd global
18801 1994-07-25 18:32 millert
18805 1994-07-25 18:31 millert
18807 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18809 1994-07-25 18:26 millert
18811 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18813 1994-07-25 18:25 millert
18815 * find_path.c: now use sudo_realpath()
18817 1994-07-25 18:25 millert
18819 * config.h.in: took out realpth() stuff since we now use
18822 1994-07-25 18:25 millert
18824 * configure.in: ultrix enhanced sec
18826 1994-07-25 18:25 millert
18828 * SUPPORTED: added ultrix enhanced sec.
18830 1994-07-25 18:24 millert
18834 1994-07-25 18:21 millert
18836 * check.c: ultrix enhanced security suport
18838 1994-07-25 18:20 millert
18840 * Makefile.in: added sudo_realpath.c
18842 1994-07-25 18:18 millert
18846 1994-07-25 14:28 millert
18848 * tgetpass.c: increased passwd len to 24 for c2 security
18850 1994-07-25 13:17 millert
18852 * BUGS: updated BUGS
18854 1994-07-15 11:49 millert
18856 * check.c: now use user global var
18858 1994-07-15 11:48 millert
18860 * configure.in: took out -ls
18862 1994-07-14 19:11 millert
18864 * configure.in: added AFS libs
18866 1994-07-14 17:45 millert
18868 * sudo.h: user is now a char * added epasswd
18870 1994-07-14 17:43 millert
18872 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18873 password) global made user dynamically allocated
18875 1994-07-14 17:43 millert
18877 * configure.in: added tzset test
18879 1994-07-14 17:43 millert
18881 * config.h.in: added HAVE_TZSET
18883 1994-07-14 17:42 millert
18885 * check.c: cleaned up encrypted passwd grab somewhat
18887 1994-07-14 12:34 millert
18889 * configure.in: fixed AFS typo
18891 1994-07-14 12:34 millert
18893 * INSTALL: added AFS not
18895 1994-07-14 12:34 millert
18899 1994-07-14 12:33 millert
18901 * logging.c: can now log to both syslog & a file
18903 1994-07-14 12:12 millert
18905 * sudo.h: added BOTH_LOGS
18907 1994-07-14 11:34 millert
18911 1994-07-14 11:32 millert
18913 * configure.in: --with-AFS
18915 1994-07-14 11:32 millert
18917 * config.h.in: added HAVE_AFS
18919 1994-07-14 11:31 millert
18921 * check.c: added afs changes
18923 1994-07-14 11:21 millert
18925 * sudo.h: removed AFS stuff :-)
18927 1994-07-14 11:19 millert
18929 * tgetpass.c: include sys/select for AIX
18931 1994-07-14 11:17 millert
18933 * sudo.h: added AFS
18935 1994-07-14 11:16 millert
18939 1994-07-07 14:45 millert
18941 * SUPPORTED, CHANGES: updated
18943 1994-07-07 14:44 millert
18945 * logging.c: can now have MAILER undefined
18947 1994-07-07 14:37 millert
18949 * INSTALL: new sub-note about MAILER
18951 1994-07-06 23:11 millert
18953 * sudo.man: added blurb about password timeout
18955 1994-07-06 20:52 millert
18957 * configure.in: convex c2 changes
18959 1994-07-06 20:52 millert
18961 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18963 1994-07-06 20:51 millert
18965 * Makefile.in: added OSDEFS
18967 1994-07-06 20:46 millert
18969 * config.h.in: added spaces
18971 1994-07-06 20:08 millert
18973 * tgetpass.c: added a goto if fgets fails
18975 1994-07-06 20:08 millert
18977 * sudo.h: use __hpux not hpux convex c2 stuff
18979 1994-07-06 20:08 millert
18981 * sudo.c: use __hpux not hpux
18983 1994-07-06 20:08 millert
18985 * logging.c: convex c2 stuff
18987 1994-07-06 20:07 millert
18989 * config.h.in: define ansi-ish cpp os defines if non-ansi are
18990 defined for hpux & convex
18992 1994-07-06 20:07 millert
18994 * INSTALL: updated to say we support sonvex C2
18996 1994-07-06 20:05 millert
18998 * check.c: added convex c2 support
19000 1994-07-01 12:06 millert
19002 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
19003 select() to timeout
19005 1994-06-29 17:04 millert
19007 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
19009 1994-06-29 16:39 millert
19011 * tgetpass.c: now works + uses fgets()
19013 1994-06-28 18:25 millert
19015 * tgetpass.c: select doesn't seem to recognize a single '\n' as
19016 input waiting so we can;t use it, sigh.
19018 1994-06-26 16:38 millert
19020 * PORTING: updated tgetpass() blurb
19022 1994-06-26 16:35 millert
19024 * configure.in: added --with-getpass
19026 1994-06-26 16:35 millert
19028 * Makefile.in: added tgetpass stuff
19030 1994-06-26 15:25 millert
19032 * tgetpass.c: now uses stdio
19034 1994-06-26 15:17 millert
19038 1994-06-24 19:48 millert
19040 * PORTING: updated ,.
19042 1994-06-24 19:46 millert
19044 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
19046 1994-06-24 19:45 millert
19048 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
19050 1994-06-24 19:45 millert
19052 * check.c: added hpux C2 shit
19054 1994-06-24 19:45 millert
19056 * Makefile.in: took out tgetpass.*
19058 1994-06-24 19:45 millert
19060 * INSTALL: added C2 blurb
19062 1994-06-13 15:54 millert
19064 * configure.in: no termio(s) for ultrix since it is broken
19066 1994-06-13 15:41 millert
19068 * check.c: added a space (yeah, anal)
19070 1994-06-13 15:17 millert
19072 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
19074 1994-06-08 14:34 millert
19076 * config.h.in: took out bsd signal stuff for irix
19078 1994-06-08 14:26 millert
19080 * visudo.c: comments in #endif
19082 1994-06-08 14:09 millert
19084 * configure.in: don't define BSD signals for irix
19086 1994-06-08 12:57 millert
19088 * TODO: did some...
19090 1994-06-08 12:57 millert
19094 1994-06-08 12:56 millert
19096 * realpath.c, sudo_realpath.c: took out unneeded code by changing
19097 where a strings was terminated
19099 1994-06-07 19:21 millert
19101 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
19104 1994-06-07 17:40 millert
19106 * sudo.h: move __P to config.h
19108 1994-06-07 17:40 millert
19110 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19113 1994-06-07 17:40 millert
19115 * config.h.in: added __P
19117 1994-06-07 17:21 millert
19119 * config.h.in: added HAVE_FCHDIR
19121 1994-06-07 17:18 millert
19123 * strdup.c: now include stdio
19125 1994-06-07 14:55 millert
19127 * realpath.c, sudo_realpath.c: now works if no fchdir
19129 1994-06-07 14:55 millert
19131 * visudo.c: define SA_RESETHAND to null if not defined
19133 1994-06-07 14:54 millert
19135 * configure.in: added check & replace
19137 1994-06-06 20:05 millert
19139 * configure.in: took out -static for nextstep -- it doesn't work
19141 1994-06-06 19:59 millert
19143 * logging.c: moved #endif to where it belongs
19145 1994-06-06 19:54 millert
19147 * SUPPORTED: correction
19149 1994-06-06 19:42 millert
19151 * configure.in: now checks for strdup realpath getcwd bzero
19153 1994-06-06 19:31 millert
19155 * config.h.in: emulate bzero
19157 1994-06-06 16:57 millert
19159 * visudo.c: added posic signals
19161 1994-06-06 16:57 millert
19163 * tgetpass.c: bzero cast
19165 1994-06-06 16:57 millert
19167 * logging.c: added posix signals
19169 1994-06-06 16:56 millert
19171 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19174 1994-06-06 16:56 millert
19176 * config.h.in: added posix signal stuff
19178 1994-06-06 16:56 millert
19180 * Makefile.in: added new srcs
19182 1994-06-06 12:53 millert
19184 * visudo.c: updated useag
19186 1994-06-06 12:39 millert
19188 * tgetpass.c: now uses posix signals
19190 1994-06-05 20:17 millert
19192 * PORTING: updated sto reflect major changes
19194 1994-06-05 20:05 millert
19196 * TODO, CHANGES: updated
19198 1994-06-05 20:04 millert
19200 * tgetpass.c: uses sysconf() if available
19202 1994-06-05 20:04 millert
19204 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19206 1994-06-05 20:04 millert
19208 * realpath.c, sudo_realpath.c: for those w/o this in libc
19210 1994-06-05 20:03 millert
19212 * getcwd.c, getwd.c: Initial revision
19214 1994-06-05 20:03 millert
19216 * find_path.c: rewrote to use realpath(3) - nis now all my code
19218 1994-06-05 20:02 millert
19220 * config.h.in: added HAVE_REALPATH
19222 1994-06-05 20:02 millert
19224 * check.c: now use tgetpass
19226 1994-06-05 20:02 millert
19228 * Makefile.in: added LIBOBJS use tgetpass.c
19230 1994-06-05 18:55 millert
19232 * tgetpass.c: works now :-)
19234 1994-06-05 18:27 millert
19236 * tgetpass.c: Initial revision
19238 1994-06-05 17:17 millert
19240 * pathnames.h.in: added /dev/tty
19242 1994-06-04 17:12 millert
19244 * version.h: incremented
19246 1994-06-04 15:29 millert
19248 * sudo.c: always use getcwd
19250 1994-06-04 14:49 millert
19252 * config.h.in: added check for getwd
19254 1994-06-04 14:48 millert
19256 * configure.in: replace strdup & realpath & getcwd if missing
19258 1994-06-04 14:47 millert
19260 * pathnames.h.in: added _PATH_PWD
19262 1994-06-04 14:46 millert
19264 * aclocal.m4: added SUDO_PROG_PWD
19266 1994-06-04 14:37 millert
19268 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19270 1994-06-03 11:31 millert
19272 * configure.in: quoted quare brackets
19274 1994-06-02 17:49 millert
19276 * sudo.c: no need to strdup() a constant
19278 1994-06-02 15:45 millert
19282 1994-06-02 15:44 millert
19284 * sudo.man: added validate
19286 1994-06-02 15:42 millert
19288 * sudo.c: added -v to usage
19290 1994-06-02 15:41 millert
19292 * parse.c, sudo.c, sudo.h: added validate_only stuff
19294 1994-05-29 21:29 millert
19296 * configure.in: now finds sed
19298 1994-05-29 21:28 millert
19300 * aclocal.m4: $OSREV is now an int
19302 1994-05-29 19:13 millert
19304 * configure.in: added mtxinu to caser
19306 1994-05-29 18:37 millert
19308 * sudo.h: added EXEC macro
19310 1994-05-29 18:36 millert
19312 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19315 1994-05-29 18:36 millert
19317 * logging.c: changed mail_argv[] def now use EXEC() macro
19319 1994-05-29 18:35 millert
19321 * check.c: took out crypt() definition
19323 1994-05-29 17:23 millert
19325 * version.h: upped the version
19327 1994-05-29 15:52 millert
19329 * configure.in: always look for -lnsl
19331 1994-05-29 15:29 millert
19333 * aclocal.m4: added an echo
19335 1994-05-29 15:25 millert
19337 * sudo.h: SHORT_MESSAGE is now the default
19339 1994-05-29 15:18 millert
19341 * config.h.in: fixed typo
19343 1994-05-29 01:29 millert
19345 * configure.in: added missing AC_DEFINE(SVR4) for solaris
19347 1994-05-28 20:42 millert
19349 * sudo.man: documented the -v flag
19351 1994-05-28 20:34 millert
19353 * SUPPORTED: updated
19355 1994-05-28 20:31 millert
19357 * check.c: proto-ized crypt()
19359 1994-05-28 20:28 millert
19361 * config.h.in: added LIBSHADOW undef
19363 1994-05-28 20:18 millert
19365 * configure.in: nwo set OS to be lowercase
19367 1994-05-28 19:36 millert
19369 * configure.in: now use SUDO_OSTYPE to set $OS
19371 1994-05-28 19:36 millert
19373 * aclocal.m4: now use uname to determine os
19375 1994-05-28 16:23 millert
19377 * visudo.c: added prototypes & moved sig handler around
19379 1994-05-28 15:13 millert
19381 * sudo.h: added prototyppes
19383 1994-05-28 15:13 millert
19385 * parse.c: added comment
19387 1994-05-28 15:12 millert
19389 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19391 1994-05-28 15:11 millert
19393 * check.c, logging.c, sudo.c: added prototypes
19395 1994-05-28 15:11 millert
19397 * aixcrypt.exp: Initial revision
19399 1994-05-28 15:11 millert
19401 * Makefile.in: added aixcrypt.exp
19403 1994-05-28 13:21 millert
19405 * parse.lex, parse.yacc: moved config.h to top of includes
19407 1994-05-25 15:48 millert
19409 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19411 1994-05-24 23:08 millert
19413 * visudo.c: added -v flag and usage()
19415 1994-05-24 23:08 millert
19417 * version.h: fixed a typo
19419 1994-05-24 23:08 millert
19421 * sudo.c: cast Argv to a const for exec added -v flag
19423 1994-05-24 23:07 millert
19425 * logging.c: mail_argv is now a const
19427 1994-05-24 23:07 millert
19429 * configure.in: only set RETSIGTYPE if it is not set already
19431 1994-05-24 23:07 millert
19433 * aclocal.m4: now defines & STDC_HEADERS for Irix
19435 1994-05-24 23:07 millert
19437 * Makefile.in: added version.h
19439 1994-05-24 21:25 millert
19441 * insults.h, sudo.h: prevent multiple inclusion
19443 1994-05-24 21:20 millert
19445 * version.h: Initial revision
19447 1994-05-24 21:09 millert
19449 * parse.lex, parse.yacc: now includes config.h
19451 1994-05-24 20:54 millert
19453 * aclocal.m4: now talks about sunos 4.x
19455 1994-05-24 20:23 millert
19457 * visudo.c: calls to Exit now pass an arg
19459 1994-05-24 18:00 millert
19461 * visudo.c: signal handler now takes an int argument
19463 1994-05-24 18:00 millert
19467 1994-05-24 17:44 millert
19469 * sudo.c: ok, the getcwd() is now *really* done as the user
19471 1994-05-24 17:44 millert
19473 * configure.in: changed AIX STATIC_FLAGS
19475 1994-05-24 16:27 millert
19477 * aclocal.m4: solaris now defines SVR4
19479 1994-05-24 16:18 millert
19481 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19484 1994-05-24 16:18 millert
19486 * sudo.c: moved getcwd stuff into load_globals
19488 1994-05-24 16:18 millert
19490 * parse.c: took out externs that are in suod.h
19492 1994-05-24 16:18 millert
19494 * logging.c: moved cwd into load_globals
19496 1994-05-24 16:17 millert
19498 * find_path.c: moved cwd stuff
19500 1994-05-24 15:55 millert
19502 * Makefile.in: fixed make distclean & realclean
19504 1994-05-24 12:51 millert
19508 1994-05-24 12:51 millert
19510 * CHANGES: added solaris changes
19512 1994-05-24 12:51 millert
19514 * aclocal.m4: added solaris changes, need to rework
19516 1994-05-24 12:50 millert
19518 * configure.in: cleaned up for solaris
19520 1994-05-24 12:13 millert
19522 * logging.c: reinstall reapchild signal handler for non-bsd signals
19524 1994-05-24 12:03 millert
19526 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19529 1994-05-24 12:03 millert
19531 * sudo.c: support for HAVE_SYSCONF
19533 1994-05-24 12:02 millert
19535 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19536 minor prettying up /
19538 1994-05-23 20:26 millert
19540 * config.h.in: added HAVE_SYSCONF
19542 1994-05-16 18:57 millert
19544 * configure.in: now tells you what os you are running /.
19546 1994-05-16 18:56 millert
19548 * aclocal.m4: took out extra ','
19550 1994-05-14 17:56 millert
19552 * config.h.in: added _BSD_COMPAT
19554 1994-05-14 17:56 millert
19556 * aclocal.m4: fixed for irix5
19558 1994-05-14 17:55 millert
19562 1994-05-14 17:27 millert
19564 * sudo.c: uid seinitialized to -2
19566 1994-04-28 12:36 millert
19568 * sudo.c: now removes LIBPATH for AIX
19570 1994-03-12 20:41 millert
19572 * configure.in: now uses ufc if it finds it
19574 1994-03-12 17:42 millert
19576 * sudo.h: no longer define yyval & yylval since yacc does it
19578 1994-03-12 17:42 millert
19580 * parse.lex: now defines yylval as extenr
19582 1994-03-12 17:41 millert
19584 * configure.in: BROKEN_GETPASS is now an OPTION
19586 1994-03-12 17:41 millert
19588 * config.h.in: took out BROKEN_GETPASS
19590 1994-03-12 17:20 millert
19592 * Makefile.in: took out big comment
19594 1994-03-12 16:24 millert
19598 1994-03-12 16:20 millert
19600 * Makefile.in: took out README.beta
19602 1994-03-12 16:19 millert
19604 * SUPPORTED: Initial revision
19606 1994-03-12 16:19 millert
19608 * INSTALL: now reference SUPPORTED .,
19610 1994-03-12 16:17 millert
19612 * config.h.in: now check for convex OR __convex__
19614 1994-03-12 16:16 millert
19616 * aclocal.m4: now check for convex or __convex__
19618 1994-03-12 16:15 millert
19620 * Makefile.in: added dist target
19622 1994-03-12 15:19 millert
19624 * aclocal.m4: use __convex__
19626 1994-03-12 14:33 millert
19628 * find_path.c: now use _S_* stat stuff to be ansi-like
19630 1994-03-12 14:11 millert
19632 * INSTALL: updated for configure directions
19634 1994-03-12 14:05 millert
19636 * Makefile.in: distclean now removes config.h and pathnames.h
19638 1994-03-12 14:03 millert
19642 1994-03-12 14:00 millert
19644 * TODO: fixed typoe
19646 1994-03-12 13:57 millert
19648 * Makefile.in, visudo.c: updated version
19650 1994-03-12 13:57 millert
19652 * config.h.in, pathnames.h.in: added copyright header
19654 1994-03-12 13:55 millert
19656 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19657 parse.yacc, sudo.c, sudo.h: udpated version
19659 1994-03-12 13:39 millert
19661 * visudo.c: udpated to use configure + pathnames.h
19663 1994-03-12 13:37 millert
19665 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19667 1994-03-12 13:37 millert
19669 * sudo.h: now works with configure
19671 1994-03-12 13:36 millert
19673 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19674 updated to work with configure + pathnames.h
19676 1994-03-12 10:40 millert
19678 * Makefile.in: added LEXLIB
19680 1994-03-10 03:18 millert
19682 * COPYING: updated gnu general licence to versio 2
19684 1994-03-10 02:44 millert
19686 * pathnames.h.in, config.h.in: Initial revision
19688 1994-03-10 01:43 millert
19690 * sudo.h: changed to work with configure
19692 1994-03-09 18:51 millert
19694 * Makefile.in, aclocal.m4, configure.in: Initial revision
19696 1994-03-09 17:36 millert
19698 * visudo.c: now uses defines used by configure
19700 1994-03-01 16:31 millert
19702 * find_path.c: sudo won't bitch about EPERM now, for real
19704 1994-02-28 00:36 millert
19706 * logging.c: renamed exec_argv to eliminate a libc name clash with
19709 1994-02-28 00:28 millert
19711 * CHANGES: corrected
19713 1994-02-28 00:27 millert
19715 * logging.c, sudo.c, sudo.h: execve -> execv
19717 1994-02-27 23:27 millert
19721 1994-02-27 23:19 millert
19723 * PORTING: added 2 mroe items
19725 1994-02-27 23:12 millert
19729 1994-02-27 23:11 millert
19731 * sudo.h: added UMASK and mode_t declaration
19733 1994-02-27 23:11 millert
19735 * sudo.c: added UMASK
19737 1994-02-27 20:55 millert
19739 * logging.c: now opens log file with mode 077
19741 1994-02-27 20:55 millert
19743 * check.c: saved current umask ans restores it
19745 1994-02-27 20:36 millert
19747 * sudo.h: added MAXLOGFILELEN
19749 1994-02-27 20:35 millert
19751 * logging.c: split long log lines. FOr syslog, split into multiple
19752 entries, for a log file, indent the extra for readability
19754 1994-02-27 17:22 millert
19756 * CHANGES: added changes
19758 1994-02-27 17:18 millert
19760 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19763 1994-02-25 16:04 millert
19765 * TODO: added input from Brett M Hogden <hogden@rge.com>
19767 1994-02-16 13:35 millert
19769 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19770 execvp() OR execve() becuase of this.
19772 1994-02-16 13:35 millert
19774 * logging.c: now uses execvp() OR execve()
19776 1994-02-16 13:31 millert
19778 * sudo.h: added USE_EXECVE
19780 1994-02-16 13:27 millert
19782 * sudo.h: added environ
19784 1994-02-16 12:53 millert
19786 * find_path.c: now ignore EPERM
19788 1994-02-15 23:52 millert
19790 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19793 1994-02-15 23:52 millert
19797 1994-02-15 23:40 millert
19799 * sudo.h: took out Envp
19801 1994-02-14 12:28 millert
19803 * BUGS: Initial revision
19805 1994-02-10 14:29 millert
19807 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19809 1994-02-10 14:05 millert
19811 * sudo.h: added SECURE_PATH
19813 1994-02-10 13:50 millert
19815 * INSTALL: added sample.sudoers note
19817 1994-02-10 13:47 millert
19819 * sudoers: Initial revision
19821 1994-02-09 14:54 millert
19823 * find_path.c: fixed typo
19825 1994-02-08 23:06 millert
19827 * PORTING: took out SAVED_UID garbage
19829 1994-02-08 22:55 millert
19831 * INSTALL: mentioned HAL
19833 1994-02-08 22:50 millert
19835 * sudo.h: added HAL line
19837 1994-02-08 22:48 millert
19839 * insults.h: added HAL insults
19841 1994-02-08 22:48 millert
19845 1994-02-08 22:02 millert
19847 * logging.c: more verbose error if mailer not found
19849 1994-02-08 22:02 millert
19851 * check.c: now do getpwent as root for soem shadow password systems
19854 1994-02-08 13:22 millert
19856 * sudo.h: took out SAVED_UID garbade
19858 1994-02-08 13:21 millert
19860 * sudo.c: took out SAVED_UID garbage since it don't work
19862 1994-02-06 17:43 millert
19866 1994-02-06 17:40 millert
19868 * insults.h: added a missing space :-)
19870 1994-02-05 19:48 millert
19872 * sudo.c, sudo.h: took out multimax cruft
19874 1994-02-05 19:30 millert
19876 * INSTALL: minor update
19878 1994-02-05 19:30 millert
19880 * PORTING: finished
19882 1994-02-05 19:19 millert
19884 * sudo.c: fixed a typo + indentation
19886 1994-02-05 18:43 millert
19888 * sudo.h: took outumoved some defines to the config file ,. ,.
19890 1994-02-05 15:17 millert
19892 * PORTING: Initial revision
19894 1994-02-05 15:17 millert
19898 1994-02-05 15:16 millert
19900 * sudo.h: added HAS_SAVED_UID
19902 1994-02-05 15:16 millert
19904 * sudo.c: put back AIX cruft
19906 1994-02-03 00:44 millert
19908 * sudo.c: aix changes
19910 1994-02-02 01:31 millert
19914 1994-02-02 01:30 millert
19916 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19919 1994-02-01 22:21 millert
19921 * check.c: added missing %s\n
19923 1994-01-31 02:06 millert
19925 * install-sh: Initial revision
19927 1994-01-31 01:58 millert
19929 * CHANGES, TODO: updated
19931 1994-01-31 01:56 millert
19933 * sudo.c: now removed _RLD_* for alphas
19935 1994-01-31 01:50 millert
19937 * INSTALL: updated for new config scheme
19939 1994-01-30 19:42 millert
19941 * find_path.c: more verbose eror messages
19943 1994-01-27 14:08 millert
19945 * TODO: now have solaris
19947 1994-01-27 14:07 millert
19949 * sudo.h: define __svr4__ for SOLARIS
19951 1994-01-27 14:07 millert
19953 * check.c: added svr4 junk for shadow pws for solaris 2.x
19955 1994-01-27 13:19 millert
19957 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19958 Its not needed since we start out setuid with the correct perms.
19960 1994-01-26 19:51 millert
19962 * check.c, sudo.c, sudo.h: now use setreuid()
19964 1994-01-26 18:58 millert
19966 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19969 1994-01-26 18:52 millert
19971 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19973 1994-01-26 18:52 millert
19975 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19978 1993-12-07 01:33 millert
19980 * README: minor update + spell fix
19982 1993-12-07 01:33 millert
19984 * INSTALL: rewrote most of this
19986 1993-12-07 01:13 millert
19988 * sudo.h: added all options that are in the Makefile
19990 1993-12-07 00:23 millert
19992 * getpass.c: now use USE_TERMIO #define for sgi & hpux
19994 1993-12-06 23:19 millert
19996 * TODO: todo: posix sigs
19998 1993-12-06 01:12 millert
20000 * check.c, find_path.c: always include strings.h
20002 1993-12-05 20:34 millert
20004 * visudo.c: added STATICEDITOR
20006 1993-12-05 20:30 millert
20008 * sudo.h: sgi has vi in /usr/bin too
20010 1993-12-05 20:23 millert
20012 * sudo.man: added VISUAL
20014 1993-12-02 22:20 millert
20016 * sudo.h: sue /usr/bin/vi on some systems
20018 1993-12-02 22:19 millert
20020 * sudo.c: fixed warning (include strings.h)
20022 1993-12-02 22:06 millert
20024 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
20027 1993-12-02 21:38 millert
20029 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
20031 1993-12-02 21:35 millert
20033 * visudo.c: added EDITOR envar
20035 1993-12-02 21:34 millert
20037 * check.c, find_path.c, parse.c, sudo.c: added patches from
20038 John_Rouillard directory spec uses EDITOR
20040 1993-12-01 19:32 millert
20042 * getpass.c: added flush for hpux
20044 1993-11-30 13:37 millert
20046 * sudo.c: no longer assume malloc returns a char *
20048 1993-11-29 20:35 millert
20050 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
20051 stuff -- now gets removed correctly
20053 1993-11-29 19:31 millert
20055 * sudo.h: added STD_HEADERS macro
20057 1993-11-29 19:14 millert
20059 * sudo.c: now uses STD_HEADERS macor for ansi
20061 1993-11-29 19:14 millert
20063 * find_path.c: now uses STD_HEADERS macro
20065 1993-11-29 19:13 millert
20067 * check.c: niceties for C compiler bitches -- no real change
20069 1993-11-29 13:04 millert
20071 * visudo.c: now doesn't fclose a file never opened.
20073 1993-11-28 16:35 millert
20075 * sudo.man: added visudo line
20077 1993-11-28 16:31 millert
20079 * sudo.man: added error stuff added me in there...
20081 1993-11-28 03:12 millert
20083 * CHANGES: noted insults
20085 1993-11-28 03:01 millert
20087 * INSTALL: added blurb about reading stuff
20089 1993-11-28 03:00 millert
20091 * sudo.h: added insults
20093 1993-11-28 03:00 millert
20095 * insults.h: corrected somments and removed newlines
20097 1993-11-28 03:00 millert
20099 * check.c: now uses insults
20101 1993-11-28 02:45 millert
20103 * insults.h: Initial revision
20105 1993-11-27 19:46 millert
20107 * INSTALL: added dec syslog note
20109 1993-11-27 19:25 millert
20111 * sample.sudoers: added real stuff in there
20113 1993-11-27 19:24 millert
20115 * TODO: added a todo
20117 1993-11-27 19:10 millert
20121 1993-11-27 18:59 millert
20123 * sample.sudoers: Initial revision
20125 1993-11-27 18:59 millert
20127 * sudo.man: updated with changes
20129 1993-11-27 18:52 millert
20131 * sudo.man: Initial revision
20133 1993-11-27 18:48 millert
20135 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20138 1993-11-27 18:46 millert
20140 * visudo.c: updated version number and took out jeff's old addr
20141 since it is no good
20143 1993-11-27 18:42 millert
20145 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20146 parse.yacc, sudo.c: updated version number and took out jeff's
20147 email (since it is invalid)
20149 1993-10-28 09:36 millert
20151 * check.c: added fflush()
20153 1993-10-22 20:46 millert
20155 * find_path.c: now return NULL instead pf
\b\bof exiting for
20156 nopn
\b\bn-fatal errors
20158 1993-10-21 16:57 millert
20160 * check.c: new banner
20162 1993-10-21 16:42 millert
20164 * parse.lex: now sudo.h gets included first
20166 1993-10-17 20:31 millert
20168 * parse.lex: now can use flex
20170 1993-10-17 20:31 millert
20172 * sudo.h: linux patch
20174 1993-10-17 20:30 millert
20176 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20178 1993-10-17 20:30 millert
20180 * check.c: linux diff
20182 1993-10-15 16:03 millert
20184 * find_path.c: stat now ignores EINVAL
20186 1993-10-05 21:48 millert
20188 * find_path.c, sudo.c: now declare strdup as extern
20190 1993-10-04 15:23 millert
20192 * visudo.c: reformatted with indent + by hand
20194 1993-10-04 15:10 millert
20196 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20197 sudo.h: used indent to "fix" coding style
20199 1993-10-03 20:12 millert
20201 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20202 LAST should maybe move the code that does this into the loop
20203 body. makes it messier tho. hmmm.
20205 1993-09-08 11:53 millert
20207 * find_path.c: redid the fix for non-executable files in an easier
20208 to read way plus some minor aethetic changes
20210 1993-09-08 11:39 millert
20212 * find_path.c: fixed bug with non-executable tings of same name in
20213 path introduced by checkig errno after stat(2).
20215 1993-09-05 10:02 millert
20217 * sudo.c: fixed off by one error
20219 1993-09-05 09:55 millert
20221 * find_path.c: now handles decending below '/' correctly
20223 1993-09-05 08:35 millert
20225 * sudo.c: now actually builds Envp instead of munging envp
20227 1993-09-04 15:42 millert
20229 * parse.yacc: now includes sys/param.h
20231 1993-09-04 15:41 millert
20233 * visudo.c: now includes sys/param.h
20235 1993-09-04 15:30 millert
20237 * sudo.h: fixed ifndef -> ifdef
20239 1993-09-04 15:19 millert
20241 * qualify.c: make more like find_path.c
20243 1993-09-04 15:18 millert
20245 * find_path.c: rewritten by millert
20247 1993-09-04 15:17 millert
20249 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20250 added info about new defines in the comment
20252 1993-09-04 15:15 millert
20254 * logging.c: now uses USE_CWD
20256 1993-09-04 14:10 millert
20258 * sudo.h: added delc for clean_envp() and Envp
20260 1993-09-04 14:09 millert
20262 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20265 1993-09-04 14:09 millert
20267 * logging.c: now uses execve()
20269 1993-09-04 14:08 millert
20271 * find_path.c: ENOTDIR is ok now too (in case part of the path is
20274 1993-09-04 08:17 millert
20276 * qualify.c: now works correctly (ttaltotal rewrite)
20278 1993-09-04 07:59 millert
20280 * parse.lex: now includes sys/param.h didn't match trailing / --
20281 fix from rouilj@cs.umb.edu
20283 1993-06-11 18:04 millert
20285 * sudo.c: moved around the #ifndef _AIX
20287 1993-06-11 18:03 millert
20289 * check.c, logging.c, parse.c: Initial revision
20291 1993-03-20 07:57 millert
20293 * qualify.c: Initial revision
20295 1993-03-13 15:09 millert
20297 * find_path.c: now works if you do sudo bin/test
20299 1993-03-13 14:20 millert
20301 * find_path.c: works
20303 1993-03-02 18:28 millert
20305 * sudo.h: Initial revision
20307 1993-03-02 11:35 millert
20309 * visudo.c: Initial revision
20311 1993-03-02 11:32 millert
20313 * parse.lex, parse.yacc: Initial revision
20315 1993-02-16 13:24 millert
20317 * sudo.c: took out errno.h
20319 1993-02-16 13:22 millert
20321 * sudo.c: now spews error if exec fails and exits with -1
20323 1993-02-16 12:07 millert
20325 * sudo.c: Initial revision
20327 1993-02-15 22:27 millert
20329 * find_path.c: now only execs files with (an) executable bit set.
20331 1993-02-15 22:01 millert
20333 * find_path.c: Initial revision
20335 1993-02-15 14:32 millert
20337 * getpass.c: added nice comment
20339 1993-02-15 14:19 millert
20341 * getpass.c: now works on sgi's
20343 1993-02-15 13:57 millert
20345 * getpass.c: Initial revision