X-Git-Url: https://git.gag.com/?a=blobdiff_plain;f=ChangeLog;h=f4ebc2f0508de00e7e2342da7850e025aad6aa3d;hb=25c851c5ff2282c253e980b1e299752688f16f63;hp=5eaab26fc822c5cfb535778bdd4e5b73ea67903e;hpb=7a01b10fee894dea7ecb3252886912eab41e9693;p=debian%2Fsudo diff --git a/ChangeLog b/ChangeLog index 5eaab26..f4ebc2f 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,1115 @@ +2011-10-25 Todd C. Miller + + * plugins/sudoers/Makefile.in: + check_addr needs to link with the network libraries on Solaris + [322bd70e316e] + + * plugins/sudoers/match.c: + When matching a RunasAlias for a runas group, pass the alias in as + the group_list, not the user_list. From Daniel Kopecek. + [766545edf141] + + * plugins/sudoers/check.c, plugins/sudoers/sudoers.c: + We need to init the auth system regardless of whether we need a + password since we will be closing the PAM session in the monitor + process. Fixes a crash in the monitor on Solaris; bugzilla #518 + [e82809f86fb3] + +2011-10-21 Todd C. Miller + + * .hgtags: + Added tag SUDO_1_8_3 for changeset 82bec4d3a203 + [6c953ef6f577] <1.8> + + * Update Japanese sudoers translation from translationproject.org + [82bec4d3a203] [SUDO_1_8_3] <1.8> + +2011-10-12 Todd C. Miller + + * configure, configure.in: + Override and ignore the --disable-static option. Sudo already runs + libtool with -tag=disable-static where applicable and we need non- + PIC objects to build the executables. + [dff177464029] <1.8> + +2011-10-10 Todd C. Miller + + * NEWS: + Add sudoedit fix + [3238dc7e4fb2] <1.8> + + * plugins/sudoers/po/sudoers.pot: + regen pot files + [7981d6cbf1ab] <1.8> + + * Ignore set_logname (which is now the default) for sudoedit since we + want the LOGNAME, USER and USERNAME environment variables to refer + to the calling user since that is who the editor runs as. This + allows the editor to find the user's startup files. Fixes bugzilla + #515 + [3b9486e5fddb] <1.8> + + * Instead of trying to grow the buffer in make_grlist_item(), simply + increase the total length, free the old buffer and allocate a new + one. This is less error prone and saves us from having to adjust + all the pointers in the buffer. This code path is only taken when + there are groups longer than the length of the user field in struct + utmp or utmpx, which should be quite rare. + [cb7c5ac834b5] <1.8> + + * Add Italian translation for sudo from translationproject.org + [c7876fccbc38] <1.8> + + * NEWS: + Japanese translation for sudo and sudoers from + translationproject.org + [9945a3ef7ff7] <1.8> + +2011-10-07 Todd C. Miller + + * sudoreplay depends on timestr.lo too; from Mike Frysinger + [ad9ae493205f] <1.8> + +2011-10-04 Todd C. Miller + + * plugins/sudoers/po/sudoers.pot: + Regen sudoers pot file. + [2c4d99361994] <1.8> + + * NEWS: + Update with latest sudo 1.8.3 news + [4e7f59d339d4] <1.8> + + * ldap_start_tls_s() on Debian (at least) sets the effective and saved + uids to the same value as the real uid. This prevents sudo from + setting the uid or gid later on. As a workaround, we now set perms + to root during sudoers_policy_open(). + [eb4c4f15833a] <1.8> + + * Better warning message on setuid() failure for the setreuid() + version of set_perms(). + [308c72f601e4] <1.8> + +2011-10-02 Todd C. Miller + + * NEWS: + Combine new translations in NEWS item + [0aa07471a5e6] <1.8> + +2011-09-27 Todd C. Miller + + * Delref auth_pw at the end of check_user() instead of getting a ref + twice. + [1c882f2fb46c] <1.8> + + * Make sudo_auth_{init,cleanup} return TRUE on success and check for + sudo_auth_init() return value in check_user(). + [573bf35ecac9] <1.8> + + * Do not return without restoring permissions. + [2444a0b96469] <1.8> + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + regen pot files + [d286bce8dbb1] <1.8> + + * NEWS: + Update for latest release candidate + [63d184ba6263] <1.8> + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + regen pot files + [ac3ec1315df7] <1.8> + + * Modify the authentication API such that the init and cleanup + functions are always called, regardless of whether or not we are + going to verify a password. This is needed for proper PAM session + support. + [ea281ca46d94] <1.8> + + * Add missing dependency for getspwgen other depends. + [9c124272910d] <1.8> + + * Fix a PAM_USER mismatch in session open/close. We update PAM_USER + to the target user immediately before setting resource limits, which + is after the monitor process has forked (so it has the old value). + Also, if the user did not authenticate, there is no pamh in the + monitor so we need to init pam here too. This means we end up + calling pam_start() twice, which should be fixed, but at least the + session is always properly closed now. + [d0866ee5f190] <1.8> + + * Add check for old being NULL in utmp_setid(); from Steven McDonald + [30cc283ac2b4] <1.8> + +2011-09-25 Todd C. Miller + + * If the invoking user cannot be resolved by uid fake the struct + passwd and store it in the cache so we can delref it on exit. + [19d44f44d45d] <1.8> + +2011-09-24 Todd C. Miller + + * Don't error out if the group plugin cannot be loaded, just warn. + [e91d9912c9a0] <1.8> + +2011-09-23 Todd C. Miller + + * Quiet a false positive found by several static analysis tools. These + tools don't know that log_error() does not return (it longjmps to + error_jmp which returns to the sudo front-end). + [3cc319e31ed6] <1.8> + +2011-09-22 Todd C. Miller + + * Add Italian translation for sudo from translationproject.org Regen + .mo files + [c0b27f9d7e57] <1.8> + + * .hgtags: + Added tag SUDO_1_8_2 for changeset 3682e51af1d0 + [f0be566e9ea2] <1.8> + +2011-09-21 Todd C. Miller + + * Update to current reality and add bit about ssh auth + [48dcb86ce9be] <1.8> + + * Make "verbose" static; fixes a namespace clash with + pam_ssh_agent_auth (and it doesn't need to be extern these days). + [b60fdd82de94] <1.8> + + * configure, configure.in: + FreeBSD has libutil.h not util.h + [c03b121e0193] <1.8> + + * configure, configure.in: + Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD + [002e3e0bb173] <1.8> + + * Update po files from translationproject.org + [2b36af902213] <1.8> + +2011-09-16 Todd C. Miller + + * NEWS: + Mention DEREF support + [dfeb152f1686] <1.8> + + * plugins/sudoers/po/sudoers.pot: + sync pot files + [1fba22e927a3] <1.8> + + * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in: + Add support for DEREF in ldap.conf. + [fe1cf6ad0add] <1.8> + + * Makefile.in: + install target should depend on ChangeLog too, not just install-doc + [f54e2ab633b8] <1.8> + + * NEWS, configure.in, doc/sudoers.cat, doc/sudoers.man.in: + Only iolog_file (not iolog_dir) supports mktemp-style suffixes. + [44a25099594e] <1.8> + + * configure.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + regen pot files + [e14ee85cf49b] <1.8> + + * configure, configure.in: + Fix some square brackets in case statements that needed to be + doubled up. While here, use $OSMAJOR when it makes sense. + [853c6e5f994c] <1.8> + + * Fix a crash in make_grlist_item() on 64-bit machines with strict + alignment. + [e877c89ae32f] <1.8> + + * Remove list_options() function that is no longer used now that "sudo + -L" is gone. + [f31543c80b98] <1.8> + + * configure, configure.in: + Error message if user tries --with-CC + [0ed7558b8924] <1.8> + + * configure, configure.in: + Check for -libmldap too when looking for ldap libs, which is the + Tivoli Directory Server client library. + [831e32d1453c] <1.8> + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + regen pot files for 1.8.3 + [df2fb085cff2] <1.8> + + * NEWS, configure, configure.in, doc/sudo.cat, doc/sudo.man.in, + doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat, + doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, + doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat, + doc/visudo.man.in: + Update for version 1.8.3 + [38cf153add0a] <1.8> + +2011-09-09 Todd C. Miller + + * Honor NOPASSWD tag for denied commands too. + [f473c443ad54] <1.8> + + * INSTALL, configure, configure.in: + Remove --with-CC option; it doesn't work correctly now that we use + libtool. Users can get the same effect by setting the CC + environment variable when running configure. + [4f04869d74fd] <1.8> + +2011-08-31 Todd C. Miller + + * configure, configure.in: + Assume all modern systems support fstat(2). + [0422b19dced3] <1.8> + +2011-08-30 Todd C. Miller + + * configure, configure.in: + Add configure test for missing errno declaration and only declare it + ourselves if it is missing. + [6d26974f7e16] <1.8> + + * Include errno.h before sudo.h to avoid conflicting with the system + definition of errno. + [8000bdc0968f] <1.8> + +2011-08-29 Todd C. Miller + + * Only print individual check status when there is a failure. + [bbdd669e7615] <1.8> + + * Add calls to setprogname() for test programs. + [c721f3466a3a] <1.8> + + * configure, configure.in: + Add -Wall and -Werror after all tests so they don't cause failures. + [20d75ce40086] <1.8> + + * Actually run check_addr in the check target + [dcd96ef0dc57] <1.8> + + * Split out address matching into its own file and add regression + tests for it. + [863f28589c24] <1.8> + +2011-08-27 Todd C. Miller + + * Fix matching a network number with netmask when the network number + is not the first address in the CIDR block. + [719942c986e9] <1.8> + +2011-08-26 Todd C. Miller + + * Don't assume all editors support the +linenumber command line + argument, use a whitelist of known good editors. + [d8d884af3b05] <1.8> + +2011-08-23 Todd C. Miller + + * Silence compiler warnings on Solaris with gcc 3.4.3 + [8047cdb5d6a1] <1.8> + + * Fix building on RHEL 3 + [6bb0464a7450] <1.8> + + * INSTALL, configure, configure.in: + Add --enable-werror configure option. + [aa40fd459836] <1.8> + + * setgroups() proto lives in grp.h on RHEL4, perhaps others. + [92f98cbaebf0] <1.8> + + * configure, configure.in: + Use PAM by default on AIX 6 and higher. + [7ef53d5ac819] <1.8> + +2011-08-22 Todd C. Miller + + * Add new Esperanto translation from translationproject.org + [109ed683b885] <1.8> + +2011-08-19 Todd C. Miller + + * Quiet an innocuous valgrind warning. + [fc453e49f9dd] <1.8> + +2011-08-18 Todd C. Miller + + * Fix expansion of strftime() escapes in log_dir and add a regress + test that exhibited the problem. + [784e60d21f11] <1.8> + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + Fix "make check" return value. + [d3608efd8da6] <1.8> + +2011-08-17 Todd C. Miller + + * plugins/sudoers/po/sudoers.pot: + Regen pot files + [3682e51af1d0] [SUDO_1_8_2] <1.8> + + * Makefile.in: + Fix logic inversion in pot file up to date check. + [343dbbca9422] <1.8> + + * doc/sudo.cat, doc/sudo.man.in, doc/sudoers.cat, + doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, + doc/visudo.cat, doc/visudo.man.in: + regen docs + [96234478bde2] <1.8> + +2011-08-15 Todd C. Miller + + * configure, configure.in: + Add caching for gettext() checks. + [4039d21424c3] <1.8> + + * configure, configure.in: + Better handling of libintl header and library mismatch. + [cc9faee8e486] <1.8> + +2011-08-14 Todd C. Miller + + * NEWS: + sync + [73649a44d934] <1.8> + +2011-08-13 Todd C. Miller + + * Also check sudoers gid if sudoers is group writable. + [3d345347f6ac] <1.8> + + * NEWS: + Update for 1.8.2 final + [441c22fea363] <1.8> + +2011-08-12 Todd C. Miller + + * configure, configure.in: + If dlopen is present but libtool doesn't find it, error out since it + probably means that libtool doesn't support the system. + [6fc7c0de4f6d] <1.8> + + * configure args on the command line should override builtin defaults. + Disable NLS for non-Linux/Solaris unless explicitly enabled. + [0ef165f892c2] <1.8> + + * Fix loop that calls authenticate(). If there was an error message + from authenticate(), display it. + [f0686011ff2e] <1.8> + +2011-08-11 Todd C. Miller + + * configure, configure.in: + Update to autoconf 2.68 and libtool 2.4 + [00df5f3647e1] <1.8> + + * Fix typo; OPT should be OTP + [31da1f989740] <1.8> + + * Rename libsudoers convenience library to libparsesudoers to avoid + libtool confusion. + [e9ae9d611dd5] <1.8> + +2011-08-10 Todd C. Miller + + * Add Danish sudoers translation from translationproject.org + [fa9cd9758249] <1.8> + + * Add dedicated callback function for runas_default sudoers setting + that only sets runas_pw if no runas user or group was specified by + the user. + [3fb4b18525de] <1.8> + +2011-08-09 Todd C. Miller + + * Update Finish, Polish, Russian and Ukrainian translations from + translationproject.org. + [0fcd8f6aff0a] <1.8> + + * Makefile.in: + Go back to using a callback for runas_default to keep runas_pw in + sync. This is needed to make per-entry runas_default settings work + with LDAP-based sudoers. Instead of declaring it a callback in + def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a + bit naughty, but avoids requiring stub functions in visudo and the + tests. + [4e8e70832f06] <1.8> + +2011-08-05 Todd C. Miller + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + Regen pot files + [ca5c58c599a6] <1.8> + + * Makefile.in: + Add check for out of date message catalogs when doing "make dist". + [36414e5c762b] <1.8> + +2011-08-02 Todd C. Miller + + * configure, configure.in: + Make sure compiler supports static-libgcc before using it. + [6c98e8809291] <1.8> + +2011-08-01 Todd C. Miller + + * Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc + [a0a3a3fa6470] <1.8> + +2011-07-30 Todd C. Miller + + * Add new Russian sudo translation from translationproject.org and + rebuild the other translation files. + [e953d7d1ca6d] <1.8> + +2011-07-29 Todd C. Miller + + * Update Finish and Polish translations from translationproject.org + [17e408d73c85] <1.8> + + * Go back to escaping the command args for "sudo -i" and "sudo -s" + before calling the plugin. Otherwise, spaces in the command args + are not treated properly. The sudoers plugin will unescape non- + spaces to make matching easier. + [f666191a4e80] <1.8> + +2011-07-28 Todd C. Miller + + * Fix some potential problems found by the clang static analyzer, none + serious. + [c1ab4b940980] <1.8> + + * Updated Ukranian and Chinese (simplified) po files from + translationproject.org + [792a66672715] <1.8> + +2011-07-27 Todd C. Miller + + * Updated Polish translation from translationproject.org + [5f434cc04482] <1.8> + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + Rebuild pot files + [639230dbd741] <1.8> + + * Don't try to audit failure if the runas user does not exist. We + don't have the user's command at this point so there is nothing to + audit. Add a NULL check in audit_success() and audit_failure() just + to be on the safe side. + [2bfb96a32b00] <1.8> + + * Add -g to CFLAG for PIE builds. + [e4c94977ca4e] <1.8> + +2011-07-25 Todd C. Miller + + * Remove fallback to per-group lookup when matching groups in sudoers. + The sudo front-end will now use getgrouplist() to get the user's + list of groups if getgroups() fails or returns zero groups so we + always have a list of the user's groups. For systems with + mbr_check_membership() which support more that NGROUPS_MAX groups + (Mac OS X), skip the call to getgroups() and use getgrouplist() so + we get all the groups. + [168d6d4a386b] <1.8> + +2011-07-22 Todd C. Miller + + * Fix setgroups() fallback code on EINVAL. + [dd1310945ab3] <1.8> + + * Fix two PERM_INITIAL cases that were still using user_gids. + [d497d0d47a23] <1.8> + + * Add Polish sudo message catalog + [1a0aa3f9f179] <1.8> + + * user_group is no longer used, remove it + [379185a76094] <1.8> + +2011-07-21 Todd C. Miller + + * Add Polish translation from translationproject.org + [2e7cdfe4ef41] <1.8> + + * Add a wrapper for setgroups() that trims off extra groups and + retries if setgroups() fails. Also add some missing addrefs for + PERM_USER and PERM_FULL_USER. + [bacb4170a510] <1.8> + + * configure, configure.in: + Instead of keeping separate groups and gids arrays, create struct + group_info and use it to store both, along with a count for each. + Cache group info on a per-user basis using getgrouplist() to get the + groups. We no longer need special to special case the user or list + user for user_in_group() and thus no longer need to reset the groups + list when listing another user. + [f1d8962821a0] <1.8> + + * Don't rely on NULL since we don't include a header for it. + [ed46286f848b] <1.8> + + * Fix typo + [a38b8fbb0e70] <1.8> + + * Do not shadow global sudo_mode with a local variable in set_cmnd() + [8e462ebafea4] <1.8> + +2011-07-17 Todd C. Miller + + * bash 2.x doesd not support the -l flag and exits with an error if it + is specified so use --login instead. This causes an error with bash + 1.x (which uses -login instead) but this version is hopefully less + used than 2.x. + [73020a67b9d5] <1.8> + + * Add Polish translation from translationproject.org + [8cac0da9ffb1] <1.8> + +2011-07-13 Todd C. Miller + + * Make error strings translatable. + [d1ff594f27b5] <1.8> + + * Only run configure with --with-pam-login for RHEL 5 and above. + [2f1a0ff5230e] <1.8> + + * Fix typo in summary + [1e1d7dcae9ab] <1.8> + +2011-07-11 Todd C. Miller + + * Add missing logwrap.c + [abcd28c194d2] <1.8> + + * Split out log file word wrap code into its own file and add unit + tests. Fixes an off-by one in the word wrap when the log line + length matches loglinelen. + [0ae1c7aa9ef1] <1.8> + +2011-07-05 Todd C. Miller + + * For SuSE, only use /usr/lib64 as libexec if generating 64-bit + binaries. + [4448fa1c639f] <1.8> + + * Fix build error when --without-noexec configure option is used. + [f6bfd748ae45] <1.8> + + * configure, configure.in: + Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX + 5.3 and above. + [9d957ae1840d] <1.8> + +2011-07-03 Todd C. Miller + + * NEWS, doc/UPGRADE: + Document group lookup change and possible side effects. + [fe4b2d2701b2] <1.8> + +2011-07-01 Todd C. Miller + + * Resolve the list of gids passed in from the sudo frontend (the + result of getgroups()) to names and store both the group names and + ids in the sudo_user struct. When matching groups in the sudoers + file, match based on the names in the groups list first and only do + a gid-based match when we absolutely have to. By matching on the + group name (as it is listed in sudoers) instead of id (which we + would have to resolve) we save a lot of group lookups for sudoers + files with a lot of groups in them. + [c10d208bd7e5] <1.8> + +2011-06-29 Todd C. Miller + + * NEWS: + Update for 1.8.2rc5 + [f6a3aa2edf7a] <1.8> + +2011-06-26 Todd C. Miller + + * Workaround for "sudo -i command" and newer versions of bash which + don't go into login mode when -c is specified unless -l is too. + [381e74d35006] <1.8> + +2011-06-23 Todd C. Miller + + * Rewrite logfile word wrapping code to be more straight-forward and + actually wrap at the correct place. + [8a7862d6a82f] <1.8> + +2011-06-22 Todd C. Miller + + * NEWS: + Fix typo + [2456ad2ad3e3] <1.8> + + * NEWS: + Mention use_pty bug fix + [f4eab5193452] <1.8> + + * Set use_pty=true in command details when use_pty is set in sudoers. + From Ludwig Nussel + [abaafc5793d9] <1.8> + +2011-06-20 Todd C. Miller + + * Sync Chinese (simplified) PO files from translationproject.org + [a4cf84dd9ddf] <1.8> + +2011-06-18 Todd C. Miller + + * Add Danish translation from translationproject.org and add missing + Basque mo files. + [672b88adcc34] <1.8> + + * Makefile.in, configure, configure.in: + No longer need to specify LINGUAS in configure, "make install-nls" + now just installs all the .mo files it finds. + [c226a39ece48] <1.8> + +2011-06-17 Todd C. Miller + + * Build CONTRIBUTORS from newly-added contributors.pod + [b8871dd293ff] <1.8> + + * Rework the wording in the leading paragraph + [d8b081dedeb3] <1.8> + +2011-06-16 Todd C. Miller + + * Add a CONTRIBUTORS file with the names of folks who have contributed + code or patches to sudo since I started maintaining it (plus the + original authors). + [8b064e8996af] <1.8> + +2011-06-13 Todd C. Miller + + * Preserve SHELL variable for "sudo -s". Otherwise we can end up with + a situation where the SHELL variable and the actual shell being run + do not match. + [8f5bb61a8b76] <1.8> + +2011-06-10 Todd C. Miller + + * configure, configure.in: + Only enable Solaris project support when setproject() is present in + libproject. + [bf370ff3c194] <1.8> + + * Explicitly set mode and owner of /etc/sudoers instead of relying on + "cp -p" to work in the postinstall script. On AIX 6.1 at least the + postinstall script runs before the final file permissions are set. + [7a4a87405349] <1.8> + + * Refer the user to the "Command Environment" section in description + of sudo's -i option. + [1a063eaf9670] <1.8> + + * Fix typo + [442c50370c44] <1.8> + + * If there is no old dependency for an object file, use the MANIFEST + to find its source. + [d95c77ad283f] <1.8> + + * Remove dependency for getgrouplist.lo as we don't ship that source + file. + [bbede77e6256] <1.8> + + * Do not declare yyparse() static as the actual function generated by + yacc is extern. + [8e615bd15a4c] <1.8> + + * Makefile.in: + Remove locale files in "make uninstall" + [9791be90d5ac] <1.8> + +2011-06-06 Todd C. Miller + + * configure.in: + Add Basque translation and sync Finish and Ukranian translations. + [64af34789164] <1.8> + + * NEWS: + Update PAM change to reflect latest checkin. + [657cddf2077a] <1.8> + + * configure, configure.in: + FreeBSD no longer needs the main sudo binary to link with -lpam now + that plug-ins are loaded with RTLD_GLOBAL. + [573a6f4b29af] <1.8> + + * Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes + problems with pam modules not having access to symbols provided by + libpam on some platforms. Affects FreeBSD and SLES 10 at least. + [4ec864fdba46] <1.8> + + * Makefile.in: + Move xgettext invocation out of update-po target into update-pot + [421ac1a073ea] <1.8> + +2011-06-04 Todd C. Miller + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + Regenerate .pot files for 1.8.2rc2 + [d2a891e3d3dd] <1.8> + + * Makefile.in: + Move nls targets to the top level Makefile so the paths in the pot + file are saner + [6c256cb77f78] <1.8> + + * NEWS: + Update 1.8.2 news + [17bd04278b04] <1.8> + + * Add compiled version of sudo Finish translation + [ff9d20a02aa0] <1.8> + + * Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo + files + [60c4f3b3829c] <1.8> + + * configure, configure.in: + Add Finish translation from translationproject.org + [ade788a35521] <1.8> + + * The group named by exempt_group should not have a % prefix. + [1f74c691c1e1] <1.8> + + * Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin" + [58d36c0e76f9] <1.8> + + * Fix compressed io log corruption in background mode by using _exit() + instead of exit() to avoid flushing buffers twice. + + Improved background mode support. When not allocating a pty, the + command is run in its own process group. This prevents write access + to the tty. When running in a pty, stdin is not hooked up and we + never read from /dev/tty, which results in similar behavior. + [fe50d6a5c5b9] <1.8> + +2011-05-31 Todd C. Miller + + * Clean up regress files Generate proper dependencies for regress objs + in compat + [264196584549] <1.8> + + * Add missing dependency for check_fill.o. + [c41f4e6ff078] <1.8> + +2011-05-30 Todd C. Miller + + * INSTALL, configure, configure.in: + Add support for --enable-nls[=location] + [0ea8e7bd1739] <1.8> + +2011-05-28 Todd C. Miller + + * Include gettext.h + [fe8bab6403c6] <1.8> + + * Quiet gcc warnings. + [aa16d09710a7] <1.8> + + * configure, configure.in: + Don't install .mo files if gettext was not found. + [c6b233e829aa] <1.8> + +2011-05-27 Todd C. Miller + + * Always allocate a pty when running a command in the background but + call setsid() after forking to make sure we don't end up with a + controlling tty. + [77c6b2923714] <1.8> + + * Add missing space between command name and the first command line + argument. + [d0a36b9c0f38] <1.8> + + * Quiet a compiler warning on some platforms. + [654e76cf0574] <1.8> + + * README file that directs people to translationproject.org + [5545e9a5ae37] <1.8> + + * Sync translations with TP + [b054ce577022] <1.8> + + * Makefile.in: + Add 'sync-po' target to top-level Makefile to rsync the po files + from translationproject.org. + [87a5011b0410] <1.8> + + * install nls files from install target + [a3feba9ef323] <1.8> + + * Makefile.in: + Include .mo files in sudo binary packags. + [bc3ee7e7fb44] <1.8> + + * configure, configure.in: + Add simplified chinese translation + [c22e6842c766] <1.8> + +2011-05-26 Todd C. Miller + + * configure, configure.in: + Add ukranian translation + [0bb9e6437f0f] <1.8> + + * refer to siglist.c, not ./siglist.c since not all makes will treat + foo and ./foo the same. + [909051ff6061] <1.8> + + * Set def_preserve_groups before searching for the command when the -P + flag is specified. + [08e9378f50e4] <1.8> + + * Makefile.in: + Add dependency for siglist.lo in compat. This is a generated file + so "make depend" needs to depend on it. + [e6c0daf36af0] <1.8> + + * More dependency fixes. + [7fed03624689] <1.8> + + * Fix a few dependencies. + [7cb86c721961] <1.8> + + * Place compiled mo files in the src dir, not the build dir. When + installing compiled mo files, display a status message. + [b87aa18a9968] <1.8> + +2011-05-25 Todd C. Miller + + * Tivoli Directory Server requires that seconds be present in a + timestamp, even though RFC 4517 states that they are optional. + [47ebf110ea7a] <1.8> + + * Add missing bit of copyright + [d05d28a91bc4] <1.8> + + * Mention cycle detection warnings + [ee8231aa1aed] <1.8> + + * When checking aliases, also check the contents of the alias in case + there are problems with an alias that is referenced inside another. + Replace the self reference check with real alias cycle detection. + [abcfe1bc95d8] <1.8> + + * Set errno to ELOOP in alias_find() if there is a cycle. Set errno to + ENOENT in alias_find() and alias_remove() if the entry could not be + found. + [e73d169f4e9b] <1.8> + + * Increment alias_seqno before calls to alias_remove_recursive() to + avoid false positives with the alias loop detection. Fixes spurious + warnings about unused aliases when they are nested. + [ac094820ef19] <1.8> + + * add mkdep.pl + [3721e9654ba6] <1.8> + + * Add dependency on convenience libs to binaries + [8a4db8226dfe] <1.8> + + * Makefile.in: + mkdep.pl only works when run from the src dir + [2480427a0680] <1.8> + + * Makefile.in: + Auto-generate Makefile dependencies with a perl script. + [ef5f56907d97] <1.8> + +2011-05-23 Todd C. Miller + + * If the user specifies a runas group via sudo's -g option that + matches the runas user's group in the passwd database and that group + is not denied in the Runas_Spec, allow it. Thus, if user root's gid + in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if + no groups are present in the Runas_Spec. + [942e1e7c5090] <1.8> + +2011-05-22 Todd C. Miller + + * NEWS: + Mention what is new in 1.8.2 (for now) + [d44b26eceee5] <1.8> + + * Add dependencies on gettext.h + [32c61c6af852] <1.8> + + * Fix install-nls target with HP-UX sh when gettext is not present. + [3441cece9638] <1.8> + + * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat, + doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat, + doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat, + doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: + Regen for sudo 1.8.2 + [9ea124b542cc] <1.8> + +2011-05-20 Todd C. Miller + + * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: + regenerate .pot files for lbuf changes + [a8a9cc62c3a5] <1.8> + + * configure, configure.in: + Add missing "checking" message for gettext when using the cache. + [4136bc346576] <1.8> + + * Add primitive format string support to the lbuf code to make + translations simpler. + [22fc74618d09] <1.8> + + * configure, configure.in, plugins/sudoers/po/sudoers.pot, + src/po/sudo.pot: + Bump version to 1.8.2 + [999de1ac5b3e] <1.8> + + * Add message catalog template files for sudo and the sudoers module. + [6afad75e7afa] <1.8> + + * configure.in: + Add gettext.h convenience header. This is similar to but distinct + from the one included with the gettext package. + [5ae5a86e0d06] <1.8> + + * configure, configure.in: + Add checks for nroff -c and -Tascii flags + [580c21905280] <1.8> + + * configure, configure.in: + Add check for HP bundled C Compiler (which cannot create shared + libs) + [34f616cbb0f3] <1.8> + + * Fix C format warnings. + [f20a43a817f0] <1.8> + + * Add __printflike + [76bf8a4bf075] <1.8> + + * Translate help / usage strings. + [16c5b7902d4c] <1.8> + + * Set --msgid-bugs-address to the bugzilla url + [3e3cfa7b4ceb] <1.8> + + * INSTALL, Makefile.in, README, configure, configure.in: + Add scaffolding to update .po files and install .mo files. + [a51e60b35e47] <1.8> + + * Minor warning/error cleanup + [593144ac87ff] <1.8> + + * configure.in: + Emulate ngettext for the non-nls case + [7cdf82de4dee] <1.8> + + * Do not mark untranslatable strings for translation + [088271ed02d0] <1.8> + + * Use ROOT_UID not 0. + [f901fa2fdaf2] <1.8> + + * Minor warning/error message cleanup + [b99c7ef46236] <1.8> + + * cannot -> "unable to" in warning/error messages can't -> "unable to" + in warning/error messages + [5119140fabc7] <1.8> + + * configure, configure.in: + FreeBSD needs the main sudo executable to link with -lpam when + loading dynaic pam modules for some reason. + [738b6778a505] <1.8> + + * We don't want to translate debugging messages. + [357a575c2dfd] <1.8> + + * configure, configure.in: + Add calls to bindtextdomain() and textdomain() Currently there are + two domains, one for the sudo front-end and one for the sudoers + plugin and its associated utilities. + [907f39439d80] <1.8> + + * configure, configure.in: + Fix caching of libc gettext check. + [e229c21f412f] <1.8> + + * Mark defaults descriptions for translation + [65e03d1f8203] <1.8> + + * NEWS: + Update for sudo 1.8.1p2 + [89c31f2aa11e] <1.8> + + * Quiet compiler warning when SELinux is enabled. + [51b1d7c8aa86] <1.8> + + * dd missing includes of libintl.h. + [25662143d36d] <1.8> + + * Fix gettext marker. + [7618856ba5de] <1.8> + + * Include libint.h where needed. + [cc256b297b9d] <1.8> + + * Prepare sudoers module messages for translation. + [1b7f0bbaa55f] <1.8> + + * Only check gid of sudoers file if it is group-readable. + [f3cae943f35a] <1.8> + + * For AIX, keep calling authenticate() until reenter reaches 0. + [e412676bac73] <1.8> + + * configure, configure.in: + Cache the status of the initial gettext() check. + [c32281768c0f] <1.8> + + * INSTALL, configure, configure.in: + Add --disable-nls flag and improve checks for gettext. + [b39674c1e538] <1.8> + + * configure, configure.in: + When building with gcc on HP-UX, use -march=1.1 to produce portable + binaries on a pa-risc2 host. Previously, the +Dportable option was + used for the HP-UX C compiler but gcc always produced native + binaries. + [41351c23ad41] <1.8> + + * Prepare sudo front end messages for translation. + [7807d6f74dac] <1.8> + + * configure, configure.in: + Add initial scaffolding to support localization via gettext() + [cdbbff7e6376] <1.8> + +2011-05-19 Todd C. Miller + + * doc/license.pod: + update copyright year + [d681661f03cc] <1.8> + + * INSTALL, README: + No need to include version number at the top of these files. + [7e11f673f773] <1.8> + + * README: + This is sudo 1.8.1 not 1.8.0 + [4d674f230d8a] <1.8> + 2011-05-04 Todd C. Miller * Don't let the fnmatch/glob macros expand the function prototype.