1 2008-12-14 17:40 millert
5 2008-12-09 18:48 millert
7 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
8 enters ^C at the password prompt.
10 2008-12-09 16:13 millert
12 * configure.in, configure: Don't try to build sudo_noexec.so on
13 HP-UX with the bundled compiler as it cannot generate shared
16 2008-12-09 15:55 millert
18 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
21 2008-12-09 08:49 millert
23 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
24 it clear that we are not short-circuiting on last match. When
25 pwcheck is 'all', initialize nopass to TRUE and override it with
26 the first non-TRUE entry.
28 2008-12-08 10:02 millert
30 * parse.c: Do not short circuit pseudo commands when we get a match
31 since, depending on the settings, we may need to examine all
34 2008-12-03 15:58 millert
36 * sudoers.cat, sudoers.man.in: regen
38 2008-12-03 15:57 millert
40 * sudoers.pod: hostnames may also contain wildcards
42 2008-12-03 15:40 millert
44 * Makefile.in: remove stamp-* files and linux core files in clean
47 2008-12-02 12:30 millert
49 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
50 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
52 2008-11-26 15:10 millert
54 * configure, configure.in: correctly enable SIA on Digital UNIX
56 2008-11-25 20:06 millert
60 2008-11-25 20:05 millert
64 2008-11-25 12:01 millert
66 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
67 ttys we may still have /dev/tty available to us.
69 2008-11-24 10:09 millert
71 * sudoers.cat, sudoers.man.in: regen
73 2008-11-24 10:08 millert
75 * sudoers.pod: fix typos; Markus Lude
77 2008-11-24 07:08 millert
81 2008-11-23 19:42 millert
85 2008-11-23 19:41 millert
87 * toke.l: Fix matching of a line that only consists of a comment
90 2008-11-22 13:17 millert
92 * auth/pam.c: MacOS pam will retry conversation function if it
93 fails so just treat ^C as an empty password.
95 2008-11-22 10:12 millert
97 * visudo.c: When checking for alias use, also check defaults
100 2008-11-22 10:01 millert
102 * redblack.c: unused var
104 2008-11-22 09:42 millert
106 * redblack.c: Replace my rbdelete with Emin's version (which
109 2008-11-19 12:01 millert
111 * testsudoers.c: malloc debugging
113 2008-11-19 07:37 millert
115 * visudo.c: malloc options in devel mode for visudo too
117 2008-11-18 10:57 millert
119 * sudo.c: fix compilation on non-C99; from Theo
121 2008-11-18 10:50 millert
123 * visudo.c: fix check_aliases
125 2008-11-18 08:29 millert
127 * alias.c: when destroying an alias, free the correct data pointer
129 2008-11-18 07:54 millert
131 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
133 2008-11-15 13:34 millert
135 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
138 2008-11-15 13:34 millert
140 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
141 'option' for command line options (not flag)
143 2008-11-14 06:18 millert
145 * INSTALL: Add note on configuring HP-UX pam
147 2008-11-11 13:28 millert
149 * check.c, sudo.c: Move tty checks into check_user() so we only do
150 them if we actually need a password.
152 2008-11-11 12:34 millert
154 * sudo.c: Don't error out if no tty or askpass unless we actually
155 need to authenticate.
157 2008-11-10 15:20 millert
161 2008-11-10 08:07 millert
163 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
166 2008-11-09 15:18 millert
168 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
170 2008-11-09 09:15 millert
172 * gram.c, toke.c: regen
174 2008-11-09 09:13 millert
176 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
177 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
178 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
179 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
180 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
181 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
182 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
183 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
184 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
185 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
186 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
189 2008-11-09 08:48 millert
191 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
193 2008-11-08 10:40 millert
195 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
196 far past the end, resulting in a NUL being written immediately
197 after the buffer end.
199 2008-11-08 10:31 millert
201 * UPGRADE, WHATSNEW: add sections on tgetpass changes
203 2008-11-08 10:30 millert
205 * tgetpass.c: Treat EOF w/o newline as an error.
207 2008-11-07 17:42 millert
209 * parse.c: Fix "sudo -v" when NOPASSWD is set.
211 2008-11-07 12:45 millert
213 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
214 longer treat an empty password at the prompt as special. To quit
215 out of sudo you now need to hit ^C at the password prompt.
217 2008-11-06 21:07 millert
219 * sudoers.cat, sudoers.man.in: regen
221 2008-11-06 21:06 millert
223 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
224 will now refuse to run if no tty is present unless the new
225 visiblepw sudoers flag is set.
227 2008-11-05 19:42 millert
229 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
230 RLIM_SAVED_MAX not defined
232 2008-11-05 19:40 millert
234 * aix.c: fix fallback value for RLIM_SAVED_MAX
236 2008-11-05 19:14 millert
238 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
241 2008-11-05 19:08 millert
243 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
244 authenticate() as it may not be correct for the user we are
245 running the command as.
247 2008-11-05 19:05 millert
249 * isblank.c: Add isblank() function for systems without it. Needed
250 for POSIX character class matching in fnmatch.c and glob.c.
252 2008-11-05 11:02 millert
254 * TROUBLESHOOTING: expound on sudo and cd
256 2008-11-04 15:52 millert
260 2008-11-04 15:46 millert
262 * sudoers.cat, sudoers.man.in: regen
264 2008-11-04 15:45 millert
266 * sudoers.pod: mention defauts parse order
268 2008-11-03 13:19 millert
270 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
271 function for systems without it. Needed for POSIX character
272 class matching in fnmatch.c and glob.c.
274 2008-11-03 12:54 millert
276 * Makefile.in: add emul/charclass.h to HDRS
278 2008-11-02 14:08 millert
282 2008-11-02 14:06 millert
284 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
285 update_defaults into defaults.c and call it properly from visudo
288 2008-11-02 09:51 millert
290 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
291 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
294 2008-11-02 09:45 millert
296 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
297 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
298 has non-standard entries.
300 2008-11-02 09:35 millert
304 2008-11-02 09:28 millert
306 * match.c: Short circuit glob() checks if basename(pattern) !=
307 basename(command). Refactor code that checks for a command in a
308 directory and use it in the glob case if the resolved pattern
311 2008-11-01 09:20 millert
313 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
314 setting runas defaults until after runaspw/gr is setup.
316 2008-10-29 13:26 millert
318 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
319 allocating host/domain name since some systems do not include
320 space for the NUL in the size. Also manually NUL-terminate
321 buffer from gethostname() since POSIX is wishy-washy on this.
323 2008-10-26 17:13 millert
325 * sudo.c, sudoers.pod: When setting the umask, use the union of the
326 user's umask and the default value set in sudoers so that we
327 never lower the user's umask when running a command.
329 2008-10-26 16:43 millert
331 * sudo.c: Don't try to read from a zero-length sudoers file.
332 Remove the bogus Solaris work-around for EAGAIN. Since we now
333 use fgetc() it should not be a problem.
335 2008-10-25 09:22 millert
337 * parse.c: In update_defaults() check the return value of
338 user*_matches against ALLOW so we don't inadvertantly match on
341 2008-10-24 09:52 millert
343 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
344 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
345 regen man pages; no more hyphenation
347 2008-10-24 09:49 millert
349 * sudo.c: Don't error out on a zero-length sudoers file. With the
350 advent of #include the user could create a situation where sudo
353 2008-10-23 12:06 millert
355 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
356 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
357 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
358 Add configure tests to handle all the cases.
360 2008-10-08 17:28 millert
362 * sudo.pod: resort ENVIRONMENT
364 2008-10-08 17:09 millert
366 * sudoers.pod: document sudoers_locale
368 2008-10-08 16:56 millert
370 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
371 uses in preference to VISUAL or EDITOR
373 2008-10-08 14:27 millert
375 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
376 sudo-specific characters. Allows character classes to be used in
379 2008-10-03 16:02 millert
381 * lbuf.c: fix typo in non-C89 function declaration
383 2008-10-03 15:56 millert
385 * sudoers.pod: Mention POSIX characters classes now that out
386 fnmatch() and glob() support them.
388 2008-10-03 15:55 millert
390 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
391 UTF8) with [A-Za-z] which is locale agnostic.
393 2008-10-03 10:02 millert
395 * parse.h: use __signed char if we are going to assign a negative
396 value since on Power, char is unsigned by default
398 2008-10-03 09:59 millert
400 * configure, configure.in, config.h.in: Add tests for __signed char
403 2008-10-03 09:19 millert
405 * aix.c: Fix AIX limit setting. getuserattr() returns values in
406 disk blocks rather than bytes. The default hard stack size in
407 newer AIX is RLIM_SAVED_MAX. From Dale King.
409 2008-09-26 17:13 millert
411 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
412 to included glob(3) and fnmatch(3).
414 2008-09-16 08:28 millert
416 * emul/fnmatch.h: Remove UCB advertising clause and some
417 compatibility defines.
419 2008-09-14 16:07 millert
421 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
422 re-invoking itself or sudo. This allows one to set EDITOR to
423 sudoedit without getting into an infinite loop of sudoedit
424 running itself until the path gets too big.
426 2008-09-13 20:45 millert
428 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
429 sudoers_locale Defaults option to override the default sudoers
432 2008-09-13 14:09 millert
434 * sudo.c: Set locale to system default except for during sudoers
437 2008-09-12 09:34 millert
439 * match.c: Redo change in 1.34 to use pointer arithmetic.
441 2008-09-11 07:06 millert
443 * match.c: Fix a dereference (read) of a freed pointer. Reported
446 2008-08-23 19:09 millert
448 * sudo.c: Set locale to "C" to avoid interpretation issues with
449 character ranges in sudoers. May want to make the locale a
450 sudoers option in the future.
452 2008-08-20 07:45 millert
454 * config.h.in: we no longer use setproctitle
456 2008-08-20 07:41 millert
458 * sudo.h: remove #if 1
460 2008-08-20 07:40 millert
462 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
465 2008-07-12 08:53 millert
467 * gram.c: regen with yacc skeleton bug fixed
469 2008-07-12 08:48 millert
471 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
473 2008-07-02 06:27 millert
475 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
476 passwd entry used for running commands as a uid not listed in the
477 passwd database. Fixes an issue with some PAM modules.
479 2008-07-01 07:57 millert
481 * sudo.c: Error out in -i mode if the user has no shell. This can
482 happen when running commands as a uid with no password entry.
484 2008-06-26 07:49 millert
486 * toke.c, toke.l: Better fix for line continuation inside double
487 quotes. Now accepts whitespace between the backslash and the
488 newline like the main lexer.
490 2008-06-25 14:31 millert
492 * toke.c, toke.l: Fix line continuation in strings. It was only
493 being honored if preceded by whitespace.
495 2008-06-22 16:19 millert
497 * config.h.in, configure, configure.in, logging.c: Replace the
498 double fork with a fork + daemonize.
500 2008-06-21 14:59 millert
502 * env.c, sudo.c: The -i flag should imply env_reset. This got
503 broken in sudo 1.6.9.
505 2008-06-20 20:34 millert
507 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
508 is waited for. Instead of having a SIGCHLD handler, use the
509 double fork trick to orphan the child that opens the pipe to
510 sendmail. Fixes a problem running su on some Linux distros.
512 2008-06-20 17:16 millert
514 * configure, configure.in: Fix configure test for dirfd() on Linux
517 2008-06-17 17:42 millert
519 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
520 QNX still has this problem we'll need to revisit this again.
522 2008-06-10 21:13 millert
524 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
525 the mailer. If we only block the signal it may be delivered
526 later when we unblock. Also, there is no need to block SIGCHLD
527 since we no longer do the double fork. The normal SIGCHLD
528 handler is sufficient.
530 2008-06-08 17:37 millert
532 * configure, configure.in: Add description for NO_PAM_SESSION, from
535 2008-06-06 09:36 millert
537 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
539 2008-05-18 13:54 millert
541 * configure, configure.in: Redo the test for dgettext() in a way
542 that hopefully will work around the libintl_dgettext() undefined
545 2008-05-11 09:21 millert
547 * schema.ActiveDirectory: change filename in comment
549 2008-05-10 09:18 millert
551 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
552 sudoers.ldap.pod: Reference schema.ActiveDirectory
554 2008-05-09 14:49 millert
556 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
558 2008-05-09 14:48 millert
560 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
562 2008-05-09 14:01 millert
564 * schema.ActiveDirectory: Active Directory schema by Chantal
565 Paradis and Eric Paquet
567 2008-05-08 17:54 millert
569 * parse.c: remove an XXX that was fixed
571 2008-05-08 12:53 millert
575 2008-05-08 12:49 millert
577 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
578 mode. This fixes a problem where the tag value printed was
579 influenced by defaults set in the first pass through the parser.
581 2008-05-03 21:29 millert
583 * Makefile.in, sudo.psf: No point in packaging the TODO file
585 2008-05-03 21:24 millert
589 2008-05-02 20:53 millert
591 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
592 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
593 Defaults option that is similar to /etc/environment on some
596 2008-05-02 16:38 millert
598 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
599 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
600 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
603 2008-05-02 16:37 millert
605 * UPGRADE: initial valgrind pass done
607 2008-04-23 08:30 millert
609 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
612 2008-04-11 10:03 millert
614 * ldap.c: define LDAPS_PORT if the system headers do not
616 2008-04-10 14:54 millert
618 * gram.c, gram.y: Fix another memory leak in init_parser().
620 2008-04-10 12:51 millert
622 * configure, configure.in: There was a missing space before the
623 ldap libs in SUDO_LIBS for some configurations.
625 2008-04-10 11:28 millert
627 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
628 leaks pointed out by valgrind.
630 2008-04-07 14:39 millert
632 * sudo.c: fix "sudo -s" broken by mode/flags breakout
634 2008-04-07 14:26 millert
636 * configure, configure.in: remove duplicate check for dgettext
638 2008-04-05 15:54 millert
640 * aix.c: Fall back to default stanza if no user-specific limit is
643 2008-04-02 15:56 millert
645 * snprintf.c: include stdint.h if present
647 2008-04-02 15:28 millert
649 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
651 2008-04-01 19:18 millert
653 * sudoers.ldap.pod: fix cut and pasto
655 2008-03-31 11:24 millert
657 * pwutil.c: Add #ifdef PURITY
659 2008-03-30 17:36 millert
661 * auth/bsdauth.c: remove useless cast
663 2008-03-27 19:07 millert
667 2008-03-27 19:04 millert
671 2008-03-27 19:01 millert
673 * sudo.h: Split MODE_* defines into primary and flags.
675 2008-03-26 13:11 millert
677 * aix.c: It turns out the logic for getting AIX limits is more
678 convoluted than I realized and differs depending on whether the
679 soft and/or hard limits are defined.
681 2008-03-23 10:18 millert
683 * Makefile.in, configure, configure.in: Back out AIX-specific
684 change to set the sudo_noexec path to the .a file, we do really
685 want to use the .so file. Since libtool doesn't do that
686 correctly, just install the .so file ourselves in the Makefile.
688 2008-03-23 10:12 millert
690 * install-sh: If the file given to install is a path, only use the
691 basename of the file when building the destination path.
693 2008-03-18 16:08 millert
695 * sudo.c: parse_args() cleanup: Sort command line options in the
696 getopt() switch The -U option requires a parameter Normalize a
697 few ISSET calls Split mode into mode and flags and retire the
698 now-obsolete excl variable
700 2008-03-18 16:04 millert
702 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
703 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
705 2008-03-18 15:59 millert
707 * sudo.c: Move version printing, etc. into a separate function.
709 2008-03-18 15:57 millert
711 * sudo.c: Don't try to cleanup nsswitch if it has not been
714 2008-03-17 11:09 millert
716 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
717 a problem executing the mailer.
719 2008-03-14 08:11 millert
721 * configure.in, configure: AIX shared libs end in .a, not .so.
723 2008-03-13 07:34 millert
725 * env.c: Preserve HOME by default too. Matches documentation and
728 2008-03-12 19:42 millert
730 * sudo.c: Use getopt() to parse the command line. We need to be
731 able to intersperse env variables and options yet still honor
732 "--"" which complicates things slightly.
734 2008-03-06 14:46 millert
738 2008-03-06 14:43 millert
740 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
742 2008-03-06 14:32 millert
744 * config.guess, config.sub: update from libtool-1.5.26 distribution
746 2008-03-06 13:18 millert
748 * aix.c, sudo.h: attempt to fix compilation errors on AIX
750 2008-03-06 13:08 millert
752 * Makefile.in: fix typo in last commit
754 2008-03-06 13:07 millert
756 * Makefile.in: Add WHATSNEW file to the distribution
758 2008-03-06 12:43 millert
760 * visudo.c: use warningx instead of fprintf(stderr, ...)
762 2008-03-06 12:31 millert
764 * list.c: add DEBUG to list2tq
766 2008-03-06 12:28 millert
768 * ChangeLog, TODO: sync
770 2008-03-06 12:21 millert
772 * WHATSNEW: mention mailfrom
774 2008-03-06 12:19 millert
776 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
777 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
778 using a combination of getuserattr() and setrlimit(). Currently
781 2008-03-05 16:52 millert
783 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
784 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
785 sets the value of the From: field in the warning/error mail. If
786 unset the login name of the invoking user is used.
788 2008-03-05 16:18 millert
790 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
793 2008-03-05 15:19 millert
795 * gram.c, gram.y: When adding a default, only call list2tq() once
796 to do the list to tq conversion. It is not legal to call list2tq
797 multiple times on the same list since list2tq consumes and
798 modifies the list argument.
800 2008-03-05 09:38 millert
802 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
805 2008-03-05 09:36 millert
807 * WHATSNEW: mention askpass
809 2008-03-04 17:20 millert
811 * sudo.c: Error out if both -A and -S are specified Error out if -A
812 is specified but no askpass is configured
814 2008-03-04 17:16 millert
816 * configure, configure.in: we are not going to ship a sudo-specific
819 2008-03-03 14:30 millert
821 * sudo.h: fix definition of TGP_ASKPASS
823 2008-03-03 13:54 millert
825 * def_data.c, def_data.in: make askpass boolean-capable
827 2008-03-03 13:53 millert
829 * INSTALL: document --with-askpass
831 2008-03-02 19:27 millert
833 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
834 sudoers.ldap.cat, visudo.cat: regen
836 2008-03-02 17:31 millert
838 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
840 2008-03-02 09:31 millert
842 * check.c, configure, configure.in, def_data.c, def_data.h,
843 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
844 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
845 running a helper program to read the password when no tty is
846 present (or when specified with the -A flag). TODO: docs.
848 2008-03-02 08:38 millert
850 * def_data.c, def_data.in: add missing printf format to SELinux
851 role and type strings
853 2008-02-27 09:26 millert
855 * INSTALL, configure, configure.in: Disable use of
856 gss_krb5_ccache_name() by default and add
857 --enable-gss-krb5-ccache-name configure option to enable it. It
858 seems that gss_krb5_ccache_name() doesn't work properly with some
859 combinations of Heimdal and OpenLDAP.
861 2008-02-22 15:33 millert
863 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
864 add a call to setkeycreatecon() (though this is probably
865 insufficient). From Dan Walsh.
867 2008-02-22 15:19 millert
869 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
870 conversation function may be called for non-password reading
871 purposes so we must be careful not to use def_prompt in cases
872 where it may not be set.
874 2008-02-20 12:00 millert
876 * selinux.c: Don't free the new tty context, we need to keep it
877 around when we restore the tty context after the command
880 2008-02-19 16:04 millert
882 * selinux.c: s/newrole/sudo/
884 2008-02-19 13:21 millert
886 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
887 if we have login.conf support
889 2008-02-18 11:05 millert
891 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
892 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
895 2008-02-18 10:53 millert
897 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
898 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
899 lines partaining to login.conf, BSD auth and SELinux and only
900 enable them if pertinent.
902 2008-02-18 10:42 millert
904 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
905 Remove the =cut on the first line (above the copyright notice) to
906 quiet pod2man. Also remove the hackery in the FILES section and
907 just deal with the fact that there will a newline between each
910 2008-02-17 08:19 millert
912 * Makefile.in: run sudo.man.pl when generating sudo.man.in
914 2008-02-17 08:11 millert
916 * configure, configure.in, sudo.man.pl: comment out SELinux manual
917 bits unless --with-selinux was specified
919 2008-02-17 08:04 millert
921 * sudoers.pod: document role and type defaults for SELinux
923 2008-02-16 20:26 millert
925 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
926 Document "sudo -ll" and make "sudo -l -l" be equivalent.
928 2008-02-15 15:23 millert
930 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
931 Fixes compilation problems on Debian GNU/kFreeBSD.
933 2008-02-13 17:17 millert
935 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
936 rewrite of verify_krb_v5_tgt()
938 2008-02-13 07:28 millert
940 * logging.c, logging.h, sudo.c: Remove dependence on
941 VALIDATE_NOT_OK in logging functions. Split log_auth() into
942 log_allowed() and log_denial() Replace mail_auth() with
943 should_mail() and a call to send_mail()
945 2008-02-10 18:06 millert
947 * ldap.c: Add debugging so we can tell if the krb5 ccache is
950 2008-02-10 17:34 millert
952 * INSTALL: mention --with-selinux
954 2008-02-09 09:48 millert
958 2008-02-09 09:43 millert
960 * selinux.c: add Sudo tag
962 2008-02-09 09:30 millert
964 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
965 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
966 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
967 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
968 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
969 toke.l: Add support for SELinux RBAC. Sudoers entries may
970 specify a role and type. There are also role and type defaults
971 that may be used. To make sure a transition occurs, when using
972 RBAC commands are executed via the new sesh binary. Based on
973 initial changes from Dan Walsh.
975 2008-02-08 08:18 millert
977 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
978 list (sudo -ll) support for printing verbose LDAP and sudoers
979 file entries. Still need to update manual.
981 2008-02-03 10:43 millert
983 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
984 output for file and ldap based sudoers and use lbufs for both.
985 The ldap output does not currently include options that cannot be
986 represented as tags. This will be remedied in a long list output
989 2008-01-27 16:37 millert
991 * set_perms.c: Use a specific error message for errno == EAGAIN
992 when setuid() et al fails. On Linux systems setuid() will fail
993 with errno set to EAGAIN if changing to the new uid would result
994 in a resource limit violation.
996 2008-01-27 16:34 millert
998 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
999 family of syscalls causes the nroc resource limit to be checked.
1000 The limits will be reset by pam_limits.so when PAM is used. In
1001 the non-PAM case the nproc limit will remain unlimited but there
1002 doesn't seem to be a way around that other than having sudo parse
1003 /etc/security/limits.conf directly.
1005 2008-01-27 16:31 millert
1007 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1010 2008-01-23 06:33 millert
1012 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1013 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1014 from going into config.h. Avoid single quotes in variable
1015 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1016 of bash they will end up literally in the resulting define.
1018 2008-01-21 13:22 millert
1020 * README.LDAP: mention --with-nsswitch=no
1022 2008-01-21 11:43 millert
1024 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1027 2008-01-21 11:07 millert
1029 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1030 if we can find it. Needed for the ldapssl_set_strength defines
1033 2008-01-21 10:02 millert
1035 * TODO, sudoers.ldap.pod: sync
1037 2008-01-21 10:01 millert
1039 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1040 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1043 2008-01-21 10:00 millert
1045 * Makefile.in: Use 78n line length when formatting cat pages.
1047 2008-01-21 09:50 millert
1049 * README.LDAP: Remove redundant info that is now in
1052 2008-01-20 16:18 millert
1054 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1055 Reorganize the first section a bit. Substitute the proper path
1058 2008-01-20 10:17 millert
1060 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1061 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1062 Move schema into EXAMPLES
1064 2008-01-20 10:15 millert
1066 * configure.in, configure: Substitute values for ldap.conf,
1067 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1069 2008-01-19 20:35 millert
1071 * configure, configure.in: substitute for sudoers.ldap.man
1073 2008-01-19 20:34 millert
1075 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1078 2008-01-19 20:25 millert
1080 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1081 some of the missing pieces. Still needs some reorganization and
1084 2008-01-19 15:06 millert
1086 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1087 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1088 Currently, much of the information is adapted from README.LDAP.
1090 2008-01-18 17:32 millert
1092 * pwutil.c: When copying gr_mem we must guarantee that the storage
1093 space for gr_mem is properly aligned. The simplest way to do
1094 this is to simply store gr_mem directly after struct group. This
1095 is not a problem for gr_passwd or gr_name as they are simple
1098 2008-01-18 16:47 millert
1100 * ldap.c: Fix a typo/thinko in one of the calls to
1101 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1103 2008-01-17 15:44 millert
1105 * config.h.in, configure, configure.in, ldap.c: include
1106 <mps/ldap_ssl.h> in ldap.c if available
1108 2008-01-16 18:20 millert
1110 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1113 2008-01-16 13:03 millert
1115 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1116 echo) to guarantee that any pending output is discarded
1118 2008-01-15 17:18 millert
1120 * sudoers: no longer need to specify SETENV when user has sudo ALL
1122 2008-01-15 09:40 millert
1124 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1125 group option, renaming old -g to -G Add set_runasgr() and
1126 set_runaspw() and use them
1128 2008-01-15 09:23 millert
1130 * sudo.h, sudo.c: Make set_runaspw static void
1132 2008-01-15 09:17 millert
1134 * testsudoers.c, visudo.c: g/c set_runaspw stub
1136 2008-01-15 07:28 millert
1138 * configure, configure.in: Don't add -llber twice.
1140 2008-01-14 06:40 millert
1144 2008-01-13 15:39 millert
1148 2008-01-13 14:57 millert
1150 * configure, configure.in: Fix check that determines whether -llber
1153 2008-01-13 14:22 millert
1155 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1156 netscape-based LDAP, use ldapssl_set_strength() to implement the
1157 checkpeer ldap.conf option.
1159 2008-01-13 09:49 millert
1161 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1162 to use the cred cache, which is what krb5_verify_user() does.
1163 Better cleanup on failure.
1165 2008-01-12 12:40 millert
1167 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1168 krb5_verify_user() does.
1170 2008-01-09 14:58 millert
1172 * gram.c: The U suffix on constants is an ANSI feature
1174 2008-01-09 12:08 millert
1176 * configure.in, configure: Add check for ber_set_option() in -llber
1178 2008-01-06 19:02 millert
1180 * README.LDAP: default if no nsswitch.conf is files only
1182 2008-01-06 17:28 millert
1184 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1186 2008-01-06 12:32 millert
1188 * README.LDAP: timelimit and bind_timelimit
1190 2008-01-06 08:54 millert
1194 2008-01-06 07:56 millert
1196 * ldap.c: Move ldap.secret reading into a separate function.
1198 2008-01-05 19:09 millert
1200 * check.c: user_runas -> runas_pw
1202 2008-01-05 18:59 millert
1206 2008-01-05 18:59 millert
1208 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1209 the password prompt. Based on a patch from Patrick Schoenfeld.
1211 2008-01-05 18:25 millert
1213 * ldap.c: Check strlcpy() return values.
1215 2008-01-05 18:12 millert
1217 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1219 2008-01-05 16:35 millert
1221 * README.LDAP: Make it clear that host and uri can take multiple
1222 parameters. URI is now supported for more than just openldap
1223 nsswitch.conf does't accept "compat"
1225 2008-01-05 16:27 millert
1227 * sudo.c: comment cleanup and update (c) year
1229 2008-01-05 16:25 millert
1231 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1232 parse.c to sudo_nss.c. This should make it possible to build an
1233 LDAP-only sudo binary.
1235 2008-01-05 13:27 millert
1237 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1238 multiple sudoers sources by passing in the previous return value
1239 to the next in the chain
1241 2008-01-05 13:26 millert
1243 * gram.y: Free up parser data structures in sudo_file_close().
1245 2008-01-05 08:13 millert
1247 * gram.c, parse.c: Free up parser data structures in
1250 2008-01-05 07:59 millert
1252 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1253 ldap_create() instead of deprecated ldap_init() Use
1254 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1256 2008-01-05 07:56 millert
1258 * config.h.in, configure, configure.in: Add check for
1259 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1261 2008-01-04 09:56 millert
1263 * configure.in, configure, config.h.in: add check for ldap_create
1265 2008-01-03 16:11 millert
1267 * config.h.in, configure, configure.in, ldap.c: Add
1268 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1269 dn using the mechanism appropriate for the LDAP SDK in use. Use
1270 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1271 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1274 2008-01-03 16:02 millert
1276 * lbuf.c: include unistd.h
1278 2008-01-03 11:05 millert
1280 * config.h.in, configure.in: fix typo in mtim_getnsec
1282 2008-01-02 15:29 millert
1284 * config.h.in, configure.in, configure: add check for st__tim in
1285 struct stat as used by SCO
1287 2008-01-02 11:05 millert
1289 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1291 2008-01-02 10:09 millert
1293 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1295 2008-01-01 19:04 millert
1297 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1298 ldap_str2dn() and ldap_rdn2str().
1300 2008-01-01 18:37 millert
1302 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1303 of the deprecated ldap_get_values()/ldap_value_free().
1305 2008-01-01 17:07 millert
1307 * TODO, ChangeLog: sync
1309 2008-01-01 17:06 millert
1311 * gettime.c, sudo.c: Remove some already fixed XXXs
1313 2008-01-01 17:03 millert
1315 * ldap.c: Same return value as non-existent sudoers if LDAP was
1318 2008-01-01 16:52 millert
1320 * sudo.pod: mention /etc/environment
1322 2008-01-01 16:42 millert
1324 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1327 2008-01-01 16:42 millert
1329 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1332 2008-01-01 16:25 millert
1334 * ldap.c: When building up a query don't list groups in the aux
1335 group vector that are the same as the passwd file group. On most
1336 systems the first gid in the group vector is the same as the
1339 2008-01-01 14:01 millert
1341 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1342 to disable user ldaprc and system defaults that could affect how
1345 2008-01-01 13:21 millert
1347 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1348 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1349 --with-nsswitch to allow users to specify nsswitch.conf path or
1350 disable it. If --with-nsswitch=no but --with-ldap, order is
1351 LDAP, then sudoers. Fix --with-ldap-conf-file and
1352 --with-ldap-secret-file
1354 2008-01-01 13:12 millert
1356 * parse.c: Honor def_ignore_local_sudoers
1358 2007-12-31 16:44 millert
1360 * ldap.c: no longer need to check def_ignore_local_sudoers here
1362 2007-12-31 16:36 millert
1364 * parse.c: Refactor group vector resetting into a function and also
1365 call it from display_cmnd. Stop after the first sucessful match
1366 in display_cmnd. Print a newline between each display_privs
1369 2007-12-31 16:23 millert
1371 * parse.c: fix double free introduced in rev 1.218
1373 2007-12-31 16:10 millert
1375 * ldap.c: belt and suspenders; zero out result after freeing it
1377 2007-12-31 15:04 millert
1379 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1380 reading into a separate function, sudo_parseln(), which removes
1381 comments, leading/trailing whitespace and newlines. May want to
1382 rethink the use of sudo_parseln() for /etc/ldap.secret
1384 2007-12-31 14:26 millert
1386 * parse.c, sudo.c: Make the inability to read the sudoers file a
1387 non-fatal error if there are other sudoers sources available.
1388 sudoers_file_lookup now returns "not OK" if sudoers was not
1391 2007-12-31 14:24 millert
1393 * ldap.c: make it clear that the global options are from LDAP
1395 2007-12-31 14:13 millert
1397 * logging.c: allocate proper amount of space for error string
1399 2007-12-31 10:24 millert
1401 * sudo_nss.c, sudo_nss.h: actual sudo nss code
1403 2007-12-31 10:08 millert
1405 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1408 2007-12-31 07:54 millert
1410 * defaults.c, parse.c, testsudoers.c, visudo.c: move
1411 update_defaults() to parse.c
1413 2007-12-31 07:39 millert
1415 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1416 Use nsswitch to hide some sudoers vs. ldap implementation details
1417 and reduce the number of #ifdef LDAP TODO: fix display routines
1420 2007-12-28 11:20 millert
1422 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
1423 First cut at nsswitch.conf support. Further reorganizaton and
1424 related changes are forthcoming.
1426 2007-12-21 16:53 millert
1428 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
1429 and /etc/environment file. Still needs to be documented and
1430 should probably only applies to OSes that have it (AIX and Linux,
1433 2007-12-21 16:20 millert
1435 * ldap.c: include limits.h
1437 2007-12-20 10:02 millert
1439 * WHATSNEW: reword LDAP SASL
1441 2007-12-19 16:40 millert
1445 2007-12-19 16:39 millert
1447 * README.LDAP: Add an example sudoRole, clarify netscape vs.
1450 2007-12-19 14:42 millert
1452 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
1454 2007-12-19 14:28 millert
1456 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
1457 for ldaps support instead of trying to do it manually with
1458 ldap_init() + ldapssl_install_routines(). Use tls_cert and
1459 tls_key for cert7.db and key3.db respectively. Don't print
1460 debugging info for options that are not set. Add warning if
1461 start_tls specified when not supported.
1463 2007-12-19 14:25 millert
1465 * ldap.c: fix compilation on solaris
1467 2007-12-19 14:23 millert
1469 * Makefile.in: add missing .h and .c files for missing lib objs
1471 2007-12-18 09:54 millert
1473 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
1475 2007-12-17 20:10 millert
1477 * ldap.c: fix compilation on Solaris
1479 2007-12-17 10:14 millert
1481 * configure, configure.in: fix typo
1483 2007-12-17 08:08 millert
1485 * README.LDAP: try to clear up which variables are for OpenLDAP and
1486 which are for netscape-derived SDKs
1488 2007-12-17 07:31 millert
1490 * config.h.in, configure, configure.in, ldap.c: Add support for
1491 "ssl on" in both netscape and openldap flavors. Only the
1492 OpenLDAP flavor has been tested.
1494 2007-12-17 07:28 millert
1496 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
1497 log_error() instead of calling sudo_ldap_close() directly.
1498 ldap_conn can now be static to sudo.c
1500 2007-12-16 20:02 millert
1502 * sudo.c: ld -> ldap_conn
1504 2007-12-16 14:42 millert
1506 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
1508 2007-12-16 14:08 millert
1510 * ldap.c: Distinguish between LDAP conf settings that are
1511 connection-specific (which take an ld pointer) and those that are
1512 default settings (which do not).
1514 2007-12-14 16:46 millert
1516 * ldap.c: Improved warnings on error.
1518 2007-12-14 15:59 millert
1520 * ldap.c: Make ldap config table driven and set the config *after*
1521 we open the connection.
1523 2007-12-13 16:41 millert
1525 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
1527 2007-12-13 09:13 millert
1529 * configure, configure.in: some operating systems need to link with
1530 -lkrb5support when using krb5
1532 2007-12-10 17:12 millert
1534 * WHATSNEW: minor update
1536 2007-12-10 10:56 millert
1538 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
1540 2007-12-07 19:17 millert
1542 * TODO, ChangeLog: sync
1544 2007-12-07 19:09 millert
1546 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
1549 2007-12-03 11:36 millert
1551 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
1552 can now take an optional command.
1554 2007-12-02 12:13 millert
1556 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
1557 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
1558 that will cause the prompt to be overridden in all cases. This
1559 flag is also set when the user specifies the -p flag.
1561 2007-12-01 19:51 millert
1563 * sudo.c: Move setting of login class until after sudoers has been
1564 parsed. Set NewArgv[0] for -i after runas_pw has been set.
1566 2007-12-01 19:34 millert
1568 * configure, configure.in: Move the dgettext check.
1570 2007-12-01 11:22 millert
1572 * config.h.in, configure, configure.in, auth/pam.c: Add basic
1573 support for looking up the string "Password: " in the PAM
1574 localized text db. This allows us to determine whether the PAM
1575 prompt is the default "Password: " one even if it has been
1578 TODO: concatenate non-std PAM prompts and user-specified sudo
1581 2007-11-27 18:40 millert
1583 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
1584 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
1585 home-grown attempt that was insufficient.
1587 2007-11-27 12:13 millert
1589 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
1592 2007-11-25 19:26 millert
1594 * set_perms.c: Don't assume runas_pw is set; it may not be in the
1597 2007-11-25 08:07 millert
1599 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
1600 restore group vector for PERM_ROOT if we previously changed it.
1601 Stash the runas group vector so we don't have to call initgroups
1602 more than once. Also add no-op check to check_perms.
1604 2007-11-21 15:11 millert
1606 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
1607 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
1608 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
1609 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
1610 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
1611 visudo.cat, visudo.man.in: Add support for runas groups. This
1612 allows the user to run a command with a different effective
1613 group. If the -g option is specified without -u the command will
1614 be run as the current user (only the group will change). the -g
1615 and -u options may be used together. TODO: implement runas group
1616 for ldap improve runas group documentation add
1619 2007-11-21 15:02 millert
1621 * configure, configure.in: fix setting of mandir
1623 2007-11-21 14:26 millert
1625 * sudo.pod, sudoers.pod: document that ALL implies SETENV
1627 2007-11-21 13:50 millert
1629 * ldap.c: s/setenv_ok/setenv_implied/g
1631 2007-11-21 13:44 millert
1633 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
1635 2007-11-21 13:26 millert
1637 * ldap.c: use strcmp, not strcasecmp when comparing ALL
1639 2007-11-21 11:41 millert
1641 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
1642 file-based sudoers this does affect all the commands in the
1645 2007-11-21 11:05 millert
1647 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
1648 SETENV tag but, unlike an explicit tag, it is not passed on to
1649 other commands in the list.
1651 2007-11-21 11:02 millert
1653 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
1654 Also use sudo_getpwuid() instead of getpwuid().
1656 2007-11-15 11:16 millert
1658 * sudoers: Expand on the dangers of not using visudo to edit
1661 2007-11-08 07:24 millert
1663 * parse.c: Don't quote *?[]! on output since the lexer does not
1664 strip off the backslash when reading those in.
1666 2007-11-07 13:16 millert
1668 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
1669 compatibility issues.
1671 2007-11-04 08:33 millert
1673 * logging.c: Refactor log line generation in to new_logline().
1675 2007-10-25 09:23 millert
1677 * TROUBLESHOOTING: fix typo
1679 2007-10-24 12:41 millert
1681 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
1682 match.c: Add configure check for struct in6_addr instead of
1683 relying on AF_INET6 since some systems define AF_INET6 but do not
1684 include IPv6 support.
1686 2007-10-21 09:29 millert
1688 * configure, configure.in: Fix block to add -lutil for FreeBSD and
1689 NetBSD when logincap is in use.
1691 2007-10-19 22:28 millert
1693 * configure, configure.in: POSIX states that struct timespec be
1694 declared in time.h so check there regardless of the value of
1697 2007-10-17 11:37 millert
1699 * tgetpass.c: Instead of defining a macro to call the appropriate
1700 method for turning on/off echo, just define tc[gs]etattr() and
1701 the related defines that use the correct terminal ioctls if
1702 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
1705 2007-10-08 20:18 millert
1707 * Makefile.in: g/c @ALLOCA@
1709 2007-10-08 20:07 millert
1713 2007-10-08 20:04 millert
1715 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
1716 --disable-pam-session configure option to disable calling
1717 pam_{open,close}_session. May work around bugs in some PAM
1720 2007-10-08 12:00 millert
1722 * tgetpass.c: quiet gcc warnings
1724 2007-10-08 08:41 millert
1726 * tgetpass.c: Avoid printing the prompt if we are already
1727 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
1728 In this case, the call to tcsetattr() will cause SIGTTOU to be
1731 2007-09-15 16:07 millert
1733 * def_data.c, def_data.h, def_data.in: Reorder things such that the
1734 definition of env_reset come right before the env variable lists.
1736 2007-09-15 07:50 millert
1738 * parse.h: Shrink type and seqno in struct alias from int to
1741 2007-09-15 07:24 millert
1743 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
1744 aliases for loop detection. If we find an alias with the seqno
1745 already set to the current (global) value we know we've visited
1746 it before so ignore it.
1748 2007-09-13 19:05 millert
1750 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
1751 add user_ttypath which holds the full path to the tty or is NULL
1752 if no tty was present.
1754 2007-09-13 18:42 millert
1756 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
1757 lower that results in a segv.
1759 2007-09-11 15:43 millert
1763 2007-09-11 15:42 millert
1765 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
1766 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
1768 2007-09-10 17:33 millert
1770 * alloc.c: remove some useless casts
1772 2007-09-10 17:32 millert
1774 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
1775 inttypes.h predates the final C99 spec and the standard specifies
1776 that it shall include stdint.h anyway
1778 2007-09-06 12:39 millert
1780 * Makefile.in, alloca.c, configure.in: Since we ship with a
1781 pre-generated parser there is no need to ship a bogus alloca
1784 2007-09-06 12:22 millert
1788 2007-09-06 12:19 millert
1790 * configure.in: remove initial setting of CHECKSIA, we require that
1791 it be unset if not used
1793 2007-09-06 11:55 millert
1795 * Makefile.in: add list.c to SRCS
1797 2007-09-06 07:18 millert
1801 2007-09-06 07:17 millert
1803 * configure.in: only do SIA checks on Digital Unix
1805 2007-09-05 18:50 millert
1807 * sudoers.cat, sudoers.man.in: regen
1809 2007-09-05 18:48 millert
1811 * ChangeLog, TODO: sync
1813 2007-09-05 18:39 millert
1815 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
1816 needed for modern kerb5.
1818 2007-09-05 18:16 millert
1822 2007-09-05 18:16 millert
1824 * configure.in, aclocal.m4: New method for setting the default
1825 authentication type and avoiding conflicts in auth types.
1827 2007-09-05 14:45 millert
1829 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
1830 an associated runaslist so no need to keep track of the most
1831 recent non-NULL one.
1833 2007-09-04 18:51 millert
1835 * ldap.c: back out partial ldaps support mistakenly committed
1837 2007-09-04 10:57 millert
1839 * ldap.c: Add support for unix groups and netgroups in sudoRunas
1841 2007-09-03 16:28 millert
1843 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
1846 2007-09-02 17:05 millert
1850 2007-09-02 17:05 millert
1852 * INSTALL: update --passprompt escape info
1854 2007-09-02 17:03 millert
1856 * configure.in: remove now-bogus comment and update copyright date
1858 2007-09-02 16:35 millert
1860 * configure.in: Fix up use of with_passwd
1862 2007-09-02 16:25 millert
1864 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
1865 Update to autoconf-2.61 andf libtool-1.5.24
1867 2007-09-02 16:17 millert
1869 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
1872 2007-09-01 17:39 millert
1876 2007-09-01 17:39 millert
1878 * gram.y: move tags and runaslist propagation to be earlier
1880 2007-09-01 09:34 millert
1882 * visudo.c: If -f flag given use the permissions of the original
1885 2007-09-01 08:45 millert
1887 * gram.y: prevent a double free() when re-initing the parser
1889 2007-08-31 19:30 millert
1893 2007-08-31 19:30 millert
1895 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
1896 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
1897 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
1898 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
1899 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
1900 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
1901 Remove support for compilers that don't support void *
1903 2007-08-31 19:14 millert
1907 2007-08-31 19:13 millert
1909 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
1910 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
1911 manipulation macros to list.h and create C versions of the more
1912 complex ones in list.c. The names have been down-cased so they
1913 appear more like normal functions.
1915 2007-08-31 17:21 millert
1917 * Makefile.in: Fix cmp command when regenerating parser. Make
1918 gram.o the first dependency for all programs so gram.h will be
1919 generated before anything that needs it.
1921 2007-08-31 13:56 millert
1923 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
1926 2007-08-30 21:21 millert
1928 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
1929 permission and short-circuit on the first non-UNSPEC hit we get
1930 for the command. This means that instead of cycling through the
1931 all the parsed sudoers entries we start at the end and work
1932 backwards and quit after the first positive or negative match.
1934 2007-08-30 21:13 millert
1938 2007-08-30 21:12 millert
1940 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
1941 Change list head macros to take a pointer, not a struct.
1943 2007-08-30 20:46 millert
1947 2007-08-30 20:46 millert
1949 * gram.y: Propagate the runasspec from one command to the next in a
1952 2007-08-30 16:15 millert
1954 * match.c: Replace has_meta() with a macro that calls strpbrk().
1956 2007-08-30 16:04 millert
1960 2007-08-30 13:26 millert
1962 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
1963 testsudoers.c, visudo.c: Use a list head struct when storing the
1964 semi-circular lists and convert to tail queues in the process.
1965 This will allow us to reverse foreach loops more easily and it
1966 makes it clearer which functions expect a list as opposed to a
1969 Add macros for manipulating lists. Some of these should become
1972 When freeing up a list, just pop off the last item in the queue
1973 instead of going from head to tail. This is simpler since we
1974 don't have to stash a pointer to the next member, we always just
1975 use the last one in the queue until the queue is empty.
1977 Rename match functions that take a list to have list in the name.
1978 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
1980 2007-08-30 13:12 millert
1982 * parse.c: Fix pasto, append "!" not negated (which is an int) for
1985 2007-08-30 12:45 millert
1987 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
1988 dependency is enough. Only move y.tab.h to gram.h if it is
1989 different; avoids needless rebuilding.
1991 2007-08-27 15:51 millert
1993 * sudoers.pod: Defaults lines may be associated with lists of
1994 users, hosts, commands and runas users, not just single entries.
1996 2007-08-26 17:42 millert
1998 * Makefile.in: Revert the "cmp" portion of the last diff, it
2001 2007-08-26 17:10 millert
2003 * Makefile.in: Remove *.lo for clean: When generating the parser,
2004 only move the generated files into place if they differ from the
2007 2007-08-24 22:47 millert
2009 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2010 (readable) one and add an extra check when it matches to make
2011 sure we have a valid address.
2013 2007-08-24 22:36 millert
2015 * match.c: Fix thinko introduced when merging IPV6 support.
2017 2007-08-24 14:23 millert
2019 * HISTORY, LICENSE: regen
2021 2007-08-24 14:23 millert
2023 * license.pod: add 2007
2025 2007-08-24 14:19 millert
2027 * UPGRADE: mention #uid vs. comment pitfall
2029 2007-08-24 09:50 millert
2031 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2032 problem with the latest autoconf. From Stepan Kasal.
2034 2007-08-23 20:28 millert
2036 * parse.h: Back out he XOR swap trick, it is slower than a temp
2037 variable on modern CPUs.
2039 2007-08-23 20:14 millert
2043 2007-08-23 20:14 millert
2045 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2046 and use the XOR swap trick to swap the prev pointers during
2049 2007-08-23 15:31 millert
2051 * parse.h: remove useless statement
2053 2007-08-23 07:47 millert
2055 * toke.c, toke.l: Refactor #include parsing into a separate
2056 function and return unparsed chars (such as newline or comment)
2059 2007-08-22 18:56 millert
2061 * WHATSNEW: mention better uid support
2063 2007-08-22 18:55 millert
2065 * sudoers.pod: Users may now consist of a uid.
2067 2007-08-22 18:39 millert
2069 * gram.c, gram.h, toke.c: regen
2071 2007-08-22 18:32 millert
2073 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2074 characters that would require quoting in sudoers.
2076 2007-08-22 18:31 millert
2078 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2079 characters which should be quoted with a backslash when
2082 2007-08-22 18:28 millert
2084 * toke.l: Require that the first character after a comment not be a
2085 digit or a dash. This allows us to remove the GOTRUNAS state and
2086 treat uid/gids similar to other words. It also means that we can
2087 now specify uids in User_Lists and a User_Spec may now contain a
2090 2007-08-22 18:23 millert
2092 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2093 make the runas portion of the grammar more natural.
2095 2007-08-22 06:35 millert
2097 * Makefile.in, README, BUGS: The BUGS file is history
2099 2007-08-21 09:19 millert
2101 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2102 character after the pound sign isn't a digit or a dash.
2104 2007-08-20 20:43 millert
2106 * WHATSNEW: Glob support was back-ported to 1.6.9
2108 2007-08-20 19:59 millert
2110 * Makefile.in: remove sudo_usage.h in distclean
2112 2007-08-20 19:24 millert
2114 * parse.c: If a Defaults value contains a blank, double-quote the
2117 2007-08-20 19:19 millert
2119 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2120 that span multiple lines using the line continuation char.
2121 Previously, the entire thing, including the continuation char,
2122 newline, and spaces was stored as-is.
2124 2007-08-20 10:46 millert
2126 * sudo.c: Be consistent when using single quotes and backticks.
2128 2007-08-19 16:48 millert
2130 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2131 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2132 dynamically allocated strings and word-wrapped output. Currently
2133 used for sudo's usage() and sudo -l output. Sudo usage strings
2134 are now in sudo_usage.h which is generated at configure time.
2136 2007-08-18 08:22 millert
2138 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2139 actual tty width instead of assuming 80.
2141 2007-08-17 18:32 millert
2143 * history.pod: some more info
2145 2007-08-17 17:28 millert
2147 * history.pod: Mentioned Chris Jepeway's parser and also the new
2148 one that is in sudo 1.7.
2150 2007-08-16 09:38 millert
2152 * sudo.pod, visudo.pod: For the options list, add flag args where
2153 appropriate and increase the indent level so there is room for
2156 2007-08-15 13:49 millert
2158 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2159 some bogosity in the line wrapping.
2161 2007-08-15 11:21 millert
2163 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2164 visudo.man.in, visudo.cat: regen
2166 2007-08-15 11:20 millert
2168 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2169 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2170 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2171 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2172 is a versino of systrace that uses a lookaside buffer (or we have
2173 a better mechanism to use).
2175 2007-08-15 09:22 millert
2177 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2178 instead of gethostbyname() if it is available
2180 2007-08-14 15:27 millert
2182 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2185 2007-08-14 11:19 millert
2187 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2189 2007-08-14 10:04 millert
2191 * sudo.c: If we can open sudoers but fail to read the first byte,
2192 close the file stream before trying again.
2194 2007-08-13 12:34 millert
2196 * gram.c, toke.c: regen
2198 2007-08-13 12:29 millert
2200 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2201 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2203 2007-08-13 12:23 millert
2205 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2208 2007-08-12 18:55 millert
2210 * configure, configure.in: fix sudo_noexec extension which got
2211 broken in the libtool update
2213 2007-08-10 10:41 millert
2215 * Makefile.in: explicitly specify -Tascii to nroff
2217 2007-08-08 16:07 millert
2219 * logging.c: remove an ANSI-ism that crept in
2221 2007-08-06 20:37 millert
2223 * sudo.pod: Adjust list indents Prevent -- from being turned into
2224 an em dash Use a list for the environment instead of a literal
2227 2007-08-06 20:36 millert
2229 * visudo.pod: Use a list for the environment instead of an indented
2232 2007-08-06 20:33 millert
2234 * sudoers.pod: Adjust list indentation
2236 2007-08-06 20:31 millert
2238 * license.pod: add =head3
2240 2007-08-06 10:24 millert
2242 * sudo.pod: mention that when specifying a uid for the -u option
2243 the shell may require that the # be escaped
2245 2007-08-01 22:08 millert
2247 * match.c: Fix off by one in group matching.
2249 2007-07-31 14:04 millert
2251 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2254 2007-07-30 10:45 millert
2256 * configure, configure.in: Add missing define of
2257 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2259 2007-07-30 09:29 millert
2261 * aclocal.m4, configure.in, configure: Fix link tests such that new
2262 gcc doesn't optimize away the test.
2264 2007-07-29 19:21 millert
2266 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2268 2007-07-29 19:09 millert
2270 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2273 2007-07-29 18:32 millert
2275 * env.c: Add back allocation of the env struct in rebuild_env but
2276 save a copy of the old pointer and free it before returning.
2278 2007-07-29 16:09 millert
2280 * env.c: Don't init the private environment in rebuild_env() since
2281 it may have already been done implicitly
2282 sudo_setenv/sudo_unsetenv.
2284 Multiply length by sizeof(char *) in memcpy/memmove when copying
2285 the environment so we copy the full thing.
2287 Add missing set of parens so we deref the right pointer in
2288 sudo_unsetenv when searching for a matching variable.
2290 2007-07-26 16:35 millert
2292 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2295 2007-07-26 10:04 millert
2297 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2299 2007-07-26 07:28 millert
2301 * sudoers.pod: Sort sudoers options; based on a diff from Igor
2304 2007-07-25 16:19 millert
2306 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2307 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2308 The Makefile rules for the .man.in file will add @mansectsu@ and
2309 @mansectform@ back in after pod2man is done anyway.
2311 2007-07-22 19:09 millert
2313 * LICENSE, Makefile.in, license.pod: Move license info to pod
2316 2007-07-22 18:43 millert
2318 * configure, configure.in, sudoers.pod: Substitute value of
2319 path_info into sudoers man page.
2321 2007-07-22 16:40 millert
2323 * WHATSNEW: remove features that were back-ported to 1.6.9
2325 2007-07-22 15:20 millert
2327 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2328 usage. From Igor Sobrado.
2330 2007-07-22 15:19 millert
2332 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2333 ldap_sasl_interactive_bind_s() but don't have
2334 gss_krb5_ccache_name().
2336 2007-07-22 08:23 millert
2338 * ChangeLog: rebuild without branch info
2340 2007-07-22 08:23 millert
2342 * Makefile.in: Add ChangeLog target
2344 2007-07-22 08:14 millert
2346 * auth/pam.c: Run cleanup code if the user hits ^C at the password
2349 2007-07-22 08:13 millert
2351 * auth/pam.c: Some versions of pam_lastlog have a bug that will
2352 cause a crash if PAM_TTY is not set so if there is no tty, set
2353 PAM_TTY to the empty string.
2355 2007-07-20 09:32 millert
2357 * Makefile.in: ChageLog not Changelog
2359 2007-07-20 09:31 millert
2363 2007-07-20 09:29 millert
2365 * Makefile.in: CHANGE -> Changelog
2367 2007-07-19 20:23 millert
2371 2007-07-19 19:53 millert
2373 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2374 for gss_krb5_ccache_name() and the gssapi headers.
2376 2007-07-18 12:57 millert
2378 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2379 return environment pointer, they set environ directly.
2381 No longer need to pass around an envp pointer since we just
2382 operate on environ now.
2384 Add dosync argument to insert_env() that indicates whether it
2385 should reset environ when realloc()ing env.envp.
2387 Use an initial size of 128 for the environment.
2389 2007-07-18 12:41 millert
2391 * env.c: Split sudo_setenv() into an external version and a version
2392 only for use by rebuild_env().
2394 2007-07-16 19:40 millert
2396 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2397 setting KRB5CCNAME. Also use sudo_unsetenv() in the
2398 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2399 original environment. TODO: configure setup for
2400 gss_krb5_ccache_name()
2402 2007-07-16 18:44 millert
2404 * README.LDAP: add krb5_ccname
2406 2007-07-16 18:44 millert
2408 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2410 2007-07-16 18:39 millert
2412 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2413 syncing code into sync_env().
2415 2007-07-16 07:27 millert
2417 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
2420 2007-07-15 15:44 millert
2422 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
2423 If specified, it will override the default value of KRB5CCNAME
2424 in the environment for the duration of the call to
2425 ldap_sasl_interactive_bind_s().
2427 2007-07-15 15:41 millert
2429 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
2430 most format_env() + insert_env() combinations. insert_env() no
2431 longer takes a struct environment *
2433 2007-07-15 12:47 millert
2435 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
2437 2007-07-15 09:23 millert
2439 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
2440 support for SASL auth when connecting to an LDAP server. Adapted
2441 from a diff by Tom McLaughlin.
2443 2007-07-14 16:32 millert
2445 * configure, configure.in: Only enable AIX or BSD auth if no other
2446 exclusive auth method has been chosen. Allows people to e.g.,
2447 use PAM on AIX without adding --without-aixauth. A better
2448 solution is needed to deal with default authentication since if a
2449 non-exclusive method is chosen we will still get an error.
2451 2007-07-11 11:23 millert
2453 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
2454 history.pod (which is also used for web pages)
2456 2007-07-09 19:40 millert
2458 * sudo.man.in, sudoers.man.in: regen
2460 2007-07-09 19:25 millert
2462 * sudo.pod: Better explanation of environment handling in the sudo
2465 2007-07-09 15:13 millert
2467 * env.c, sudo.c: Defer setting user-specified env vars until after
2470 2007-07-09 13:25 millert
2472 * env.c: honor def_default_path for PATH set on the command line
2474 2007-07-09 13:22 millert
2476 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
2477 environment variables on the command line as long as they are
2478 allowed by env_keep and env_check. Ie: apply the same
2479 restrictions as normal environment variables. TODO: deal with
2482 2007-07-08 14:44 millert
2484 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
2485 original envp to sudo_edit(). Don't allow -E or env var setting
2486 in sudoedit mode. More accurate usage() when called as sudoedit.
2488 2007-07-08 14:41 millert
2490 * ldap.c: warn -> warning
2492 2007-07-08 14:11 millert
2494 * sudo.pod: add -c option to sudoedit synopsis
2496 2007-07-08 10:27 millert
2498 * TODO: udpate to reality
2500 2007-07-08 09:43 millert
2502 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
2503 the return value from {user,host,runas,cmnd}_matches(). Rename
2504 *matches variables -> *match. Purely cosmetic.
2506 2007-07-08 09:30 millert
2508 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
2509 No change in behavior.
2511 2007-07-08 09:17 millert
2513 * sudoers: add SETENV tag
2515 2007-07-06 15:51 millert
2517 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
2518 even if user didn't match since Defaults options may still apply.
2520 2007-07-06 14:51 millert
2522 * check.c, sudo.c: Do not update timestamp if user not validated by
2525 2007-07-06 10:14 millert
2527 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
2528 and restore to the user's original in PERM_ROOT
2530 2007-07-06 10:04 millert
2532 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
2533 now no different than PERM_ROOT so remove PERM_FULL_ROOT
2535 2007-07-06 09:49 millert
2537 * check.c: don't check timestamp mtime if we are just going to
2540 2007-07-06 09:33 millert
2542 * sudoers.pod: Move sudoers defaults parameters into their own
2545 2007-07-05 20:21 millert
2547 * testsudoers.c: Reduce a level of indent by a few placed continue
2550 2007-07-05 20:20 millert
2552 * parse.c: Make matching but negated commands/hosts/runas entries
2553 override a previous match as expected. Also reduce some levels
2554 of indent by a few placed continue statements.
2556 2007-07-05 16:34 millert
2558 * parse.c: Print default runas in "sudo -l" if sudoers don't
2561 2007-07-05 15:46 millert
2563 * match.c: Less hacky way of testing whether the domain was set.
2565 2007-07-04 15:50 millert
2567 * INSTALL: Mention pam-devel and openldap-devel for Linux
2569 2007-07-03 19:38 millert
2571 * README.LDAP: or vs. are
2573 2007-07-01 16:55 millert
2575 * sudo.c: fix typo in Solaris project support
2577 2007-07-01 09:40 millert
2581 2007-07-01 09:07 millert
2583 * sudo.c: Make -- on the command line match the manual page. The
2584 implied shell case has been simplified as a result.
2586 2007-06-28 10:44 millert
2588 * sudoers2ldif: add simplistic support for sudoRunas; note that if
2589 a sudoers entry contains multiple Runas users, all will apply to
2592 2007-06-28 10:42 millert
2594 * sudoers2ldif: honor SETENV and NOSETENV tags
2596 2007-06-24 09:25 millert
2598 * mon_systrace.c: Redo setting of user_args. We now build up a
2599 private copy of argv first and then replace the NULs with spaces.
2601 2007-06-24 09:19 millert
2603 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
2606 2007-06-24 07:39 millert
2608 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
2610 2007-06-23 20:00 millert
2612 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
2613 visudo.man.in: regen
2615 2007-06-23 19:58 millert
2617 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
2618 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
2619 sudoers.pod, toke.c, toke.l: Add support for setting environment
2620 variables on the command line. This is only allowed if the
2621 setenv sudoers options is enabled or if the command is prefixed
2622 with the SETENV tag.
2624 2007-06-23 19:57 millert
2626 * README.LDAP: replace Aaron's email address with the sudo-workers
2629 2007-06-23 19:55 millert
2633 2007-06-21 20:35 millert
2635 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
2636 schema out into separate files.
2638 2007-06-21 18:28 millert
2640 * auth/aix_auth.c: free message if set by authenticate()
2642 2007-06-21 13:03 millert
2644 * match.c: deal with NULL gr_mem
2646 2007-06-20 15:04 millert
2648 * config.h.in: regen
2650 2007-06-20 15:04 millert
2652 * configure.in: add template for HAVE_PROJECT_H
2654 2007-06-20 07:06 millert
2656 * closefrom.c: include fcntl.h
2658 2007-06-19 19:37 millert
2660 * INSTALL: mention --with-project
2662 2007-06-19 18:24 millert
2664 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
2665 support. From Michael Brantley.
2667 2007-06-19 17:27 millert
2669 * sudoers.pod: fix typo
2671 2007-06-19 17:22 millert
2675 2007-06-19 17:21 millert
2677 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
2679 2007-06-19 17:00 millert
2681 * memrchr.c: Remove dependecy on NULL
2683 2007-06-19 15:37 millert
2687 2007-06-19 15:37 millert
2689 * aclocal.m4, configure.in: Can't use the regular autoconf
2690 fnmatch() check since we need FNM_CASEFOLD so go back to our
2693 2007-06-19 12:52 millert
2695 * env.c: Fix preserving of variables in env_keep.
2697 2007-06-19 07:10 millert
2699 * env.c: add XAUTHORIZATION
2701 2007-06-18 20:41 millert
2703 * UPGRADE: expand upon env resetting and mention that it began in
2706 2007-06-18 20:33 millert
2708 * sudoers.pod: Update descriptions of env_keep and env_check to
2709 match current reality.
2711 2007-06-18 17:33 millert
2713 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
2714 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
2715 intial_keepenv_table.
2717 2007-06-18 17:23 millert
2719 * env.c, logging.c: Treat USERNAME environemnt variable like
2722 2007-06-18 17:21 millert
2724 * env.c: Don't need to populate keepenv table with the contents of
2727 2007-06-18 08:57 millert
2729 * sudo.c: Don't force sudo into the C locale.
2731 2007-06-18 08:56 millert
2733 * env.c: Make env_check apply when env_reset it true. Environment
2734 variables are passed through unless they contain '/' or '%'.
2735 There is no need to have a variable in both env_check and
2738 2007-06-16 07:31 millert
2740 * visudo.c: Remove an duplicate lock_file() call and add a comment.
2742 2007-06-15 21:16 millert
2744 * UPGRADE: Add sudo 1.6.9 upgrade note.
2746 2007-06-14 12:23 millert
2748 * interfaces.c: Solaris will return EINVAL if the buffer used in
2749 SIOCGIFCONF is too small. From Klaus Wagner.
2751 2007-06-14 12:03 millert
2753 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
2754 logging.c, sudo.h: Redo the long syslog line splitting based on a
2755 patch from Eygene Ryabinkin. Include memrchr() for systems
2758 2007-06-14 07:09 millert
2760 * configure.in: Since we need to be able to convert timespec to
2761 timeval for utimes() the last 3 digits in the tv_nsec are not
2762 significant. This makes the sudoedit file date comparison work
2765 2007-06-13 13:41 millert
2767 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
2768 deal with adding things to AUTH_OBJS. This deals with exclusive
2769 authentication methods in a simple way.
2771 2007-06-12 13:08 millert
2773 * LICENSE: mkstemp.c is BSD code too.
2775 2007-06-12 09:21 millert
2777 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
2779 2007-06-11 18:27 millert
2781 * sudo.c: cleanenv() is no more.
2783 2007-06-10 18:37 millert
2785 * ChangeLog: Display branch info in Changelog
2787 2007-06-10 18:18 millert
2789 * utimes.c: Include config.h early so we have it for
2792 2007-06-10 18:00 millert
2794 * ChangeLog: Fix Changelog generation and update.
2796 2007-06-09 07:26 millert
2798 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
2800 Move old-style fd closing into closefrom_fallback() and call that
2801 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
2803 2007-06-09 07:24 millert
2805 * config.h.in, configure.in, auth/kerb5.c: o use
2806 krb5_verify_user() if available instead of doing it by hand
2807 o use krb5_init_secure_context() if we have it
2808 o pass an encryption type of 0 to krb5_kt_read_service_key()
2810 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
2812 2007-06-09 07:20 millert
2814 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
2817 2007-06-09 07:17 millert
2819 * configure.in: Fix closefrom() substitution in the Makefile
2821 2007-06-09 07:15 millert
2823 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
2825 2007-06-07 07:52 millert
2827 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
2829 2007-06-07 07:22 millert
2831 * auth/kerb5.c: If we cannot get a valid service key using the
2832 default keytab it is a fatal error. Fixes a bug where sudo could
2833 be tricked into allowing access when it should not by a fake KDC.
2834 From Thor Lancelot Simon.
2836 2007-05-12 08:56 millert
2838 * aclocal.m4, configure, configure.in: Update long long checks to
2839 use AC_CHECK_TYPES and to cache values.
2841 2007-05-12 08:07 millert
2843 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
2844 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
2845 that assumes replacing with GNU fnmatch.
2847 2007-05-11 17:05 millert
2849 * configure, configure.in: Add closefrom() to LIB_OBJS not
2850 SUDO_OBJS if it is missing since we need it for visudo now too.
2852 2007-04-24 14:44 millert
2854 * sudoers.pod: Attempt to clarify the bit talking about network
2855 numbers w/o netmasks.
2857 2007-04-24 14:25 millert
2859 * sudo.pod: Clarify timestamp dir ownership sentence.
2861 2007-04-20 12:40 millert
2863 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
2864 __LIBPAM_VERSION. From Dmitry V. Levin.
2866 2007-04-16 12:13 millert
2868 * sudo.c: -i is also one of the mutually exclusive options to list
2869 it in the warning message. Noted by Chris Pepper.
2871 2007-04-12 11:18 millert
2873 * visudo.pod: The sudoers variable is env_editor, not enveditor.
2874 From Jean-Francois Saucier.
2876 2007-03-29 13:30 millert
2878 * redblack.c: I tracked down the original author so credit him and
2879 include his license info.
2881 2007-02-06 13:25 millert
2883 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
2884 sudoers.pod: Fix typos; from Jason McIntyre.
2886 2007-02-06 13:23 millert
2888 * logging.c: Restore signal mask before calling reapchild(). Fixes
2889 a possible race condition that could prevent sudo from properly
2890 waiting for the child.
2892 2007-01-31 10:02 millert
2894 * pwutil.c: Don't declare pw_free() if we are not going to use it.
2896 2007-01-31 10:00 millert
2898 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
2899 and LDR_PRELOAD64. The 64-bit version is not currently
2900 supported. Remove zero_env() prototype as it no longer exists.
2902 2006-12-11 13:21 millert
2904 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
2907 2006-09-29 10:53 millert
2909 * auth/pam.c: If the user enters ^C at the password prompt, abort
2910 instead of trying to authenticate with an empty password (which
2911 causes an annoying delay).
2913 2006-08-17 11:26 millert
2915 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
2916 F_CLOSEM support to closefrom(); adapted from a diff by Darren
2919 2006-08-17 11:25 millert
2921 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
2924 2006-08-04 11:34 millert
2926 * config.sub, config.guess: Update to latest versions from
2927 cvs.savannah.gnu.org
2929 2006-07-31 13:51 millert
2931 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
2932 sudo_end{pw,grp}ent() so we can close the passwd/group files
2935 2006-07-31 13:50 millert
2937 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
2938 flavor of set_perms() for systems without setreuid() or
2939 setresuid() that have a working seteuid(). Tested on Darwin.
2941 2006-07-30 15:56 millert
2943 * mon_systrace.c: systrace_read() returns ssize_t
2945 2006-07-30 15:53 millert
2947 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
2950 2006-07-28 13:12 millert
2952 * HISTORY: Fix typo; Matt Ackeret
2954 2006-07-17 08:25 millert
2956 * sudo.c: Print sudoers path in -V mode for root.
2958 2006-06-15 14:44 millert
2960 * ldap.c: Do a sub tree search instead of a base search (one level
2961 in the tree only) for sudo right objects. This allows system
2962 administrators to categorize the rights in a tree to make them
2965 2005-12-28 13:52 millert
2967 * sudo.pod: fix typo
2969 2005-12-04 12:16 millert
2971 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
2972 timelimit and bind_timelimit support; adapted from gentoo.
2974 2005-11-23 18:57 millert
2976 * ldap.c: Support comments that start in the middle of a line
2978 2005-11-23 18:56 millert
2980 * configure.in, configure: Define LDAP_DEPRECATED until we start
2981 using ldap_get_values_len()
2983 2005-11-18 09:55 millert
2985 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
2987 2005-11-17 20:39 millert
2989 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
2990 takes an int as an arg so it can be used as a signal handler too.
2992 2005-11-17 20:38 millert
2994 * sudo.c: Make a copy of the shell field in the passwd struct for
2995 NewArgv to avoid a use after free situation after sudo_endpwent()
2998 2005-11-16 20:36 millert
3000 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3001 mkstemp() for those poor souls without it.
3003 2005-11-15 09:25 millert
3005 * env.c: Add PERL5DB to list of environment variables to remove.
3007 2005-11-13 15:49 millert
3009 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3010 function twice with a state cookie use separate check/log
3013 Check more ioctl() calls for failure.
3015 systrace_{read,write} now return the number of bytes read/written
3018 2005-11-13 14:51 millert
3020 * env.c: Add more environment variables to remove; from gentoo
3021 linux Add some comments about what bad env variables go to what
3024 2005-11-11 17:23 millert
3026 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3027 the exec since they free up our cached copy of the passwd
3028 structs, including sudo_user and sudo_runas. Fixes a
3031 2005-11-11 17:19 millert
3033 * visudo.c: Close all fd's before executing editor.
3035 2005-11-11 17:17 millert
3037 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3040 2005-11-11 11:22 millert
3042 * check.c: Fix fd leak when lecture file option is enabled. From
3045 2005-11-07 11:02 millert
3047 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3048 environment variables to remove. From Charles Morris
3050 2005-11-01 13:24 millert
3052 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3054 2005-10-27 20:35 millert
3056 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3058 2005-08-14 20:32 millert
3060 * sudoers.pod: Fix typo; Toby Peterson
3062 2005-08-02 09:57 millert
3064 * tsgetgrpw.c: Make return buffers static so they don't get
3067 2005-07-27 21:14 millert
3069 * auth/securid5.c: Fix securid5 authentication, was not checking
3070 for ACM_OK. Also add default cases for the two switch()es.
3071 Problem noted by ccon at worldbank
3073 2005-06-26 20:10 millert
3075 * ldap.c: Remove ncat() in favor of just counting bytes and
3076 pre-allocating what is needed.
3078 2005-06-26 19:44 millert
3080 * ldap.c: Fix up some comments Add missing fclose() for the
3083 2005-06-26 19:38 millert
3085 * ldap.c: align struct ldap_config
3087 2005-06-26 19:37 millert
3089 * ldap.c: use LINE_MAX for max conf file line size
3091 2005-06-26 18:36 millert
3093 * pathnames.h.in: add _PATH_LDAP_SECRET
3095 2005-06-26 18:36 millert
3097 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3099 2005-06-25 18:03 millert
3101 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3104 2005-06-25 17:46 millert
3106 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3107 variable by default.
3109 2005-06-25 16:39 millert
3111 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3112 is safe for LD_PRELOAD
3114 2005-06-25 16:15 millert
3116 * acsite.m4, configure: set need_version=no for all cases; this is
3119 2005-06-25 14:45 millert
3123 2005-06-25 14:33 millert
3125 * configure, configure.in: Add dragonfly
3127 2005-06-25 14:29 millert
3129 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3131 2005-06-25 14:21 millert
3135 2005-06-25 14:20 millert
3137 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3138 ltoptions.m4 ltsugar.m4 ltversion.m4
3140 2005-06-25 14:08 millert
3142 * config.guess, config.sub, ltmain.sh: merge in local changes:
3143 config.guess: o better openbsd support config.sub: o hiuxmpp
3144 support ltmain.sh o remove requirement that libs must begin with
3145 "lib" o don't print a bunch of crap about library installs o
3148 2005-06-25 14:05 millert
3150 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3152 2005-06-25 14:04 millert
3154 * configure.in: Update with autoupdate and make minor changes for
3157 2005-06-22 23:19 millert
3159 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3161 2005-06-22 23:04 millert
3163 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3164 emul/timespec.h: Move declatation of struct timespec to its own
3165 include files for systems without it since it needs time_t
3168 2005-06-22 22:57 millert
3170 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3172 2005-05-27 01:59 millert
3174 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3175 give pam_limits a chance to run. Idea from Karel Zak.
3177 2005-04-24 19:24 millert
3179 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3180 to silence warnings on Solaris
3182 2005-04-24 19:22 millert
3184 * parse.c: include grp.h to silence a warning on Solaris
3186 2005-04-23 15:10 millert
3188 * parse.c: Fix printing of += and -= defaults.
3190 2005-04-17 01:21 millert
3192 * mon_systrace.c: Sanity check number of syscall args with argsize.
3193 Not really needed but a little paranoia never hurts.
3195 2005-04-17 01:18 millert
3197 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3198 void * Use int, not size_t/ssize_t for systrace lengths (since it
3201 2005-04-16 03:14 millert
3203 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3204 collsion w/ error Check rval of decode_args() and update_env()
3205 Remove improper setting of validated variable
3207 2005-04-11 21:37 millert
3209 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3210 file if def_ignore_sudoers is not set and call LDAP versions from
3211 display_privs() and display_cmnd() instead of directly from
3212 main(). Because of this we need to defer closing the ldap
3213 connection until after -l processing has ocurred and we must pass
3214 in the ldap pointer to display_privs() and display_cmnd().
3216 2005-04-11 21:33 millert
3218 * ldap.c: Reorganize LDAP code to better match normal sudoers
3219 parsing. Instead of storing strings for later printing in -l
3220 mode we do another query since the authenticating user and the
3221 user being listed may not be the same (the new -U flag). Also
3222 add support for "sudo -l command".
3224 There is still a fair bit if duplicated code that can probably be
3227 2005-04-11 00:37 millert
3229 * ldap.c: Replace pass variable with do_netgr for better
3232 2005-04-10 23:49 millert
3234 * ldap.c: use DPRINTF macro
3236 2005-04-10 23:18 millert
3238 * ldap.c: estrdup, not strdup
3240 2005-04-10 17:44 millert
3242 * parse.c: Add macro to test if the tag changed to improve
3245 2005-04-10 17:40 millert
3247 * parse.c: Avoid printing defaults header if there are no defaults
3250 2005-04-10 15:29 millert
3252 * glob.c: Fix a warning on systems without strlcpy().
3254 2005-04-10 13:32 millert
3256 * pwutil.c: Use macros where possible for sudo_grdup() like
3259 2005-04-08 17:04 millert
3261 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3262 add in tv_usec / 1000000.
3264 2005-03-29 23:38 millert
3266 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3267 should be 1, not 0 for Heimdal. From Alex Plotnick.
3269 2005-03-29 09:29 millert
3271 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3272 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3273 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3274 Add efree() for consistency with emalloc() et al. Allows us to
3275 rely on C89 behavior (free(NULL) is valid) even on K&R.
3277 2005-03-28 22:33 millert
3279 * parse.c, sudo.c: Move initgroups() for -U option into
3280 display_privs() so group matching in sudoers works correctly.
3282 2005-03-26 21:34 millert
3284 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3285 with sudo_ldap_close.
3287 2005-03-26 20:01 millert
3289 * parse.c: Add missing space in Defaults printing
3291 2005-03-25 12:36 millert
3293 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3294 size computaton and string copies.
3296 2005-03-18 22:08 millert
3298 * pwutil.c: Zero old pw_passwd before replacing with version from
3301 2005-03-18 22:07 millert
3303 * configure, configure.in: Only attempt shadow password detection
3304 if PAM is not being used Add shadow_* variables to make shadow
3305 password detection more generic.
3307 2005-03-18 21:46 millert
3309 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3312 2005-03-12 19:27 millert
3314 * sudoers.pod: use a non-breaking space to avoid a double space
3317 2005-03-12 19:26 millert
3319 * sudo.pod: commna, not colon after e.g.
3321 2005-03-12 18:43 millert
3323 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3324 at least uses __execve() internally.
3326 2005-03-12 12:29 millert
3328 * indent.pro: Match reality a bit more.
3330 2005-03-12 12:27 millert
3332 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3334 2005-03-11 23:42 millert
3336 * pwutil.c: Store shadow password after making a local copy of
3337 struct passwd in case normal and shadow routines use the same
3338 internal buffer in libc.
3340 2005-03-10 20:57 millert
3342 * alloc.c, logging.c: Make varargs usage consistent with the rest
3345 2005-03-10 10:09 millert
3347 * sudo_noexec.c: Wrap more of the exec family since on Linux the
3348 others do not appear to go through the normal execve() path.
3350 2005-03-10 09:57 millert
3352 * visudo.c: make print_unused static like proto says
3354 2005-03-10 09:55 millert
3356 * glob.c: silence a warning on K&R systems
3358 2005-03-10 09:51 millert
3360 * parse.c, alias.c, error.c: make this build in K&R land
3362 2005-03-07 22:21 millert
3366 2005-03-05 22:46 millert
3368 * ldap.c: return(foo) not return foo optimize _atobool() slightly
3370 2005-03-05 22:40 millert
3372 * ldap.c: Use TRUE/FALSE
3374 2005-03-05 22:31 millert
3376 * ldap.c: Reformat to match the rest of sudo's code.
3378 2005-03-05 19:33 millert
3380 * sudo.pod: I am the primary author
3382 2005-02-22 22:28 millert
3384 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3385 confused too many people and really isn't needed in a
3386 configure-oriented world.
3388 2005-02-22 22:28 millert
3390 * INSTALL: alternate -> alternative
3392 2005-02-22 22:26 millert
3394 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3395 have issues with TCSAFLUSH.
3397 2005-02-22 22:16 millert
3399 * toke.l: Allow leading blanks before Defaults and Foo_Alias
3402 2005-02-22 22:14 millert
3404 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3406 2005-02-20 13:00 millert
3408 * sudoers.pod: env_keep overrides set_logname
3410 2005-02-20 12:57 millert
3412 * env.c: Fix disabling set_logname and make env_keep override
3415 2005-02-20 12:28 millert
3417 * compat.h, config.h.in, configure, configure.in: No longer need
3420 2005-02-20 11:48 millert
3422 * env.c, sudo.c: Just clean the environment once. This assumes
3423 that any further setenv/putenv will be able to handle the fact
3424 that we replaced environ with our own malloc'd copy but all the
3425 implementations I've checked do.
3427 2005-02-15 23:16 millert
3429 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
3430 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
3433 2005-02-13 00:33 millert
3435 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
3436 and prev_user into init_vars() since user_shell at least is
3439 2005-02-12 18:51 millert
3441 * Makefile.in: fix devel builds
3443 2005-02-12 18:46 millert
3445 * check.c, sudo.c: Fix some printf format mismatches on error.
3447 2005-02-12 18:33 millert
3449 * configure, gram.c, toke.c: regen
3451 2005-02-12 17:56 millert
3453 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
3454 alloc.c, check.c, closefrom.c, compat.h, configure.in,
3455 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
3456 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
3457 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
3458 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
3459 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
3460 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
3461 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
3462 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
3463 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
3464 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
3465 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3466 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
3467 emul/utime.h: Update copyright years.
3469 2005-02-12 16:46 millert
3471 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
3474 2005-02-12 16:16 millert
3476 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
3479 2005-02-11 18:06 millert
3481 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
3482 to warn about printf-like format mismatches
3484 2005-02-10 00:16 millert
3486 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
3487 generated from cvs logs
3489 2005-02-10 00:03 millert
3491 * set_perms.c: Use warning/error instead of perror/fatal.
3493 2005-02-09 23:13 millert
3495 * config.guess: Update OpenBSD section
3497 2005-02-09 23:10 millert
3499 * UPGRADE: Add upgrading noted for 1.7
3501 2005-02-09 23:00 millert
3503 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
3504 environment, just prune out entries based on the env_delete and
3505 env_check lists. Base building up the new environment on the
3506 current environment and the variables we removed initially.
3508 2005-02-09 22:23 millert
3510 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
3511 if locales are supported, just to be safe.
3513 2005-02-09 22:19 millert
3515 * toke.c, toke.l: Cast argument to ctype functions to unsigned
3518 2005-02-07 22:56 millert
3520 * env.c: correct value for DID_USER
3522 2005-02-07 22:55 millert
3524 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
3525 <compat.h> not "compat.h"
3527 2005-02-07 22:51 millert
3529 * defaults.c: Reset the environment by default.
3531 2005-02-07 22:50 millert
3533 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
3534 malloc an new vector if execve() fails.
3536 2005-02-06 23:16 millert
3538 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
3539 execve(2) and wrap the command in sh if we get ENOEXEC.
3541 2005-02-05 23:01 millert
3543 * sudo_noexec.c: Only include time.h on systems that lack struct
3544 timespec which gets defind in compat.h (using time_t).
3546 2005-02-05 22:59 millert
3548 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
3549 w/o struct timespec.
3551 2005-02-05 22:56 millert
3553 * configure, compat.h, config.h.in, configure.in: use bcopy on
3556 2005-02-05 22:31 millert
3558 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
3559 so limit its use to gcc >= 2.8.
3561 2005-02-05 21:21 millert
3563 * Makefile.in: Add explicit rule to build sudo_noexec.lo
3565 2005-02-05 17:56 millert
3567 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
3568 pointed out a bunch of missed dependencies.
3570 2005-02-05 13:18 millert
3572 * TROUBLESHOOTING: Help for PAM when account section is missing
3574 2005-02-05 13:01 millert
3576 * auth/pam.c: Give user a clue when there is a missing "account"
3577 section in the PAM config.
3579 2005-02-05 10:22 millert
3581 * auth/pam.c: Better error handling.
3583 2005-02-05 09:57 millert
3585 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
3586 CPPFLAGS so it takes effect as early as possible. Silences a
3587 warning about isblank() on linux.
3589 2005-02-04 21:49 millert
3591 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
3592 number of args to be passed to log_error().
3594 2005-01-31 23:03 millert
3596 * pwutil.c: Don't try to destroy a tree we didn't create.
3598 2005-01-27 10:42 millert
3600 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
3601 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
3602 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
3603 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3604 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
3605 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
3606 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
3607 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
3608 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
3609 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
3610 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3611 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
3614 2005-01-21 10:34 millert
3616 * configure, configure.in: Fix error message when mixing invalid
3619 2005-01-21 10:32 millert
3621 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
3622 default if the OS supports them.
3624 2005-01-21 10:29 millert
3626 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
3628 2005-01-21 10:29 millert
3630 * configure.in: Better checking for conflicting authentication
3631 methods Display the authentication methods used at the end of
3632 configure Rename --with-authenticate -> --with-aixauth Use
3633 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
3634 default on systems that support them unless disabled. Add
3635 OSMAJOR variable that replaces old OSREV; now OSREV has full
3638 2005-01-17 19:40 millert
3640 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
3642 2005-01-14 13:35 millert
3644 * configure.in: Replace: test -n "$FOO" || FOO="bar"
3646 With: : ${FOO='bar'}
3648 2005-01-09 18:58 millert
3650 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
3651 only call private passwd/group routines when using a nonstandard
3654 2005-01-06 10:34 millert
3658 2005-01-05 22:16 millert
3660 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
3661 fields so add getpwent()/getgrent() functions and call those.
3663 2005-01-05 17:29 millert
3665 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
3667 2005-01-05 17:18 millert
3669 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
3670 in the clean target Add devdir variable and use it to specify the
3671 path to parser sources
3673 2005-01-05 17:17 millert
3677 2005-01-05 17:17 millert
3679 * configure.in: Add a devdir variables that defaults to $(srcdir)
3680 and is set to . if --devel was specified. Allows for proper
3681 dependecies building the parser.
3683 2005-01-05 14:50 millert
3685 * testsudoers.c: Add support for custom passwd/group files.
3687 2005-01-05 14:47 millert
3689 * Makefile.in: Build private copy of pwutil.o for testsudoers with
3690 MYPW defined so it uses our own passwd/group routines.
3692 2005-01-05 14:46 millert
3694 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
3695 sudo_setspent/sudo_endspent stubs instead. We can now just use
3696 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
3697 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
3699 2005-01-05 14:44 millert
3701 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
3702 Use global buffers for passwd/group structs Rename functions from
3705 2005-01-05 14:43 millert
3707 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
3709 2005-01-05 14:42 millert
3711 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
3714 2005-01-05 14:41 millert
3716 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
3717 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
3718 are no longer needed. Also add preprocessor magic to use private
3719 versions of the passwd and group routines if MYPW is defined (for
3720 use by testsudoers).
3722 2005-01-04 22:40 millert
3724 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
3725 if there are fields we don't handle they end up as 0.
3727 2005-01-04 20:10 millert
3729 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
3732 2005-01-04 20:09 millert
3734 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
3735 variables for better readability.
3737 2005-01-04 20:08 millert
3739 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
3740 that support alternate passwd and group files.
3742 2005-01-04 20:07 millert
3744 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
3745 its own file. This allows visudo and testsudoers to use the
3748 2005-01-01 19:31 millert
3750 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
3751 based on the terminal width.
3753 2005-01-01 12:41 millert
3755 * match.c, visudo.c, testsudoers.c: Only check group vector in
3756 usergr_matches() if we are matching the invoking or list user.
3757 Always check the group members, even if there was a group vector.
3759 2004-12-17 17:24 millert
3761 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
3763 2004-12-17 13:12 millert
3765 * CHANGES, TODO: checkpoint
3767 2004-12-16 14:20 millert
3769 * sudo.c: sort usage
3771 2004-12-16 14:20 millert
3773 * sudo.pod: Sort command line options
3775 2004-12-16 13:33 millert
3777 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
3778 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
3779 start closing at a point other than 3. Add closefrom_override
3780 sudoers option and -C sudo flag to allow the user to specify a
3781 different closefrom starting point.
3783 2004-12-16 13:25 millert
3785 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
3787 2004-12-15 22:55 millert
3789 * LICENSE: no more UCB strcasecmp
3791 2004-12-15 22:54 millert
3793 * strcasecmp.c: replace BSD licensed one with version derived from
3796 2004-12-09 21:07 millert
3798 * sudo.c: Fix last commit.
3800 2004-12-09 19:26 millert
3802 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
3803 to /dev/null if not.
3805 2004-12-03 13:57 millert
3807 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
3809 2004-12-03 13:52 millert
3811 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
3812 Use TIME_WITH_SYS_TIME
3814 2004-12-03 13:48 millert
3816 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
3818 2004-12-02 11:18 millert
3820 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
3821 being set unconditionally on darwin. From Toby Peterson.
3823 2004-12-02 10:40 millert
3825 * getspwuid.c: Check rbinsert() return value. In the case of faked
3826 up entries there is usually a negative response cached that we
3829 In pwfree() don't try to zero out a NULL pw_passwd pointer.
3831 2004-12-02 09:53 millert
3833 * mon_systrace.c: Use the double fork trick to avoid the monitor
3834 process being waited for by the main program run through sudo.
3836 2004-11-29 12:52 millert
3838 * sudo.c: Call initgroups() in -U mode so group matches work
3841 2004-11-29 12:34 millert
3843 * def_data.h, mkdefaults: Don't print a trailing comma for the last
3844 entry in enum def_tupple
3846 2004-11-28 16:08 millert
3848 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
3849 lecture, listpw and verifypw are used in boolean context.
3851 2004-11-28 16:05 millert
3853 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
3854 context should be "all", not "any".
3856 2004-11-26 14:21 millert
3858 * def_data.in, defaults.c: Allow tuples that can be used as
3859 booleans to be used as boolean TRUE. In this case the 2nd
3860 possible value of the tuple is used for TRUE.
3862 2004-11-25 12:23 millert
3864 * configure, configure.in: Correct the test for 2-parameter
3867 2004-11-25 12:20 millert
3869 * sudo.h: Add strub struct definitions for passwd, timeval and
3872 2004-11-25 12:09 millert
3874 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
3875 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
3876 fix a typo in the gettimeofday check.
3878 2004-11-24 16:44 millert
3880 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
3881 for visudo and testsudoers.
3883 2004-11-24 16:31 millert
3885 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
3886 option to use in conjunction with -l instead of -u. Add support
3887 for "sudo -l command" to test a specific command.
3889 2004-11-24 16:28 millert
3891 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
3892 it has not been set. Previously it was set by sudo "ALL" in the
3893 parser but at that point the fully-qualified pathname has not yet
3896 2004-11-23 18:18 millert
3898 * parse.c, testsudoers.c: Correctly handle multiple privileges per
3899 userspec and runas inheritence.
3901 2004-11-21 14:09 millert
3903 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
3906 2004-11-19 18:04 millert
3908 * toke.c, toke.l: make per-command defaults work with sudoedit
3910 2004-11-19 18:00 millert
3912 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
3913 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
3914 approriate defaults variable.
3916 2004-11-19 17:09 millert
3918 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
3919 Document per-command Defaults.
3921 2004-11-19 16:35 millert
3923 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
3924 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
3925 command-specific Defaults entries. E.g.
3926 Defaults!/usr/bin/vi noexec
3928 2004-11-19 15:03 millert
3930 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
3931 occurence of user_matches() -> runas_matches() missed previously
3932 runas_matches(), host_matches() and cmnd_matches() only really
3933 need to pass in a list of members. user_matches() still needs to
3934 pass in a passwd struct because of "sudo -l"
3936 2004-11-19 14:46 millert
3938 * parse.c: Check def_authenticate, def_noexec and def_monitor when
3939 setting return flags. XXX May be better to just set the defaults
3940 directly and get rid of those flags.
3942 2004-11-19 13:39 millert
3944 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
3945 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
3946 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
3947 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
3948 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
3949 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
3950 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
3951 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
3952 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
3953 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
3954 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3955 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
3956 <config.h> Not: #include "config.h" That way we get the correct
3957 config.h when build dir != src dir
3959 2004-11-19 13:30 millert
3961 * Makefile.in: Back out part of rev 1.263; fix -I order
3963 2004-11-19 13:12 millert
3965 * toke.c, toke.l: More robust parsing if #include; could be much
3968 2004-11-19 12:55 millert
3970 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
3973 2004-11-19 12:35 millert
3975 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
3976 routines out into their own file.
3978 2004-11-19 12:32 millert
3980 * error.h: __attribute__ is already defined in compat.h
3982 2004-11-19 12:30 millert
3984 * visudo.c: quit() should not be __noreturn__ as it is non-void on
3987 2004-11-19 12:24 millert
3989 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
3990 error/warning functions like err/warn but that call an additional
3991 cleanup routine in the error case. This means we no longer need
3992 to compile a special version of alloc.o for visudo.
3994 2004-11-19 11:54 millert
3996 * parse.h: Clarify comments about the data structures
3998 2004-11-18 15:28 millert
4000 * visudo.c: Add support for VISUAL and EDITOR containing command
4001 line args. If env_editor is not set any args in VISUAL and
4002 EDITOR are ignored. Arguments are also now supported in
4005 2004-11-17 14:25 millert
4007 * parse.h: alias_matches() is no more
4009 2004-11-17 14:09 millert
4011 * CHANGES, TODO: sync
4013 2004-11-17 13:19 millert
4015 * Makefile.in: When regenerating the parser, don't replace gram.h
4016 unless it has changed.
4018 2004-11-17 11:56 millert
4020 * Makefile.in: remove Makefile.binary for distclean
4022 2004-11-17 11:18 millert
4024 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4025 to make sure we can't overflow new_env.
4027 2004-11-17 10:33 millert
4029 * sudo_edit.c: paranoia when stripping trailing slashes from
4032 2004-11-16 19:00 millert
4034 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4036 2004-11-16 18:59 millert
4038 * configure, configure.in, config.h.in, sudo.c: Add configure check
4041 2004-11-16 18:55 millert
4043 * ldap.c: Use supplementary group vector in struct sudo_user.
4045 2004-11-16 18:40 millert
4047 * match.c: Only do string comparisons on the group members if there
4048 is no supplemental group list.
4050 2004-11-16 16:10 millert
4052 * CHANGES, TODO: sync
4054 2004-11-16 15:54 millert
4056 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4057 trailing slash so chop off any trailing slashes we see and add an
4060 2004-11-16 12:02 millert
4062 * match.c: remove bogus XXX comment
4064 2004-11-16 11:10 millert
4066 * match.c: Get rid of alias_matches and correctly fall through to
4067 the non-alias cases when there is no alias with the specified
4070 2004-11-16 10:47 millert
4072 * getspwuid.c: Cache non-existent passwd/group entries too.
4074 2004-11-16 10:45 millert
4078 2004-11-15 23:32 millert
4080 * getspwuid.c: fix typo
4082 2004-11-15 23:24 millert
4084 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4085 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4086 Implement group caching and use the passwd and group caches
4089 2004-11-15 14:43 millert
4091 * match.c: Properly negate the return value of alias_matches() when
4094 2004-11-15 14:38 millert
4096 * match.c: Make hostname_matches() return TRUE for a match, else
4097 FALSE like the caller expects.
4099 2004-11-15 13:24 millert
4101 * Makefile.in: Add missing dependencies on gram.h
4103 2004-11-15 13:06 millert
4105 * match.c: Use runas_matches in alias_matches() now that we have
4108 2004-11-15 13:00 millert
4110 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4112 2004-11-15 12:33 millert
4114 * gram.y, match.c: Use ALIAS for the member type when storing an
4115 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4116 match.c relies on the more generic type. Expand runas_matches
4117 instead of calling user_matches() inside of it since
4118 user_matches() looks up USERALIASes, not RUNASALIASes.
4120 2004-11-15 12:05 millert
4122 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4125 2004-11-15 10:53 millert
4127 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4128 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4129 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4130 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4131 local error/warning functions like err/warn but that call an
4132 additional cleanup routine in the error case. This means we no
4133 longer need to compile a special version of alloc.o for visudo.
4135 2004-11-15 09:59 millert
4137 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4138 since the latter checks for "#uid".
4140 2004-11-15 09:53 millert
4142 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4143 db entries in 2 reb-black trees; one indexed by uid, the other by
4144 user name. The data returned from the cache should be considered
4145 read-only and is destroyed by sudo_endpwent().
4147 2004-11-15 09:50 millert
4149 * match.c: add cast to uid_t
4151 2004-11-15 09:49 millert
4153 * gram.y: missing free in alias_destroy
4155 2004-11-15 09:49 millert
4157 * redblack.c: Can't use rbapply() for rbdestroy since the
4158 destructor is passed a data pointer, not a node pointer.
4160 2004-11-14 23:06 millert
4162 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4163 versions of setpwent() and endpwent() that set/end the shadow
4166 2004-11-14 22:55 millert
4168 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4169 visudo.c: Store aliases in a red-black tree.
4171 2004-11-14 22:52 millert
4173 * Makefile.in, redblack.c, redblack.h: red-black tree
4176 2004-11-14 22:37 millert
4178 * visudo.c: Edit all sudoers file if there were unused or undefined
4179 aliases and we are in strict mode.
4181 2004-11-12 11:19 millert
4183 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4184 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4185 Bring back the "secure_path" Defaults option now that Defaults
4186 take effect before the path is searched.
4188 2004-11-11 12:22 millert
4190 * logging.c, parse.c: A user can always list their own entries,
4191 even with -u. Better error message when failing to list another
4194 2004-11-11 12:12 millert
4196 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4197 entries is now "-u otheruser -l". Only root or users with sudo
4198 "ALL" may list other user's entries.
4200 2004-11-11 11:30 millert
4202 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4205 2004-11-11 11:25 millert
4207 * env.c: strip CDPATH too
4209 2004-11-11 11:20 millert
4211 * env.c: strip exported bash functions from the environment.
4213 2004-10-27 12:16 millert
4215 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4216 variables for real commands and sudoedit. This avoids a
4217 confusing message when a user tries "sudo -l" or "sudo -v" and is
4220 2004-10-27 12:06 millert
4222 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4225 2004-10-26 18:39 millert
4227 * logging.c: Convert some bitwise AND to ISSET
4229 2004-10-26 18:29 millert
4231 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4233 2004-10-26 18:29 millert
4235 * CHANGES, TODO: sync
4237 2004-10-26 18:28 millert
4239 * BUGS: new parser fixes most of the outstanding bugs
4241 2004-10-26 18:27 millert
4245 2004-10-26 18:26 millert
4247 * visudo.c: Rework for the new parser. Now checks for unused
4250 2004-10-26 18:25 millert
4252 * testsudoers.c: Rewrite for the new parser. Now supports a -d
4253 flag (dump) and adds a -h flag (host). It now defaults to the
4254 local hostname unless otherwise specified.
4256 2004-10-26 18:23 millert
4258 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4261 2004-10-26 18:22 millert
4263 * sudo.c: Update for new parse. We now call find_path() *after* we
4264 have updated the global defaults based on sudoers. Also adds
4265 support for listing other user's privs if you are root.
4267 2004-10-26 18:21 millert
4269 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4272 2004-10-26 18:20 millert
4274 * logging.c, logging.h: Add NO_STDERR flag.
4276 2004-10-26 18:19 millert
4278 * ldap.c: Split sudo_ldap_check() into three pieces:
4279 sudo_ldap_open(), udo_ldap_update_defaults() and
4280 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4281 default options, find the command in the user's path, and then
4282 check whether the user is allowed to run it. The important thing
4283 here is that the default runas user may be specified as a default
4284 option and that needs to be set before we search for the command.
4286 2004-10-26 18:17 millert
4288 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4291 2004-10-26 18:16 millert
4293 * defaults.h: Add prototype for update_defaults()
4295 2004-10-26 18:16 millert
4297 * defaults.c: Don't warn about line numbers now that we operate on
4298 a set of data structures (or LDAP) and not a file.
4300 2004-10-26 18:15 millert
4302 * config.h.in: No long use lsearch()
4304 2004-10-26 18:14 millert
4306 * Makefile.in: Update for new and changed file names.
4308 2004-10-26 18:14 millert
4310 * LICENSE: no more BSD lsearch.c
4312 2004-10-26 18:14 millert
4314 * match.c: foo_matches() routines now live in match.c Added
4315 user_matches(), runas_matches(), host_matches(), cmnd_matches()
4316 and alias_matches() that operate on the parsed sudoers file.
4318 2004-10-26 18:12 millert
4320 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4321 -> switch_buffer() WORD no longer needs to exclude '@' kill
4324 2004-10-26 18:10 millert
4326 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4327 Rewritten parser that converts sudoers into a set of data
4328 structures. This eliminates ordering issues and makes it
4329 possible to apply sudoers Defaults entries before searching for
4332 2004-10-26 18:09 millert
4334 * configure.in, lsearch.c, emul/search.h: We won't be using
4335 lsearch() any longer.
4337 2004-10-26 18:07 millert
4339 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4342 2004-10-26 16:09 millert
4344 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4345 visudo.man.in: regen
4347 2004-10-26 16:09 millert
4349 * visudo.pod: Update warnings to match new visudo
4351 2004-10-26 16:08 millert
4353 * sudoers.pod: The new parser doesn't have the old ordering
4356 2004-10-26 16:08 millert
4358 * sudo.pod: Document that -l now takes an optional username
4361 2004-10-25 13:44 millert
4363 * RUNSON: AIX 5.2.0.0 works
4365 2004-10-25 13:38 millert
4367 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4368 instead. Fixes a compilation problem with Solaris 9's native
4371 Set FLAG_MONITOR when needed.
4373 2004-10-23 13:32 millert
4375 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4376 match the traced process. Fixes relative paths.
4378 2004-10-21 12:31 millert
4380 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4382 2004-10-13 12:52 millert
4384 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4385 requires set_reuid() or setresuid()
4387 2004-10-13 12:46 millert
4389 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4390 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4391 saved uids; they aren't worth bothering with.
4393 2004-10-07 16:23 millert
4395 * glob.c: remove call to issetugid()
4397 2004-10-07 14:57 millert
4399 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4400 wildcards. Now that we use glob() the bug is fixed.
4402 2004-10-07 14:52 millert
4404 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4405 and stat each result that matches the basename of the user's
4406 command. This makes "cd /usr/bin ; sudo ./blah" work when
4407 sudoers allows /usr/bin/blah. Fixes bug #143.
4409 2004-10-07 14:27 millert
4411 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4412 for extended glob (GLOB_TILDE and GLOB_BRACE)
4414 2004-10-07 12:59 millert
4416 * config.h.in, configure, configure.in: Check for a glob() that
4417 supports GLOB_BRACE and GLOB_TILDE
4419 2004-10-07 12:51 millert
4421 * LICENSE: reference glob
4423 2004-10-07 12:50 millert
4425 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
4426 some unneeded extensions removed.
4428 2004-10-05 17:26 millert
4430 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
4431 fail. It probably means we are out of space in the stack gap...
4433 2004-10-05 17:20 millert
4437 2004-10-05 16:53 millert
4439 * mon_systrace.c: Take a stab at ldap sudoers support here.
4441 2004-10-05 15:13 millert
4443 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
4444 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
4445 inadvertanly kill itself.
4447 2004-10-05 14:21 millert
4449 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
4451 2004-10-05 14:15 millert
4453 * mon_systrace.c: When modifying the environment, don't replace
4454 envp when we can get away with just rewriting pointers in the
4457 2004-10-05 13:46 millert
4459 * mon_systrace.c, mon_systrace.h: Add environment updating via
4460 STRIOCINJECT (if available).
4462 2004-10-05 10:22 millert
4464 * sudoers.cat, sudoers.man.in: regen
4466 2004-10-04 16:15 millert
4470 2004-10-04 16:15 millert
4472 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
4475 2004-10-04 12:09 millert
4477 * mon_systrace.c: Include file is now mon_systrace.h
4479 2004-10-04 12:07 millert
4481 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
4482 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
4483 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
4484 tracing, it is now "monitoring" which should be more a obvious
4485 name to non-hackers.
4487 2004-10-01 15:06 millert
4489 * mon_systrace.c, mon_systrace.h: Fix some XXX
4491 2004-10-01 14:30 millert
4493 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
4494 1024 as the max # of entries (the max that systrace(4) allows).
4496 Only need to use SYSTR_POLICY_ASSIGN once
4498 Change check_syscall() -> find_handler() and have it return the
4499 handler instead of just running it. We need this since handler
4500 now have two parts: one part that generates and answer and
4501 another that gets called after the answer is accepted (to do
4504 Add some missing check_exec for emul execv
4506 2004-10-01 10:58 millert
4508 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
4509 $Sudo: ChangeLog,v 1.19 2008/12/19 17:40:39 millert Exp $ tags.
4511 2004-10-01 10:47 millert
4513 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
4515 2004-09-30 20:46 millert
4517 * Makefile.in: add trace_systrace.o dependency
4519 2004-09-30 19:00 millert
4521 * configure, configure.in: Also look for systrace.h in
4524 2004-09-30 18:27 millert
4526 * mon_systrace.c, mon_systrace.h: Move all struct defs and
4527 prototypes into trace_systrace.h and mark all but
4528 systace_attach() static.
4530 2004-09-30 18:14 millert
4532 * mon_systrace.c, mon_systrace.h: Add support for tracing
4533 emulations. At the moment, all emulations are compiled in. It
4534 might make sense to #ifdef them in the future, though this
4535 impeeds readability.
4537 2004-09-30 17:07 millert
4539 * Makefile.in, configure.in, configure: rename systrace.c ->
4542 2004-09-30 15:58 millert
4544 * parse.yacc: Allow this to build with a K&R compiler again
4546 2004-09-30 13:58 millert
4550 2004-09-30 13:55 millert
4552 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
4554 2004-09-30 13:44 millert
4556 * visudo.c: Exit() takes a negative value to indicate it was not
4559 2004-09-30 13:25 millert
4561 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4562 visudo.man.in: regen
4564 2004-09-30 13:22 millert
4566 * Makefile.in, visudo.c: Define Err() and Errx() that are like
4567 err() and errx() but call Exit() instead of exit(). Build
4568 private copy of alloc.o for visudo that calls Err() and Errx().
4570 2004-09-29 15:22 millert
4574 2004-09-29 15:22 millert
4578 2004-09-29 14:41 millert
4580 * visudo.c: Overhaul visudo for editing multiple files: o visudo
4581 has been broken out into functions (more work needed here) o
4582 each file is now edited before sudoers is re-parsed o if a
4583 #include line is added that file will be edited too
4585 TODO: o cleanup temp files when exiting via err() or errx() o
4586 continue breaking things out into separate functions
4588 2004-09-29 14:36 millert
4590 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
4591 arg to open_sudoers that open_sudoers can use to indicate to the
4592 caller that the fd should not be closed when it is done with it.
4593 To be used by visudo to keep locked fds from being closed
4594 prematurely (and thus losing the lock).
4596 2004-09-29 14:33 millert
4598 * parse.yacc, sudo.c: Add errorfile global that contains the name
4599 of the file that caused the error.
4601 2004-09-29 14:30 millert
4603 * parse.lex: return COMMENT to yacc grammar for a #include line
4605 2004-09-29 14:29 millert
4607 * parse.lex: Remove us of unput() in favor of yyless() which is
4610 2004-09-29 14:28 millert
4612 * parse.yacc: Allow an empty sudoers file.
4614 2004-09-28 16:50 millert
4616 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
4617 doesn't do it for us.
4619 2004-09-28 14:37 millert
4623 2004-09-28 14:36 millert
4625 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
4626 shadow the "quiet" global.
4628 2004-09-28 14:33 millert
4630 * visudo.c: If a sudoers file includes other files, edit those too.
4631 Does not yes deal with creating the new includes files itself.
4633 2004-09-28 14:31 millert
4635 * testsudoers.c: init_parser now takes a path
4637 2004-09-28 14:31 millert
4639 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
4640 dealing with multiple sudoers files: o init_parser() now takes a
4641 path used to populate the sudoers global o the sudoers global is
4642 used to print the correct file in yyerror() o when switching to
4643 a new sudoers file, perserve old file name and line number
4645 2004-09-28 14:29 millert
4647 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
4648 meaningful now that we can have multiple sudoers files.
4650 2004-09-28 13:52 millert
4652 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
4653 sudoers_lookup() so we start at the right file position when
4654 reading include files.
4656 2004-09-27 21:04 millert
4658 * sudoers.pod: document #include
4660 2004-09-27 20:47 millert
4664 2004-09-27 20:47 millert
4666 * parse.lex: Add max depth of 128 for the include stack to avoid
4669 Since yyerror() doesn't stop parsing, pass return values back to
4670 yylex and call yyterminate() on error.
4672 2004-09-27 14:06 millert
4674 * sudoers.pod: document tracing
4676 2004-09-27 14:05 millert
4678 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
4681 2004-09-27 12:08 millert
4685 2004-09-27 12:03 millert
4687 * parse.lex: Add support for #include in sudoers (visudo support
4690 2004-09-27 12:02 millert
4692 * parse.yacc: make yyerror()'s argument const
4694 2004-09-27 12:02 millert
4696 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
4698 2004-09-27 12:01 millert
4700 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
4703 2004-09-26 12:35 millert
4705 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
4706 version.h: Crank version
4708 2004-09-26 12:33 millert
4710 * Makefile.in, sudo.psf: Better HP-UX depot construction
4712 2004-09-25 17:08 millert
4714 * mon_systrace.c: o Made children global so check_exec() can lookup
4715 a child. o Replaced uid in struct childinfo with struct passwd *
4716 (for runas) o new_child() now takes a parent pid so the runas
4717 info can be inherited o Added find_child() to lookup a child by
4718 its pid o update_child() now fills in a struct passwd o Converted
4719 the big if/else mess in set_policy to a switch o Syscalls that
4720 change uid are now "ask" so we get SYSTR_MSG_UGID events
4722 2004-09-25 17:01 millert
4724 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
4725 to lookup the shadow password. Will be used to a struct passwd
4726 that has the shadow password already filled in.
4728 2004-09-25 16:58 millert
4730 * mon_systrace.c: add missing increment of addr in read_string()
4732 2004-09-25 16:15 millert
4734 * mon_systrace.c: Remove bogus call to update_child() and some
4737 2004-09-25 16:11 millert
4739 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
4740 initialized global for simplicity If STRIOCATTACH returns EBUSY
4741 we are already being traced Check for user_args == NULL in
4742 setproctitle() call Add missing calls to STRIOCANSWER
4744 2004-09-25 13:15 millert
4746 * sudo.c: g/c sudo_pwdup proto
4748 2004-09-24 20:21 millert
4750 * Makefile.in, sudo.psf: Add target for building a depot file
4752 2004-09-24 20:07 millert
4754 * mon_systrace.c: trim includes
4756 2004-09-24 14:11 millert
4758 * lex.yy.c, sudo.tab.h: regen
4760 2004-09-24 14:10 millert
4762 * INSTALL: document --with-systrace
4764 2004-09-24 14:10 millert
4766 * config.h.in, configure, configure.in: Add check for setproctitle
4768 2004-09-24 14:09 millert
4770 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
4771 it can set the error code
4773 2004-09-24 13:30 millert
4775 * mon_systrace.c: systrace(4) support for sudo. On systems with
4776 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
4777 patches) sudo can intercept exec calls and check the exec args
4778 against the sudoers file. In other words, sudo can now control
4779 subcommands and shell escapes.
4781 2004-09-24 13:17 millert
4783 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
4785 2004-09-24 13:15 millert
4787 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
4788 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
4790 2004-09-24 13:13 millert
4792 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
4793 close on exec flag instead.
4795 2004-09-24 13:11 millert
4797 * def_data.c, def_data.h, def_data.in: Add trace option
4799 2004-09-23 20:24 millert
4801 * Makefile.in: Add systrace
4803 2004-09-23 20:23 millert
4805 * INSTALL: SunOS /bin/sh blows up with configure
4807 2004-09-23 20:23 millert
4809 * configure, configure.in: Include sys/param.h before systrace.h
4811 2004-09-23 20:15 millert
4815 2004-09-23 20:15 millert
4817 * pathnames.h.in: _PATH_DEV_SYSTRACE
4819 2004-09-23 20:14 millert
4821 * configure.in: line up options in --help
4823 2004-09-23 20:11 millert
4825 * config.h.in, configure.in: Add --with-systrace
4827 2004-09-23 13:35 millert
4831 2004-09-23 13:35 millert
4833 * aclocal.m4, configure.in: make this work with autoconf-2.59
4835 2004-09-16 12:58 millert
4837 * sudo_edit.c: Simplify logic around open & stat of files and do
4838 sanity on edited file even if we lack fstat (still racable but
4841 2004-09-15 18:47 millert
4843 * HISTORY: Add support url
4845 2004-09-15 16:11 millert
4847 * Makefile.in: versino 1.6.8p1
4849 2004-09-15 15:20 millert
4851 * CHANGES: more changes for 1.6.8p1
4853 2004-09-15 15:18 millert
4855 * version.h: 1.6.8p1
4857 2004-09-15 12:16 millert
4859 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
4860 something other than a regular file.
4862 2004-09-14 20:55 aaron
4866 2004-09-14 20:21 aaron
4868 * INSTALL: document --with-ldap-conf-file
4870 2004-09-14 17:43 millert
4872 * CHANGES, ins_csops.h: political correctness strikes again
4874 2004-09-14 15:09 millert
4878 2004-09-12 19:50 millert
4880 * Makefile.binary.in, Makefile.in: Install sudoedit man link
4882 2004-09-12 14:25 millert
4884 * INSTALL: Update PAM note and mention where HP-UX users can
4885 download gcc binaries.
4887 2004-09-12 12:08 millert
4889 * Makefile.in: libtool wants to install stuff from .libs so fake
4890 one up for binary installations.
4892 2004-09-12 11:53 millert
4894 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
4895 -f set LIBTOOL correctly
4897 2004-09-12 11:53 millert
4899 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
4900 sudoedit link instead of using ln -f
4902 2004-09-12 10:22 millert
4904 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
4905 Makefile.binary.in for config.status substitution Add support for
4906 installing noexec bits
4908 2004-09-12 10:21 millert
4910 * Makefile.in: Copy noexec bits into binary dists too No longer use
4911 my old arch script for making binary dists
4913 2004-09-12 09:36 millert
4915 * Makefile.binary: Install sudoedit link.
4917 2004-09-11 12:25 millert
4919 * emul/utime.h: avoid __P so there is no need for compat.h to be
4922 2004-09-11 12:24 millert
4924 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
4926 2004-09-10 12:31 millert
4928 * compat.h: Fix Solatis futimes macro
4930 2004-09-09 11:02 millert
4932 * sudo_edit.c: Rename ots -> omtim for improved readability.
4934 2004-09-08 14:38 millert
4936 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
4937 keep the temp file open; re-opening it with the invoking user's
4940 2004-09-08 14:36 millert
4944 2004-09-08 14:35 millert
4946 * sudo.cat, sudo.man.in: regen
4948 2004-09-08 14:34 millert
4950 * sudo.pod: back out revision 1.70; it is no long applicable
4952 2004-09-08 11:57 millert
4954 * env.c: Let the loader initialize nep
4956 2004-09-08 11:49 millert
4958 * configure, configure.in, config.h.in: Removed unneed check for
4959 fchown Add check for gettimeofday Move autoheader template stuff
4960 into separate AH_TEMPLATE lines
4962 2004-09-08 11:48 millert
4964 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
4965 timespec throughout.
4967 2004-09-08 11:47 millert
4969 * Makefile.in: gettime.[co]
4971 2004-09-08 11:47 millert
4973 * gettime.c: function to return the current time in a struct
4976 2004-09-08 10:51 millert
4978 * utimes.c: Not a darpa-sponsored file.
4980 2004-09-07 16:36 millert
4982 * compat.h, config.h.in, configure, configure.in: Add a check for
4983 struct timespec and provide it for those without.
4985 2004-09-07 15:56 millert
4987 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
4988 st_mtim and st_mtimespec and add macros for pulling the mtime sec
4989 and nsec out of struct stat. These are used in sudo_edit() to
4990 better tell whether or not the file has changed.
4992 2004-09-07 15:55 millert
4994 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
4995 param to touch() for nsec
4997 2004-09-07 14:06 millert
4999 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5000 have to chown the file later. Only touch() the temp file if we
5001 can do it via the file descriptor. Don't check for modification
5002 of the temp file if we lack fstat(). Catch errors read()ing the
5005 2004-09-07 14:04 millert
5007 * fileops.c: If path is NULL and fd == -1 return -1.
5009 2004-09-07 13:31 millert
5011 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5012 ones we opened so just close those in the child.
5014 2004-09-07 13:14 millert
5016 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5017 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5018 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5019 in touch(), emulating as needed. Not all systems are able to
5020 support setting the times of an fd so touch() takes both an fd
5021 and a file name as arguments.
5023 2004-09-06 21:12 aaron
5027 2004-09-06 16:46 millert
5029 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5030 visudo.man.in: regen
5032 2004-09-06 16:45 millert
5034 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5035 re-order some of the sections to match the order we use in
5038 2004-09-06 15:05 aaron
5040 * env.c: Openldap ~/.ldaprc fix
5042 2004-09-06 12:18 millert
5044 * sudo.pod: Talk about how the editor must write its changes to the
5045 original file and not just use rename(2).
5047 2004-09-06 12:12 millert
5051 2004-09-06 12:11 millert
5053 * sudo_edit.c: Keep the temp file open instead of re-opening after
5054 the editor has exited.
5056 2004-09-06 12:10 millert
5058 * sample.pam: Update for current redhat/fedora core.
5060 2004-09-02 21:56 aaron
5062 * README.LDAP: tls_ examples
5064 2004-09-02 00:03 aaron
5066 * ldap.c: config tls_* options
5068 2004-08-29 11:39 millert
5070 * configure, configure.in: No need for -lcrypt when using pam.
5072 2004-08-26 23:57 millert
5076 2004-08-26 23:44 aaron
5078 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5079 option to override LDAP_CONF
5081 2004-08-26 22:08 aaron
5083 * ldap.c: cleanup debug message
5085 2004-08-26 19:29 aaron
5087 * README.LDAP: more config info
5089 2004-08-24 14:01 millert
5091 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5092 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5093 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5094 longer use gross statics in command_matches(). Also rename some
5095 variables for improved clarity.
5097 2004-08-21 14:33 millert
5099 * INSTALL: document HP's crippled compiler deficiency.
5101 2004-08-21 14:25 millert
5103 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5104 descriptions. Noticed by Norihiko Murase.
5106 2004-08-21 14:20 millert
5108 * configure, configure.in: --with-noexec takes an optional PATH
5111 2004-08-21 14:20 millert
5113 * INSTALL: document --with-noexec
5115 2004-08-17 16:21 millert
5117 * RUNSON, TODO: sync
5119 2004-08-17 15:11 millert
5121 * sudo_edit.c: Better warning message when sudoedit is unable to
5122 write to the destination file.
5124 2004-08-17 14:53 millert
5126 * sudo.cat, sudo.man.in: regen
5128 2004-08-17 14:53 millert
5130 * sudo.pod: Don't italicize the string "sudoedit"
5132 2004-08-16 18:45 millert
5134 * HISTORY: Mention GratiSoft.
5136 2004-08-11 14:29 millert
5138 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5141 2004-08-09 19:04 millert
5143 * config.guess: Correct OpenBSD mips support
5145 2004-08-09 17:28 millert
5147 * config.guess: Add OpenBSD/mips
5149 2004-08-06 23:43 aaron
5151 * README.LDAP: More behavior notes
5153 2004-08-06 23:36 aaron
5155 * README.LDAP: Updates on current behavior
5157 2004-08-06 19:56 millert
5159 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5160 no difference to formatted files).
5162 2004-08-06 19:48 millert
5166 2004-08-06 19:42 millert
5168 * sudo.c: Consistency. Use same error for bad -u #uid when
5169 targetpw is set as we do when a bad -u username is specified.
5171 2004-08-06 19:33 millert
5173 * TODO: Add checksum idea from Steve Mancini
5175 2004-08-06 19:32 millert
5177 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5179 2004-08-06 19:31 millert
5181 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5182 via -u when targetpw is set.
5184 2004-08-06 19:24 millert
5186 * sudo.c: Error out when targetpw is enabled and sudo is run with
5187 -u #uid but #uid does not exist in the passwd database. We can't
5188 do target authentication when the target is not in passwd!
5190 2004-08-05 21:16 millert
5192 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5194 2004-08-05 21:14 millert
5196 * TODO: Some more todo for the next release.
5198 2004-08-05 21:13 millert
5200 * INSTALL: Make it clear that PAM should be used for DCE support
5203 2004-08-05 21:13 millert
5205 * sudoers.pod: o Document problems with wildcards and relative
5206 paths. o Make the order requirements more prominent. o Change a
5207 "set" to "reset" for clarity.
5209 2004-08-05 14:29 millert
5211 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5213 2004-08-02 22:34 aaron
5215 * ldap.c: reflect changes to parse.c
5217 2004-08-02 14:44 millert
5219 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5220 user_cmnd and user_args to command_matches(), just use the
5221 globals there. Since we keep state with statics anyway it is
5222 misleading to pretend that passing in different cmnd and
5223 cmnd_args will work.
5225 2004-08-02 14:40 millert
5227 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5228 pseudo-commands check for a '/' anywhere in cmnd, not just the
5231 2004-07-30 23:07 aaron
5233 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5234 <oblin@mandrakesoft.com>
5236 2004-07-30 22:41 aaron
5238 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5240 2004-07-30 22:06 aaron
5242 * README.LDAP: Sun One schema definition by
5243 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5245 2004-07-29 11:57 millert
5249 2004-07-23 16:44 millert
5253 2004-07-23 16:43 millert
5255 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5256 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5259 2004-07-08 10:20 millert
5261 * CHANGES: PAM change
5263 2004-07-07 21:04 aaron
5265 * ldap.c: Better debugging of ALL command
5267 2004-07-07 20:15 millert
5269 * parse.c: When matching for "sudoedit" in sudoers check both the
5270 command the user typed *and* the command that is listed in the
5273 2004-07-04 19:59 aaron
5275 * ldap.c: Added !command feature
5277 2004-06-28 10:51 millert
5279 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5282 2004-06-10 23:11 millert
5284 * LICENSE: License is ISC-style, not BSD-style
5286 2004-06-10 20:58 millert
5290 2004-06-10 16:54 millert
5292 * sudo.man.in, sudo.cat: regen
5294 2004-06-10 16:53 millert
5296 * sudo.pod: o Update some out of date bits to reality o Change the
5297 shell promt in examples to bourne-shell style o Clarify some
5298 details o Add a CAVEAT about "sudo cd /foo"
5300 2004-06-10 16:19 millert
5302 * check.c: Don't ask for a password if invoking user == target
5305 2004-06-10 12:32 millert
5307 * sudo.c: typo in comment
5309 2004-06-08 19:20 millert
5311 * sudoers.man.in, sudoers.cat: regen
5313 2004-06-08 19:19 millert
5315 * sudoers.pod: Expand on NOEXEC a little.
5317 2004-06-08 16:20 millert
5321 2004-06-08 15:58 millert
5323 * visudo.man.in, visudo.cat: regen
5325 2004-06-08 15:55 millert
5327 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5328 for runas_default being set after it has already been used.
5330 2004-06-08 13:53 millert
5332 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5333 has been set to TRUE or FALSE. This is more readable than
5334 checking for >=0 or < 0. Doesn't change the actual code
5337 2004-06-06 20:11 millert
5339 * sudoers.man.in, sudoers.cat: regen
5341 2004-06-06 20:07 millert
5343 * sudoers, sudoers.pod: Correct description of where Defaults specs
5346 2004-06-06 20:02 millert
5348 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5349 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5351 2004-06-06 19:58 millert
5353 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5354 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5355 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5356 Remove trailing spaces, no actual code changes.
5358 2004-06-06 16:22 millert
5360 * parse.yacc: Fix a >=0 that should be <0 that was improperly
5361 converted when UNSPEC was added.
5363 2004-06-06 15:54 millert
5365 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5366 to UNSPEC, not NOMATCH when resetting it.
5368 2004-06-06 15:39 millert
5370 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5372 2004-06-05 13:55 millert
5374 * README.LDAP: Update for configure changes
5376 2004-06-05 13:42 millert
5378 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5379 respectively) and use these in parse.yacc. Also in parse.yacc
5380 initialize the *_matches vars to UNSPEC and add two macros,
5381 SETMATCH and SETNMATCH for use when setting *_matches to a value
5382 that may be NOMATCH/UNSPEC/TRUE/FALSE.
5384 2004-06-05 11:17 millert
5386 * parse.yacc: Initialize runas to -2, not -1 since we need to be
5387 able to distinguish between the initialized value and the value
5388 of a non-match when passing along the runas value to multiple
5391 The result of this is that an unmatched runas is now set to -1,
5392 not 0. This is required now that parse.c treats a FALSE value
5393 for runas as being explicitly denied.
5395 2004-06-03 16:21 millert
5397 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5399 2004-06-03 12:37 millert
5401 * configure, configure.in: Add tests for what libs we need to link
5402 with for ldap and for whether or not lber.h needs to be
5403 explicitly included.
5405 2004-06-02 20:30 aaron
5407 * ldap.c: Solaris native LDAP build fix
5409 2004-06-01 16:56 millert
5411 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5412 use of an unset variable.
5414 2004-06-01 16:56 millert
5416 * sudo.h: Add prototype for sudo_ldap_list_matches
5418 2004-06-01 16:53 millert
5420 * compat.h, config.h.in, configure, configure.in: Better check for
5421 dirfd macro--we now set HAVE_DIRFD for the macro version too.
5422 Added check for dd_fd in `DIR' if no dirfd is found; this is now
5423 used to confitionally define the dirfd macro in compat.h.
5425 2004-06-01 16:51 millert
5427 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
5430 2004-06-01 15:13 millert
5432 * compat.h, config.h.in, configure, configure.in: Add a check for a
5433 dirfd() function (like Linux) and add a dirfd macro in compat.h
5434 if there is no dirfd() function or macro.
5436 2004-06-01 14:59 millert
5438 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
5441 2004-06-01 14:30 millert
5443 * CHANGES: Clarify closefrom() note.
5445 2004-06-01 12:51 millert
5447 * parse.c: When checking for a command in the directory, only copy
5450 2004-06-01 12:44 millert
5452 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
5453 Solaris closefrom() and only close the descriptors listed
5456 2004-06-01 12:23 millert
5458 * alloc.c: compat.h guarantees INT_MAX is defined.
5460 2004-06-01 12:23 millert
5462 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
5463 without it and remove definition of RLIM_INFINITY (now unused).
5465 2004-05-31 21:22 millert
5467 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
5468 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
5469 since the former is standardized.
5471 2004-05-31 19:18 millert
5475 2004-05-31 19:10 millert
5477 * RUNSON: Add some entries that were mailed in a while ago
5479 2004-05-31 14:16 millert
5481 * closefrom.c: o sysconf returns a long, not an int. o check for
5482 negative return value from sysconf/getdtablesize and use
5483 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
5484 without it (a fair guess...)
5486 2004-05-30 12:25 millert
5488 * UPGRADE: Mention change in parse order for RunAs entries.
5490 2004-05-30 12:15 millert
5494 2004-05-29 18:29 millert
5496 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
5497 now takes an optional dir as a parameter
5498 o added check for ldap_initialize() and start_tls_s()
5500 2004-05-29 14:54 millert
5502 * README.LDAP: Fix some typos, word choice and formatting issues.
5504 2004-05-28 18:06 millert
5506 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
5507 stdio and just use read/write as it is simpler.
5509 2004-05-28 16:27 millert
5511 * configure, configure.in: Remove hack overriding cross-compiler
5512 check. It should no longer be needed.
5514 2004-05-28 16:26 millert
5516 * compat.h: Remove select() compat bits since we no longer use
5519 2004-05-28 16:24 millert
5521 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
5522 timeout for systems that don't fully/properly implement select().
5524 2004-05-27 19:14 millert
5528 2004-05-27 19:12 millert
5532 2004-05-27 19:12 millert
5534 * set_perms.c: Deal with systems that have no way of setting the
5535 effective uid such as nsr-tandem-nsk.
5537 2004-05-27 19:01 millert
5539 * configure, configure.in: Define NO_SAVED_IDS if we don't find
5542 2004-05-27 18:21 millert
5544 * config.h.in, configure, configure.in: Add back check for
5545 setreuid() since NSK doesn't have it.
5547 2004-05-27 15:57 millert
5549 * sudoers.cat, sudoers.man.in: regen
5551 2004-05-27 15:56 millert
5553 * BUGS, CHANGES: sync
5555 2004-05-27 15:55 millert
5557 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
5558 user was explicitly denied and the command matched. This fixes a
5559 long-standing bug and makes: foo machine = (ALL)
5560 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
5562 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
5564 2004-05-27 15:52 millert
5566 * sudoers.pod: Clarify mail_noperm
5568 2004-05-19 21:25 aaron
5570 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
5572 2004-05-17 18:32 millert
5574 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
5575 sudoers.cat, visudo.cat: regen
5577 2004-05-17 18:31 millert
5581 2004-05-17 18:31 millert
5583 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
5584 remembers these?) and add a minimal sudoedit example.
5586 2004-05-17 18:21 millert
5588 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
5589 filesystem -> file system
5591 2004-05-17 18:19 millert
5593 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
5595 2004-05-17 18:10 millert
5599 2004-05-17 17:57 millert
5601 * visudo.pod: remove my email addr
5603 2004-05-17 17:55 millert
5605 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
5606 @mansectsu@ everywhere Make man page references links with L<>
5608 2004-05-17 16:51 millert
5610 * parse.lex: Accept quoted globbing characters and pass them
5611 verbatim for fnmatch()
5613 2004-05-17 16:50 millert
5615 * UPGRADE: Document that /tmp/.odus is gone.
5617 2004-05-17 16:28 millert
5619 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
5620 /tmp/.odus as a possible timestamp dir unless specifically
5621 configured to do so. Instead, if no /var/run exists, use
5622 /var/adm/sudo or /usr/adm/sudo.
5624 2004-05-17 16:08 millert
5626 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
5627 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
5628 on patches from Tom Bates.
5630 2004-05-16 18:47 millert
5632 * CHANGES: There was no 1.6.7p6.
5634 2004-05-16 16:38 millert
5636 * BUGS, CHANGES: sync
5638 2004-05-16 16:36 millert
5640 * Makefile.in: add missing files to DISTFILES
5642 2004-05-16 16:23 millert
5644 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
5646 2004-05-16 16:20 millert
5648 * Makefile.in: Fix some line wrap and update (c) year
5650 2004-04-28 15:05 aaron
5652 * README.LDAP: Build Note
5654 2004-04-06 22:03 aaron
5656 * Makefile.in: Fix install-dirs
5658 2004-04-04 20:27 millert
5660 * visudo.c: In Exit() when used as a signal handler, emsg is a
5661 pointer so sizeof() is wrong so make it a #define instead. Also
5662 avoid using a negative exit value. Found by Aaron Campbell
5664 2004-03-24 18:23 millert
5666 * sudoers.pod: Remove bogus sentence about uids in a User_List.
5667 Document usernames vs. uid parsing in a Runas_List.
5669 2004-03-24 18:06 millert
5671 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
5672 the user specified a uid with the -u flag and the uid exists in
5673 the passwd file, set runas_user to the name, not the uid.
5675 When comparing usernames in sudoers, if a name is really a uid
5676 (starts with '#') compare it numerically to pw_uid.
5678 2004-03-22 13:35 millert
5680 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
5682 2004-02-28 18:54 aaron
5684 * CHANGES, config.h.in, ldap.c: Added start_tls support
5686 2004-02-14 18:04 millert
5688 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
5689 def_data.c, def_data.h to PARSESRCS.
5691 2004-02-14 10:13 aaron
5693 * strlcat.c, strlcpy.c: Un-Fix last license munge
5695 2004-02-13 16:37 millert
5697 * CHANGES, RUNSON, TODO: checkpoint
5699 2004-02-13 16:37 millert
5701 * lex.yy.c, configure: regen
5703 2004-02-13 16:36 millert
5705 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
5706 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
5707 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
5708 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
5709 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
5710 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
5711 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
5712 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
5713 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
5714 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
5715 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
5716 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
5717 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
5718 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
5719 emul/search.h, emul/utime.h: More to a less restrictive,
5722 2004-02-12 21:08 aaron
5724 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
5725 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
5726 sudoers2ldif: Merged in LDAP Support
5728 2004-02-08 15:53 millert
5730 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
5733 2004-02-06 18:08 millert
5735 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
5736 already 0 so set the euid first, then just call setuid(0) to set
5739 2004-02-06 14:52 millert
5741 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
5742 appropriate instead of seteuid() which may not exist.
5744 2004-02-04 14:58 millert
5748 2004-02-03 23:38 millert
5750 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
5751 --with-pc-insults configure option
5753 2004-02-03 23:32 millert
5755 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
5757 2004-02-01 15:45 millert
5759 * sudo.man.in, sudoers.man.in: regen
5761 2004-02-01 15:44 millert
5763 * sudoers.pod: Add a note that noexec is not a cure-all.
5765 2004-02-01 15:20 millert
5767 * sudoers.pod: Mention that disabling "root_sudo" is pretty
5770 2004-02-01 15:20 millert
5772 * configure, configure.in: Substitute for root_sudo in sudoers.pod
5774 2004-02-01 15:03 millert
5776 * sudo.pod: Add sudoedit to the NAME section
5778 2004-02-01 15:00 millert
5780 * sudoers.pod: Document that fact that setting ignore_dot in
5781 sudoers has no effect due to the fact that find_path() is called
5782 *before* sudoers is read.
5784 2004-01-29 19:50 millert
5786 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
5788 2004-01-29 19:42 millert
5790 * BUGS, CHANGES, TODO: sync
5792 2004-01-29 19:42 millert
5794 * sudo.man.in: regen
5796 2004-01-29 19:41 millert
5798 * sudo.pod: Clarify that when sudo is run by root with the
5799 SUDO_USER variable set, the sudoers lookup happens for root and
5800 not the SUDO_USER user.
5802 2004-01-29 17:33 millert
5804 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
5805 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
5806 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
5808 2004-01-29 16:22 millert
5810 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
5812 2004-01-29 16:15 millert
5814 * sudo.c: Don't look at prev_user until after we've parsed sudoers
5815 and done the password check. That way, if sudo/sudoedit is run
5816 from a root process that was invoked by sudo, we check sudoers
5817 for root, not the previous user. This makes sudoedit much more
5818 useful and means that for the sudo case, we get correct logging
5819 on who actually ran the command.
5821 2004-01-22 19:22 millert
5823 * sudo_edit.c: Add a comment describing why we need to be notified
5824 about our child stopping.
5826 2004-01-22 16:06 millert
5828 * def_data.c, def_data.in: Update the noexec variable descriptions
5830 2004-01-22 14:18 millert
5832 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
5835 2004-01-22 12:14 millert
5837 * sudo_noexec.c: Alas, all the world does not go through execve(2).
5838 Many systems still have an execv(2) system call, Linux 2.6
5839 provides fexecve(2) and it is not uncommon for libc to have
5840 underscore ('_') versions of the functions to be used internally
5841 by the library. Instead of stubbing all these out by hand,
5842 define a macro and let it do the work. Extra exec functions
5843 pointed out by Reznic Valery.
5845 2004-01-21 21:57 millert
5847 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
5848 Because we do a fork() first we need to be notified when the
5849 child has been stopped and then send that same signal to ourself
5850 so the shell can do its job control thing.
5852 2004-01-21 21:44 millert
5854 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
5855 systems out there that want to run sudo that still don't support
5856 these we can try to deal with that later.
5858 2004-01-21 20:03 millert
5862 2004-01-21 20:00 millert
5864 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
5867 2004-01-21 19:08 millert
5869 * configure, configure.in: fix typo
5871 2004-01-21 19:02 millert
5873 * config.h.in, configure.in: Add SET/CLR/ISSET
5875 2004-01-21 18:55 millert
5877 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
5878 Pretty print the long usage() line to not wrap (assumes 80 char
5881 2004-01-21 18:01 millert
5883 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
5884 is implied and no other flags are permitted.
5886 2004-01-21 18:00 millert
5888 * sudo.h: Add a new flag, -e, that makes it possible to give users
5889 the ability to edit files with the editor of their choice as the
5890 invoking user, not the runas user. Temporary files are used for
5891 the actual edit and the temp file is copied over the original
5892 after the editor is done.
5894 2004-01-21 17:25 millert
5896 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
5897 flag, -e, that makes it possible to give users the ability to
5898 edit files with the editor of their choice as the invoking user,
5899 not the runas user. Temporary files are used for the actual edit
5900 and the temp file is copied over the original after the editor is
5903 2004-01-21 17:06 millert
5905 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
5906 variables is set, use that to determine the invoking user's true
5907 identity. That way the proper info gets logged by someone who
5908 has done "sudo su" but still uses sudo to as root. We can't do
5909 this for non-root users since that would open up a security hole,
5910 though perhaps it would be acceptable to use getlogin(2) on OSes
5911 where this a system call (and doesn't just look in the utmp
5914 2004-01-21 16:58 millert
5916 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
5918 2004-01-21 16:57 millert
5920 * configure, config.h.in, configure.in: Add check for fchown(2)
5922 2004-01-20 14:22 millert
5924 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
5925 set_runaspw. It is far to late to set NewArgv[0] there and will
5926 have no effect anyway as cmnd and safe_cmnd have already been
5929 2004-01-20 14:18 millert
5931 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
5934 2004-01-18 20:17 millert
5936 * env.c, sudo.c: In -i mode always set new environment based on the
5937 runas user's passwd entry.
5939 2004-01-18 17:56 millert
5941 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
5942 section with usage() in sudo.c. Also sort the flags in the
5945 2004-01-18 17:55 millert
5947 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
5948 patches from David J. MacKenzie o Sort the flags in the usage
5951 2004-01-18 17:22 millert
5953 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
5956 2004-01-17 16:34 millert
5958 * sudo.c: Change euid to runas user before calling find_path().
5959 Unfortunately, though runas_user can be modified in sudoers we
5960 haven't parsed sudoers yet.
5962 2004-01-17 16:25 millert
5964 * sudoers.man.in, sudoers.pod: Add missing defintion of
5965 Parameter_List and use single pipes in the Defaults EBNF
5968 2004-01-17 13:49 millert
5970 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
5971 don't want to reset the contents of runas_pw if the user
5972 specified a user via the -u flag.
5974 Avoid unnecessary passwd lookups in set_authpw(). In most cases
5975 we already have the info in runas_pw.
5977 2004-01-16 18:16 millert
5979 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
5982 2004-01-16 18:12 millert
5984 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
5986 2004-01-16 18:10 millert
5988 * parse.c: If we can't stat the command as root, try as the runas
5991 2004-01-16 18:09 millert
5993 * testsudoers.c, visudo.c: Add stub set_runaspw() function
5995 2004-01-16 18:09 millert
5997 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
5998 will be used as a callback to update runas_pw when the runas user
6001 2004-01-16 18:07 millert
6003 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6005 2004-01-16 18:05 millert
6007 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6008 a PERM_RUNAS that just changes the euid.
6010 2004-01-16 18:04 millert
6012 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6013 allocate memory in one chunk for easy free()ing. Also change it
6014 from static to extern.
6016 2004-01-16 18:03 millert
6018 * defaults.c, defaults.h: Add callback support
6020 2004-01-16 18:02 millert
6022 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6023 it for runas_default
6025 2004-01-15 15:13 millert
6027 * auth/fwtk.c: Add support for chalnecho and display server
6028 responses used by fwtk >= 2.0
6030 2004-01-12 18:39 millert
6032 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6034 2004-01-12 14:03 millert
6036 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6037 sudo.h: Use closefrom() instead of doing the equivalent inline.
6039 2004-01-12 13:55 millert
6041 * closefrom.c: closefrom(3) for systems w/o it
6043 2004-01-09 16:29 millert
6045 * sudoers.man.in: Update from .pod file.
6047 2004-01-09 16:26 millert
6049 * configure, configure.in: Substitute noexec_file for the sudoers
6052 2004-01-09 16:24 millert
6054 * sudo.man.in, sudo.pod: Mention noexec
6056 2004-01-09 16:16 millert
6058 * sudoers.man.in, sudoers.pod: Document noexec
6060 2004-01-09 14:38 millert
6062 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6063 definition from config.h to pam.c where it belongs. We can't
6064 have this in config.h since that gets included too early.
6066 2004-01-09 14:35 millert
6068 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6069 implementations put their headers in /usr/include/pam instead of
6070 /usr/include/security.
6072 2004-01-09 14:32 millert
6074 * configure.in: I missed changing the EXEC macro -> EXECV here when
6075 I changed this in config.h.in and sudo.c a while ago.
6077 2004-01-09 13:15 millert
6079 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6081 2004-01-09 03:29 millert
6083 * configure, configure.in: o merge the hpux case entries into a
6084 single entry w/ its own sub-case statement. o HP-UX >= 11
6085 support getspnam(), use it in preference to getprpwuid()
6087 2004-01-09 02:58 millert
6089 * configure, configure.in: eval $shrext so that it expands nicely
6092 2004-01-09 02:50 millert
6094 * Makefile.in: Don't lie about making a module, it does the wrong
6097 2004-01-09 02:49 millert
6099 * ltmain.sh: Remove requirement that libs must begin with "lib".
6100 They don't when we point directly at the lib using LD_PRELOAD or
6103 2004-01-09 02:01 millert
6105 * acsite.m4: Disable support for c++, f77 and java. We don't need
6106 it, it takes a lot of time, and it hosed our check for shared lib
6109 2004-01-09 02:00 millert
6113 2004-01-09 02:00 millert
6115 * configure.in: Call AC_ENABLE_SHARED and check the status of
6116 enable_shared to know when shared libs are available.
6118 2004-01-09 01:37 millert
6120 * acsite.m4: Duh, OpenBSD suports shared libs too
6122 2004-01-09 01:18 millert
6124 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6127 2004-01-09 01:15 millert
6129 * configure, configure.in: o No need to check for sed, libtool
6130 config does that for us o move check for --with-noexec until
6131 after libtool magic is run so we can use $can_build_shared and
6134 2004-01-09 01:14 millert
6136 * ltmain.sh: Don't print a bunch of crap about library installs
6137 since we are not really installing a library.
6139 2004-01-09 00:38 millert
6141 * env.c: Make format_env() varargs Add noexec support for Darwin,
6142 MacOS X, Irix, and Tru64
6144 2004-01-09 00:32 millert
6146 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6147 changes: o no ldconfig in the finish step o assume no libprefix
6148 or version is needed
6150 2004-01-09 00:15 millert
6152 * sudo_noexec.c: Fix compilation under K&R
6154 2004-01-06 09:31 millert
6156 * CHANGES: checkpoint
6158 2004-01-06 09:28 millert
6160 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6161 noexec functionality
6163 2004-01-06 01:42 millert
6165 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6166 issue with generated code.
6168 2004-01-05 16:10 millert
6170 * def_data.c, def_data.h, def_data.in: Move the environment
6171 defaults to the end and shorten a few of the descriptions.
6173 2004-01-05 15:05 millert
6175 * configure.in, configure: no shared libs on ultris or convexos
6177 2004-01-05 15:03 millert
6179 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6180 object using libtool; could use some cleanup.
6182 2004-01-05 14:59 millert
6184 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6186 2004-01-05 14:56 millert
6188 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6189 that order is not important.
6191 2004-01-05 12:15 millert
6193 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6194 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6196 2004-01-04 22:58 millert
6198 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6199 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6200 option. The default value of noexec_file is set to this.
6202 2004-01-04 21:48 millert
6204 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6205 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6206 support for preloading a shared object containing a dummy
6207 execve() function that just sets error and returns -1. This adds
6208 a "noexec_file" option to load the filename as well as a "noexec"
6209 flag to enable it unconditionally. There is also a NOEXEC tag
6210 that can be attached to specific commands and an EXEC tag to
6213 2004-01-04 21:40 millert
6215 * mkdefaults: add missing newline to usage statement
6217 2004-01-04 20:39 millert
6219 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6221 2004-01-04 20:16 millert
6223 * logging.c: Don't truncate usernames to 8 characters in the log
6226 2004-01-04 20:13 millert
6228 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6230 2004-01-04 20:12 millert
6232 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6233 sudoers.pod: Add a new option, lecture_file, that can be used to
6234 point to a custom sudo lecture.
6236 2003-12-31 17:46 millert
6238 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6239 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6240 zero_bytes() function to do the equivalent of bzero in such a way
6241 that will heopfully not be optimized away by sneaky compilers.
6243 2003-12-31 13:35 millert
6245 * err.c: Use #ifdef __STDC__, not #if __STDC__.
6247 2003-12-30 17:41 millert
6249 * mkdefaults: Always put at least one space between the def_* macro
6250 name and its definition.
6252 2003-12-30 17:34 millert
6254 * configure, configure.in: Adjust code for --without-lecture to
6257 2003-12-30 17:33 millert
6259 * visudo.man.in: regen after pasto fix
6261 2003-12-30 17:31 millert
6263 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6264 from a flag to a tuple.
6266 2003-12-30 17:31 millert
6268 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6269 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6270 support for tuples in def_data.in; these are implemented as an
6271 enum type. Currently there is only a single tuple enum but in
6272 the future we may have one tuple enum per T_TUPLE entry in
6273 def_data.in. Currently listpw, verifypw and lecture are tuples.
6274 This avoids the need to have two entries (one ival, one str) for
6275 pwflags and syslog values.
6277 lecture is now a tuple with the following values: never, once,
6280 We no longer use both an int and string entry for syslog
6281 facilities and priorities. Instead, there are logfac2str() and
6282 logpri2str() functions that get used when we need to print the
6285 2003-12-30 17:20 millert
6287 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6288 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6289 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6290 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6291 auth/sudo_auth.c: Create def_* macros for each defaults value so
6292 we no longer need the def_{flag,ival,str,list,mode} macros (which
6293 have been removed). This is a step toward more flexible data
6294 types in def_data.in.
6296 2003-12-30 15:55 millert
6300 2003-12-22 21:18 millert
6302 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6303 unusual for users to place "sudo -k" in a .logout file which can
6304 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6305 daemon has died. Previously, this would result in useless mail
6308 2003-12-16 13:51 millert
6310 * visudo.pod: fix pasto in VISUAL description
6312 2003-12-09 22:09 millert
6316 2003-12-09 22:08 millert
6318 * CHANGES: checkpoint
6320 2003-12-09 22:02 millert
6322 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6325 2003-08-12 16:45 millert
6327 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6330 2003-06-28 21:31 millert
6332 * auth/pam.c: Fix a core dump on Solaris by preserving the
6333 pam_handle_t we used during authentication for pam_prep_user().
6334 If we didn't authenticate (ie: ticket still valid), we call
6335 pam_init() from pam_prep_user(). This is something of a hack; it
6336 may be better to change the auth API and add an auth_final()
6337 function that acts like pam_prep_user().
6339 2003-06-21 12:50 millert
6341 * set_perms.c: Add explicit declaration of printerr variable in
6342 function header (was defaulting to int which is OK but oh so K&R
6345 2003-06-09 19:00 millert
6347 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6349 2003-06-09 16:07 millert
6351 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6352 problem where the sudo process would spin eating up CPU until
6353 sendmail finished when it has to send mail.
6355 2003-05-30 16:22 millert
6357 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6360 2003-05-21 21:53 millert
6362 * parse.c: Don't assume that getgrnam() calls don't modify contents
6363 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6364 can happen. Based on a patch from Kirk Webb.
6366 2003-05-06 11:25 millert
6368 * configure.in: missing ;;
6370 2003-05-06 00:53 millert
6372 * configure.in: darwin has a broken setreuid() in at least some
6375 2003-05-06 00:31 millert
6377 * env.c: Fix an off by one error when reallocating the environment;
6380 2003-04-30 14:04 millert
6382 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6384 2003-04-28 19:30 millert
6386 * HISTORY: More info on the early days from Coggs.
6388 2003-04-21 14:47 millert
6390 * auth/kerb5.c: remove errant semicolon that prevented compilation
6393 2003-04-15 20:42 millert
6395 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6396 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6397 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6398 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6399 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6400 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6401 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6402 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6403 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6404 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6405 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6408 2003-04-15 20:25 millert
6410 * LICENSE: slightly different wording for the darpa credit
6412 2003-04-15 14:37 millert
6414 * LICENSE: Add DARPA credit
6416 2003-04-14 16:49 millert
6418 * auth/kerb5.c: Use krb5_princ_component() instead of
6419 krb5_princ_realm() for MIT Kerberos like we did before I messed
6422 Use krb5_principal_get_comp_string() to do the same thing w/
6423 Heimdal. I'm not sure if the component should be 0 or 1 in this
6426 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
6427 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
6428 should be a configure check for this I guess.
6430 2003-04-13 15:48 millert
6432 * TROUBLESHOOTING, config.h.in, configure, configure.in,
6433 sample.sudoers: builtin -> built-in; Jason McIntyre
6435 2003-04-13 15:45 millert
6437 * sudoers.pod: built in -> built-in; Jason McIntyre
6439 2003-04-09 16:14 millert
6441 * CHANGES: checkpoint for 1.6.7p3
6443 2003-04-09 16:14 millert
6445 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
6446 Spencer. Amazingly, sudo source from 1985 is available via
6449 2003-04-09 16:13 millert
6451 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
6452 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
6453 for the RLIMIT_CORE restoration on some OSes.
6455 2003-04-04 12:46 millert
6457 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
6459 2003-04-04 12:45 millert
6461 * config.h.in, configure, configure.in: Check for heimdal even if
6462 we found krb5-config and define HAVE_HEIMDAL.
6464 2003-04-03 22:04 millert
6466 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
6467 The former is no longer defined by MIT kerb5 (though it used to
6468 be and indeed remains so in Heimdal).
6470 2003-04-03 10:16 millert
6472 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
6473 duplicate) directories to "mkdir -p" since that seems to break on
6474 Tru64 Unix at least. This basically brings back what shipped
6477 2003-04-02 13:57 millert
6479 * auth/kerb5.c: Correct number of args to
6480 krb5_principal_get_realm() and fix an unclosed comment that hid
6483 2003-04-02 13:45 millert
6487 2003-04-02 13:45 millert
6489 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
6490 configure.in, version.h: ++version
6492 2003-04-02 13:44 millert
6494 * configure.in: use krb5-config to determine Kerberos V details if
6497 2003-04-02 13:25 millert
6499 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
6500 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
6501 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
6502 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
6503 throughout. The main exception is openlog(). Since the admin
6504 may be filtering logs based on the program name in the log files,
6505 hard code this to "sudo".
6507 2003-04-02 13:16 millert
6509 * Makefile.in: Add getprogname.c and err.c
6511 2003-04-02 13:15 millert
6515 2003-04-02 13:15 millert
6517 * configure.in, config.h.in: Add checks for getprognam(),
6518 __progname and err.h
6520 2003-04-02 13:14 millert
6522 * err.c, emul/err.h: For systems withour err/warn functions.
6524 2003-04-02 13:14 millert
6526 * getprogname.c: For systems neither getprogname() nor __progname;
6529 2003-04-01 10:09 millert
6531 * CHANGES: checkpoint for 1.6.7p1
6533 2003-04-01 10:02 millert
6535 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
6537 2003-04-01 09:58 millert
6539 * check.c: oflow detection in expand_prompt() was faulty (false
6540 positives). The count was based on strlcat() return value which
6541 includes the length of the entire string.
6543 2003-03-30 19:02 millert
6545 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
6547 2003-03-24 16:09 millert
6549 * logging.c: g/c unused variable
6551 2003-03-24 11:06 millert
6555 2003-03-24 11:05 millert
6557 * configure.in: use man sections 8 and 5 for csops
6559 2003-03-21 18:11 millert
6563 2003-03-21 15:10 millert
6565 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
6566 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
6568 2003-03-21 14:02 millert
6572 2003-03-21 14:01 millert
6574 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
6575 An alternate libpath may be specified or -blibpath support can be
6576 disabled. Also change conifgure such that -blibpath is not
6577 specified if no -L libpaths were added to SUDO_LDFLAGS.
6579 2003-03-20 22:05 millert
6581 * configure.in: add AIX blibpath support
6583 2003-03-20 20:28 millert
6585 * INSTALL, configure.in: --with-skey and --with-opie now take an
6586 option directory argument This obsoletes a --with-csops hack
6589 Also remove the remaining direct uses of "echo"
6591 2003-03-20 17:44 millert
6593 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
6594 -lroken optional for KTH Kerberos IV and V.
6596 2003-03-20 14:42 millert
6598 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
6599 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
6602 2003-03-20 14:40 millert
6604 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
6605 There is a new configure option, --with-rpath to control this
6608 2003-03-19 23:50 millert
6610 * configure.in: for kerb4 put libdes after libkrb on the link line
6612 2003-03-19 23:49 millert
6614 * auth/kerb4.c: typo
6616 2003-03-19 23:33 millert
6618 * configure.in: fix kerberos lib check when a path is specified
6620 2003-03-19 21:04 millert
6622 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
6623 reapchild after sending mail instead of doing a conditional
6626 2003-03-19 16:20 millert
6630 2003-03-19 16:19 millert
6632 * configure.in: replace =DIR with [=DIR] where sensible
6634 2003-03-19 16:16 millert
6636 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
6637 include/lib detection based on openssh's configure.in
6639 2003-03-19 15:58 millert
6641 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
6644 2003-03-15 22:03 millert
6646 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
6647 says username is 32 bytes.
6649 2003-03-15 21:18 millert
6651 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
6652 snprintf, not sprintf
6654 2003-03-15 21:18 millert
6656 * auth/rfc1938.c: use snprintf
6658 2003-03-15 15:37 millert
6660 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
6661 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
6664 2003-03-15 15:31 millert
6666 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
6667 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
6668 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
6669 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
6670 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
6673 2003-03-15 15:19 millert
6675 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
6678 2003-03-15 15:17 millert
6682 2003-03-15 15:16 millert
6684 * configure.in: correct error messages for
6685 --with-sudoers-{mode,uid,gid}
6687 2003-03-15 15:10 millert
6689 * alloc.c: make the malloc(0) error specific to each function to
6690 aid tracking down bugs.
6692 2003-03-15 14:49 millert
6694 * alloc.c: deal with platforms where size_t is signed and there is
6695 no SIZE_MAX or SIZE_T_MAX
6697 2003-03-15 14:10 millert
6699 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
6702 2003-03-15 13:02 millert
6704 * sudo.c: Use stat_sudoers macro so --with-stow can work
6706 2003-03-15 13:01 millert
6708 * INSTALL, config.h.in, configure, configure.in: Add support for
6709 --with-stow based on patches from Robert Uhl
6711 2003-03-15 12:51 millert
6713 * env.c: fix indentation
6715 2003-03-15 00:21 millert
6717 * configure.in: back out rev 1.352
6719 2003-03-14 20:11 millert
6723 2003-03-14 20:11 millert
6725 * parse.lex: use strlcpy, not strncpy
6727 2003-03-14 19:48 millert
6729 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
6730 setusercontext() failure.
6732 2003-03-14 19:43 millert
6734 * logging.c: use pid_t
6736 2003-03-14 10:43 millert
6738 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
6740 2003-03-14 10:35 millert
6742 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
6744 2003-03-13 21:47 millert
6746 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
6748 2003-03-13 21:38 millert
6752 2003-03-13 21:38 millert
6754 * configure.in: put -ldl after -lpam, not before; fixes static
6757 2003-03-13 21:17 millert
6759 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
6762 2003-03-13 20:24 millert
6764 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6765 sudoers.cat, visudo.cat: regen
6767 2003-03-13 20:23 millert
6769 * Makefile.in: Preserve copyright notice from .pod file in .man.in
6772 2003-03-13 20:01 millert
6774 * visudo.pod: Add sudoers(5) to SEE ALSO
6776 2003-03-13 15:27 millert
6780 2003-03-13 15:27 millert
6782 * parse.lex: Don't assume libc can realloc() a NULL string. If
6783 malloc/realloc fails, make sure we just return; yyerror() is not
6786 2003-03-13 15:17 millert
6790 2003-03-13 15:17 millert
6792 * parse.lex: simplify fill_args a little and use strlcpy for
6795 2003-03-13 15:00 millert
6797 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
6798 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
6799 overflow. In all cases the strings were either pre-allocated to
6800 the correct size of length checks were done before the copy but a
6801 little paranoia can go a long way.
6803 2003-03-13 12:54 millert
6805 * sudo.h: Add strlc{at,py} protos
6807 2003-03-13 12:03 millert
6809 * env.c, interfaces.c: Use erealloc3()
6811 2003-03-13 12:00 millert
6815 2003-03-13 12:00 millert
6817 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
6818 need >=). Use memcpy() instead of strcpy() in estrdup() so this
6821 2003-03-13 11:58 millert
6823 * sudo.c: snprintf() a uid as %lu, not %ld to match the
6824 MAX_UID_T_LEN test in configure.
6826 2003-03-13 11:56 millert
6828 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
6831 2003-03-12 18:46 millert
6833 * sudo.c: Use snprintf() for paranoia
6835 2003-03-12 17:16 millert
6837 * parse.yacc: Use emalloc2 and erealloc3
6839 2003-03-12 17:08 millert
6841 * Makefile.in: strlc{at,py} for those w/o it
6843 2003-03-12 17:07 millert
6845 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
6847 2003-03-12 17:07 millert
6849 * config.h.in, configure, configure.in: Add stlc{at,py} for those
6852 2003-03-12 16:51 millert
6854 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
6857 2003-03-12 16:45 millert
6859 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
6862 2003-03-12 16:41 millert
6864 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
6865 bzero and with error/oflow checking.
6867 2003-03-12 16:23 millert
6869 * alloc.c: Error out on malloc(0); suggested by theo
6871 2003-03-09 19:34 millert
6873 * configure, configure.in: fix a typo; David Krause
6875 2003-03-07 10:46 millert
6877 * sudo.pod: fix typo
6879 2003-03-03 21:47 millert
6881 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
6883 2003-03-01 13:20 millert
6885 * configure.in, config.h.in: not not; Anil Madhavapeddy
6887 2003-01-23 03:03 millert
6889 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
6891 2003-01-20 16:13 millert
6893 * parse.yacc: Add some missing ';' rule terminators that bison
6896 2003-01-20 16:07 millert
6898 * config.sub: fix typo I introduced in last merge
6900 2003-01-20 15:59 millert
6902 * configure: regenerate with autoconf 2.57
6904 2003-01-20 15:58 millert
6906 * config.h.in: Add missing "$HOME"
6908 2003-01-20 15:57 millert
6910 * configure.in: Add some more square backets to make autoconf 2.57
6913 2003-01-20 14:39 millert
6915 * config.guess, config.sub, mkinstalldirs: Updates from
6918 2003-01-17 18:10 millert
6920 * lex.yy.c, sudo.tab.h: regen
6922 2003-01-17 18:09 millert
6924 * parse.lex, parse.yacc, sudoers.pod: Add support for
6927 2003-01-06 19:10 millert
6929 * visudo.c: fclose() yyin after each yyparse() is done and use
6930 fopen() instead of using freopen().
6932 2003-01-06 19:02 millert
6934 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
6935 It looks like the issue is that yyrestart() does not reset the
6936 start condition to INITIAL which is an issue since we parse
6937 sudoers multiple times.
6939 2003-01-06 18:47 millert
6941 * parse.lex: Work around what appears to be a flex bug when dealing
6942 with files that lack a final newline before EOF. This adds a
6943 rule to match EOF in the non-initial states which resets the
6944 state to INITIAL and throws an error.
6946 2003-01-06 15:06 millert
6948 * visudo.c: o The parser needs sudoers to end with a newline but
6949 some editors (emacs) may not add one. Check for a missing
6950 newline at EOF and add one if needed. o Set quiet flag during
6951 initial sudoers parse (to get options) o Move yyrestart() call
6952 and always use freopen() to open yyin after initial sudoers
6955 2002-12-15 11:24 millert
6957 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
6958 Want to set effective gid, not real gid, when reading sudoers.
6960 2002-12-15 11:08 millert
6962 * set_perms.c: don't compile set_perms_posix if we have setreuid or
6965 2002-12-14 14:21 millert
6967 * sudo.pod, sudoers.pod: document new prompt escapes
6969 2002-12-14 14:15 millert
6971 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
6972 now gets collapsed to "%" as was originally intended. This also
6973 gets rid of lastchar (does lookahead instead of lookback) which
6974 should simplify the logic slightly.
6976 2002-12-13 13:20 millert
6978 * tgetpass.c: Write the prompt *after* turning off echo to avoid
6979 some password characters being echoed on heavily-loaded machines
6982 2002-12-13 13:09 millert
6984 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
6986 2002-12-13 12:48 millert
6988 * configure.in: Fix IRIX fallout from name changes in man dir/sect
6989 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
6992 2002-12-13 11:33 millert
6994 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
6995 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
6997 2002-11-28 18:43 millert
6999 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7002 2002-11-26 12:09 millert
7004 * sudo.c: fix typo in comment; Pedro Bastos
7006 2002-11-22 14:41 millert
7008 * INSTALL: document --disable-setresuid
7010 2002-11-22 14:41 millert
7012 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7013 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7014 optimizers from removing memset() calls.
7016 2002-11-22 14:11 millert
7018 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7021 2002-11-22 14:09 millert
7023 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7024 version based on setresuid() or setreuid() when possible since
7025 that allows us to support the stay_setuid option and we always
7026 know exactly what the semantics will be (various Linux kernels
7027 have broken POSIX saved uid support).
7029 2002-11-22 14:08 millert
7031 * config.h.in, configure: regen from configure.in
7033 2002-11-22 14:07 millert
7035 * configure.in: Add checks for setresuid() and a way to disable
7038 2002-11-22 14:05 millert
7040 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7041 or setre[ug]id(). The new set_perms stuff only uses things it
7044 2002-11-22 13:33 millert
7046 * sudo.c: Before exec, restore state of signal handlers to be the
7047 same as when we were initialy invoked instead of just reseting to
7048 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7049 patch from Paul Markham.
7051 2002-11-22 13:23 millert
7053 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7054 message when sudo is run by root and no_root_sudo is set
7056 2002-09-19 17:27 millert
7058 * README: update ftp link for bison
7060 2002-07-20 08:30 millert
7062 * set_perms.c: Error out if setusercontext() fails and the runas
7065 2002-05-20 16:51 millert
7067 * auth/securid5.c: Fix rcsid
7069 2002-05-20 16:50 millert
7071 * configure.in: Fix SecurID API test
7073 2002-05-17 13:20 millert
7075 * env.c: typo in comment
7077 2002-05-17 13:20 millert
7079 * configure.in: securid5 stuff needs pthreads. Just adding
7080 -lpthread is suboptimal but I don't see a better way at the
7083 2002-05-17 13:04 millert
7085 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7088 2002-05-17 13:02 millert
7090 * configure.in: Add check for SecurID 5.0 API
7092 2002-05-08 16:46 millert
7094 * strerror.c: We actually do still need config.h to get the 'const'
7095 definition for K&R C.
7097 2002-05-05 16:43 millert
7099 * configure: regen with autoconf 2.5.3
7101 2002-05-05 16:25 millert
7103 * configure.in: Don't set sysconfdir to '/etc' if the user has
7104 specified a --prefix.
7106 2002-05-05 16:14 millert
7108 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7109 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7112 2002-05-05 15:58 millert
7114 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7115 dump_defaults() knows how to dump lists.
7117 2002-05-04 21:31 millert
7119 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7120 INSTALL.binary, README: ++version
7122 2002-05-04 20:57 millert
7124 * sudoers.pod: document timestampowner
7126 2002-05-04 20:45 millert
7128 * check.c: Don't call set_perms() when doing timestamp stuff unless
7131 2002-05-04 20:43 millert
7133 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7134 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7137 2002-05-03 18:48 millert
7139 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7140 timestamp dirs. This allows the timestamp dir to be shared via
7141 NFS (though this is not recommended).
7143 2002-05-03 18:47 millert
7145 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7146 of the authentication timestamp dir"
7148 2002-05-02 15:40 millert
7150 * env.c: Don't try to pre-compute the size of the new envp, just
7151 allocate space up front and realloc as needed. Changes to the
7152 new env pointer must all be made through insert_env() which now
7153 keeps track of spaced used and allocates as needed.
7155 2002-04-26 15:12 millert
7159 2002-04-26 15:12 millert
7161 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7163 2002-04-25 11:36 millert
7165 * INSTALL.binary, README: ++version
7167 2002-04-25 11:35 millert
7169 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7170 visudo.man.in, configure: regen
7172 2002-04-25 11:31 millert
7174 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7176 2002-04-25 11:30 millert
7178 * check.c: The the loop used to expand %h and %u, the lastchar
7179 variable was not being initialized. This means that if the last
7180 char in the prompt is '%' and the first char is 'h' or 'u' a
7181 extra copy of the host or user name would be copied, for which
7182 space had not been allocated.
7184 2002-04-18 11:41 millert
7186 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7189 2002-04-18 11:39 millert
7191 * auth/afs.c: #undef VOID to get rid of an AFS warning
7193 2002-04-18 11:38 millert
7195 * env.c: Use easprintf instead of emalloc + sprintf for some
7198 2002-03-15 19:45 millert
7202 2002-03-15 19:44 millert
7204 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7205 Jepeway's email address so people don't bug him ;-)
7207 2002-03-11 22:19 millert
7209 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7210 and also call endgrent() at the same time.
7212 2002-02-21 22:23 millert
7214 * INSTALL: Make it clear which configure options take arguments.
7216 2002-01-25 13:38 millert
7218 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7219 is no RLIM_INFINITY, just pretend it is -1. This works because
7220 we only check for RLIM_INFINITY and do not set anything to that
7223 2002-01-22 11:43 millert
7225 * auth/pam.c: Zero and free allocated memory when there is a
7228 2002-01-21 22:37 millert
7230 * auth/bsdauth.c: Use sigaction() not signal()
7232 2002-01-21 22:26 millert
7234 * INSTALL: Mention that some linux kernels have broken POSIX saved
7237 2002-01-21 21:03 millert
7239 * CHANGES: checkpoint for 1.6.5p2
7241 2002-01-21 21:01 millert
7245 2002-01-21 21:01 millert
7247 * configure.in: Add --disable-setreuid flag
7249 2002-01-21 21:00 millert
7251 * INSTALL: Document new --disable-setreuid option and change
7252 description for --disable-saved-ids to match new error message.
7254 2002-01-21 21:00 millert
7256 * set_perms.c: fatal() now takes an argument that determines
7257 whether or not to call perror().
7259 2002-01-21 20:58 millert
7261 * PORTING, TROUBLESHOOTING: Update for new error messages from
7264 2002-01-21 17:46 millert
7266 * auth/pam.c: Make this compile w/o warnings
7268 2002-01-21 17:36 millert
7270 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7272 2002-01-21 17:25 millert
7274 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7275 was not zeroed after use when AIX authentication, BSD
7276 authentication, FWTK or PAM was in use.
7278 2002-01-20 14:21 millert
7280 * auth/pam.c: Avoid giving PAM a NULL password response, use the
7281 empty string instead. This avoids a log warning when the user
7282 hits ^C at the password prompt when PAM is in use.
7284 2002-01-19 19:46 millert
7286 * auth/pam.c: Don't check the return value of pam_setcred(). In
7287 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7288 not the return code for the setcred module. Because we haven't
7289 called pam_authenticate(), this is not set and so pam_setcred()
7290 returns PAM_PERM_DENIED.
7292 2002-01-19 19:43 millert
7294 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7297 2002-01-18 14:18 millert
7301 2002-01-18 14:18 millert
7303 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7304 has a bogus setreuid() o new NetBSD has a real setreuid() o add
7305 check for freeifaddrs() if getifaddrs() exists.
7307 2002-01-18 14:17 millert
7309 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7310 so add a test for that and if it is not present just use free().
7312 2002-01-17 11:30 millert
7314 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7316 2002-01-17 10:56 millert
7318 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7319 skeyaccess() denies access to normal passwords, not AUTH_FATAL
7320 (which just causes an exit).
7322 2002-01-17 10:35 millert
7324 * visudo.c: Don't use memory after it has been freed.
7326 2002-01-17 00:24 millert
7328 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7329 Patch from Phillip E. Lobbes
7331 2002-01-16 20:00 millert
7335 2002-01-16 19:53 millert
7337 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7339 2002-01-16 18:37 millert
7343 2002-01-16 18:37 millert
7345 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7348 2002-01-16 18:37 millert
7350 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7351 visudo.man.in: sudo version 1.6.5
7353 2002-01-16 16:28 millert
7355 * logging.c: o when invoking the mailer as root use a hard-coded
7356 environment that doesn't include any info from the user's
7357 environment. Basically paranoia.
7359 o Add support for the NO_ROOT_MAILER compile-time option and run
7360 the mailer as the user and not root if NO_ROOT_MAILER is
7363 2002-01-16 16:27 millert
7365 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7367 2002-01-16 16:26 millert
7371 2002-01-16 16:26 millert
7373 * version.h: version 1.6.5
7375 2002-01-16 16:26 millert
7377 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7378 option to run the mailer as the user and not root.
7380 2002-01-16 12:44 millert
7382 * CHANGES: checkpoint for 1.6.4p2
7384 2002-01-15 19:22 millert
7386 * PORTING: Mention the "seteuid(0): Operation not permitted"
7387 problem here too just for good measure.
7389 2002-01-15 18:43 millert
7391 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7392 preserved from the user's environment instead of being reset
7393 based on the passwd database when the "env_reset" option was
7394 used. Now it is reset as it should be.
7396 2002-01-15 17:47 millert
7400 2002-01-15 17:47 millert
7402 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7403 sudo.c: Add a configure option to turn off use of POSIX saved IDs
7405 2002-01-15 15:48 millert
7409 2002-01-15 15:48 millert
7411 * configure.in: add --with-efence option
7413 2002-01-15 15:39 millert
7415 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7416 problem where "sudo -l" would not work if always_set_home was
7419 2002-01-15 13:16 millert
7423 2002-01-15 13:16 millert
7425 * parse.lex: Quoted commas were not being treated correctly in
7426 command line arguments.
7428 2002-01-14 20:53 millert
7430 * sudo.c: o Move the call to rebuild_env() until after
7431 MODE_RESET_HOME is set. Otherwise, the set_home option has no
7434 o Fix use of freed memory when the "fqdn" flag is set. This was
7435 introduced by the fix for the "segv when gethostbynam() fails"
7436 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
7437 not set so there is no need to check the "fqdn" flag in
7440 2002-01-14 20:45 millert
7442 * env.c: Add 'continue' statements to optimize the switch
7443 statement. From Solar.
7445 2002-01-13 13:42 millert
7447 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
7449 2002-01-13 13:36 millert
7451 * sudoers.pod: Add caveat about stay_setuid flag
7453 2002-01-13 13:29 millert
7455 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
7456 is not set, set all uids to 0 and use set_perms_fallback().
7458 2002-01-13 13:28 millert
7460 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
7461 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
7463 2002-01-13 13:27 millert
7465 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
7466 mailer since we never want to run the mailer setuid.
7468 2002-01-12 17:55 millert
7470 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
7471 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
7473 2002-01-12 14:00 millert
7475 * Makefile.in, Makefile.binary: Fix mansect substitution
7477 2002-01-12 13:15 millert
7479 * Makefile.in: Substitute man sections in Makefile.binary
7481 2002-01-12 13:15 millert
7483 * Makefile.binary: Sync install targets with Makefile.in and
7484 substitute in man sections.
7486 2002-01-12 13:09 millert
7488 * INSTALL, INSTALL.binary: version is 1.6.4
7490 2002-01-12 12:59 millert
7492 * Makefile.in: Repair bindist target
7494 2002-01-12 11:43 millert
7496 * CHANGES: sync for 1.6.4
7498 2002-01-10 13:00 millert
7500 * install-sh: Fix case where neither whoami nor id are found
7502 2002-01-09 12:35 millert
7504 * install-sh: If neither whoami nor id exists, just assume we are
7507 2002-01-09 11:56 millert
7509 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
7510 to be needed on AIX which for some reason isn't pulling in the
7513 2002-01-08 10:00 millert
7515 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
7517 2002-01-08 09:21 millert
7519 * CHANGES: checkpoint
7521 2002-01-08 09:20 millert
7523 * sudo.c: Defer assigning new environment until right before the
7526 2002-01-08 09:08 millert
7528 * parse.c: kill extra blank line
7530 2002-01-07 13:59 millert
7534 2002-01-07 13:59 millert
7536 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
7537 motorola gcc-derived compiler doesn't recognise -O2.
7539 2002-01-06 23:02 millert
7541 * HISTORY: Clarify origins of Root Group sudo a bit based on info
7542 from billp@rootgroup.com
7544 2002-01-02 22:41 millert
7548 2002-01-02 22:26 millert
7550 * CHANGES: checkpoint for 1.6.4rc1
7552 2002-01-02 17:40 millert
7554 * config.h.in: now generated via autoheader
7556 2002-01-02 17:40 millert
7560 2002-01-02 17:37 millert
7562 * compat.h: Move in some stuff that was previously in config.h.
7564 2002-01-02 17:36 millert
7566 * configure.in, aclocal.m4: Add info for autoheader.
7568 2002-01-01 16:53 millert
7570 * Makefile.in: o Add DESTDIR support
7571 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
7574 2002-01-01 16:48 millert
7576 * install-sh: Add -M option (like -m but only for root) If we can't
7577 find "whoami", use "id" w/ some sed.
7579 2002-01-01 14:01 millert
7583 2002-01-01 14:00 millert
7585 * configure.in: allow user to always override mansectsu and
7588 2001-12-31 17:05 millert
7590 * mkinstalldirs: update from autoconf 2.52
7592 2001-12-31 17:03 millert
7594 * config.guess, config.sub: Update from autoconf 2.52
7596 2001-12-31 16:57 millert
7598 * configure: regen with autoconf 2.52
7600 2001-12-31 16:57 millert
7602 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
7603 compiler in ANSI mode
7604 o Remove compiler-specific checks for HP-UX now that we use
7607 2001-12-31 12:19 millert
7609 * RUNSON: Checkpoint
7611 2001-12-31 12:18 millert
7613 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
7614 for the target user; on Linux this often sets resource limits.
7615 o When calling pam_end(), try to convert the auth->result to a
7616 PAM_FOO value. This is a hack--we really need to stash the
7617 last PAM_FOO value received and use that instead.
7619 2001-12-31 12:18 millert
7621 * set_perms.c, sudo.h: o Add pam_prep_user function to call
7622 pam_setcred() for the target user; on Linux this often sets
7625 2001-12-31 00:53 millert
7627 * env.c: Fix off by one error in number of bytes allocated via
7628 malloc (does not affected any released version of sudo).
7630 2001-12-30 17:12 millert
7634 2001-12-30 17:12 millert
7636 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
7637 variable w/o requiring that they be quoted.
7639 2001-12-30 14:26 millert
7641 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
7642 quotes are needed when adding/deleting/assigning a single value
7645 2001-12-30 13:58 millert
7647 * Makefile.in: Don't rely on mkdefaults being executable, call perl
7650 2001-12-30 13:41 millert
7652 * parse.yacc: Remove some XXX that are no longer relevant.
7654 2001-12-30 13:40 millert
7656 * defaults.c: o Roll our own loop instead of using strpbrk() for
7657 better grokability o When adding to a list we must malloc() and
7658 use memcpy(), not strdup() since we must only copy len bytes
7661 2001-12-21 16:49 millert
7663 * parse.yacc: typo in comment
7665 2001-12-19 11:50 millert
7667 * CHANGES: checkpoint
7669 2001-12-19 10:56 millert
7673 2001-12-19 10:56 millert
7675 * configure.in: avoid the -g flag unless --with-devel was specified
7677 2001-12-19 10:04 millert
7679 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
7682 2001-12-19 09:46 millert
7684 * Makefile.in: def_data.c was missing
7686 2001-12-18 12:42 millert
7688 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
7689 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
7692 2001-12-17 20:48 millert
7694 * TODO: Another TODO item
7696 2001-12-17 19:50 millert
7698 * sudoers: Add comment for Default section so folks know where it
7701 2001-12-17 18:56 millert
7703 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
7706 2001-12-17 18:35 millert
7708 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
7710 2001-12-17 18:33 millert
7712 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
7713 o a User_List can not contain a uid
7714 o mention that the Defaults section should come after Alias
7715 definitions but before the user specifications
7717 2001-12-15 11:51 millert
7719 * sudoers.cat, sudoers.man.in: regen
7721 2001-12-15 11:51 millert
7723 * sudoers.pod: Fix listpw and verifypw sections, they were not
7724 being formatted properly.
7726 2001-12-15 11:39 millert
7728 * sudoers.cat, sudoers.man.in: regen
7730 2001-12-15 11:38 millert
7732 * sudoers.pod: fix typos
7734 2001-12-15 10:57 millert
7738 2001-12-15 10:57 millert
7740 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
7743 2001-12-15 10:33 millert
7745 * README: Reference sudo.ws not courtesan.com
7747 2001-12-15 10:29 millert
7749 * PORTING: Add notes on shadow passwords
7751 2001-12-15 00:48 millert
7753 * BUGS: In list mode (sudo -l), characters escaped with a backslash
7754 are shown verbatim with the backslash.
7756 2001-12-15 00:44 millert
7758 * sudoers: Add simple examples from OpenBSD (Marc Espie)
7760 2001-12-15 00:40 millert
7762 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
7765 2001-12-14 21:53 millert
7767 * CHANGES: minor prettyification
7769 2001-12-14 21:43 millert
7771 * CHANGES: Updated change log
7773 2001-12-14 21:27 millert
7775 * testsudoers.c: Fix CIDR handling here too.
7777 2001-12-14 21:21 millert
7779 * auth/pam.c: Apparently a NULL response is OK
7781 2001-12-14 21:19 millert
7783 * TODO: Checkpoint for upcoming beta release
7785 2001-12-14 21:17 millert
7787 * TROUBLESHOOTING: Many people believe that adding a runas spec
7788 should obviate the need for the -u flag. It does not.
7790 2001-12-14 21:11 millert
7792 * RUNSON: checkpoint update for upcoming 1.6.4 beta
7794 2001-12-14 20:44 millert
7796 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
7797 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
7800 2001-12-14 20:07 millert
7802 * PORTING: Add signals section
7804 2001-12-14 20:00 millert
7808 2001-12-14 20:00 millert
7810 * configure.in: Fix check for sigaction_t
7812 2001-12-14 19:45 millert
7814 * sudo.c: XXX - should call find_path() as runas user, not root.
7815 Can't do that until the parser changes though.
7817 2001-12-14 19:38 millert
7819 * sudo.c: If find_path() fails as root, try again as the invoking
7820 user (useful for NFS). Idea from Chip Capelik.
7822 2001-12-14 19:28 millert
7824 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
7825 after pod file changes
7827 2001-12-14 19:24 millert
7829 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
7830 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
7831 Previously sudo would not call initgroups() if the target user
7832 was root. Now it always calls initgroups() unless the -P command
7833 line option or the "preserve_groups" sudoers option is set. Idea
7836 2001-12-14 18:38 millert
7838 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
7840 2001-12-14 18:33 millert
7842 * logging.c: Fix compilation on K&C
7844 2001-12-14 18:14 millert
7848 2001-12-14 18:14 millert
7850 * configure.in: Add check for sigaction_t -- IRIX already defines
7851 this so don't redefine it.
7853 2001-12-14 17:15 millert
7855 * snprintf.c: fix typo
7857 2001-12-14 17:12 millert
7859 * interfaces.c: need stdlib.h here too
7861 2001-12-14 15:31 millert
7865 2001-12-14 15:31 millert
7867 * configure.in: Remove redundant checks for string.h, strings.h and
7870 2001-12-14 15:29 millert
7872 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7873 visudo.man.in: Regen from pod files
7875 2001-12-14 15:03 millert
7877 * BUGS: Update for 1.6.4
7879 2001-12-14 14:59 millert
7881 * configure, lex.yy.c: regen
7883 2001-12-14 14:56 millert
7885 * strerror.c: Return EINVAL if errnum > sys_nerr
7887 2001-12-14 14:54 millert
7889 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
7890 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
7891 sudo.pod, auth/sudo_auth.h: o Update copyright year
7893 2001-12-14 14:54 millert
7895 * configure.in: o Don't define STDC_HEADERS unconditionally for
7896 IRIX o Update copyright year
7898 2001-12-14 14:53 millert
7900 * README: update version
7902 2001-12-14 14:52 millert
7904 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
7905 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
7906 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
7907 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
7908 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
7909 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
7910 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7911 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
7912 STDC_HEADERS define properly o Update copyright year
7914 2001-12-14 01:53 millert
7918 2001-12-14 01:53 millert
7920 * tgetpass.c: flags set in signal handlers should be volatile
7923 2001-12-14 01:52 millert
7925 * config.h.in, configure.in: Add checks for volatile and
7928 2001-12-14 01:42 millert
7930 * lex.yy.c, configure: regen
7932 2001-12-14 01:40 millert
7934 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
7935 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
7936 option since it cannot work with the existing parser.
7938 2001-12-14 01:26 millert
7940 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
7942 2001-12-14 01:24 millert
7944 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
7945 not listed in env_keep o If no PATH is in the environment use a
7946 default value o If TERM is not set in the non-reset case also
7947 give it a default value.
7949 2001-12-14 01:17 millert
7951 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
7952 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
7953 on systems that define in paths.h
7955 2001-12-14 01:15 millert
7957 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
7958 skeyaccess(3) if it is present in libskey.
7960 2001-12-12 21:42 millert
7962 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
7964 2001-12-12 21:24 millert
7966 * parse.lex: '\\' is a perfectly legal character to have in a
7967 command line argument.
7969 2001-12-12 20:24 millert
7971 * sudo.c: o Defer call to set_fqdn() until it is safe to use
7972 log_error() o Don't print errno string value if gethostbyname
7973 fails, it is not relevant
7975 2001-12-12 20:07 millert
7977 * parse.c: Fix CIDR -> in_addr_t conversion.
7979 2001-12-12 16:21 millert
7981 * sudoers.pod: Remove an extra "User_List" in the User_Spec
7982 definition From ybertrand AT snoopymail.com
7984 2001-12-12 16:00 millert
7986 * parse.c: Make 'listpw=never' work for users who are not
7987 explicitly mentioned in sudoers.
7989 2001-12-12 15:40 millert
7991 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
7993 2001-12-12 15:34 millert
7995 * sudoers.pod: Document new list Defaults type and convert env_keep
7996 and env_delete to lists. Document new env_check option.
7998 2001-12-12 15:11 millert
8000 * lex.yy.c, sudo.tab.h: regen parser
8002 2001-12-12 14:56 millert
8004 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8005 a Runas spec to #[0-9-]+.
8007 2001-12-12 14:55 millert
8011 2001-12-12 14:55 millert
8013 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8015 2001-12-12 14:43 millert
8017 * config.h.in, configure.in: Add check for skeyaccess(3)
8019 2001-12-11 19:47 millert
8021 * visudo.pod: Document new -c, -f, and -q options
8023 2001-12-11 19:41 millert
8025 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8028 2001-12-11 19:31 millert
8032 2001-12-11 19:31 millert
8034 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8035 a replacement macro if it doesn't exist.
8037 2001-12-11 18:22 millert
8039 * visudo.c: In check-only mode, don't create sudoers if it does not
8042 2001-12-11 18:06 millert
8044 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8046 o Add support for "+=" and "-=" list operators
8047 o replace some 1 and 0 with TRUE and FALSE for greater
8050 2001-12-11 18:05 millert
8052 * parse.lex: o Use exclusive start conditions to remove some
8054 lexer. Also reorder some things for clarity.
8055 o Add support for "+=" and "-=" list operators.
8056 o Use the new DEFVAR token to denote a Defaults variable name.
8058 2001-12-11 18:03 millert
8060 * sudo.h: Prototype init_envtables()
8062 2001-12-11 18:02 millert
8064 * env.c: o Convert environment handling to use lists instead of
8066 This greatly simplifies routines that need to do "foreach"
8069 o Add new init_envtables() function to set env_check and
8071 defaults based on initial_badenv_table and
8072 initial_checkenv_table
8073 (formerly sudo_badenv_table).
8075 2001-12-11 18:00 millert
8077 * defaults.c, defaults.h: o Add a new LIST type and functions to
8079 o This is for use with environment handling variables.
8080 o Call new init_envtables() routine inside init_defaults() to
8081 initialize the environment lists.
8083 2001-12-11 17:57 millert
8085 * def_data.c, def_data.h, def_data.in: Convert environment options
8086 to use the new LIST type and add a new one, env_check that only
8087 deletes if the sanity check fails.
8089 2001-12-11 17:55 millert
8091 * testsudoers.c: Add dummy version of init_envtables()
8093 2001-12-11 17:53 millert
8095 * parse.yacc: honor quiet mode
8097 2001-12-11 17:51 millert
8099 * visudo.c: Add check-only mode
8101 2001-12-10 20:27 millert
8103 * mkdefaults: Fix generation of entries with NULL descriptions.
8105 2001-12-09 00:27 millert
8107 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8109 2001-12-09 00:20 millert
8111 * sudo.c: Must reset signal handlers before we exec
8113 2001-12-09 00:16 millert
8115 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8116 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8117 version needs testing. Set SIGTSTP to SIG_DFL during password
8118 entry so user can suspend us.
8120 2001-12-09 00:14 millert
8122 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8123 keyboard input. If you suspend sudo from the password prompt and
8124 resume it will re-prompt you.
8126 2001-12-09 00:09 millert
8128 * sudo.c: Don't block keyboard interrupt signals, just set them to
8131 2001-12-08 14:48 millert
8133 * config.h.in: add back HAVE_SIGACTION
8135 2001-12-08 14:44 millert
8139 2001-12-08 14:44 millert
8141 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8142 POSIX_SIGNALS define and old signal support now that we emulate
8143 POSIX ones Also be sure to correctly initialize struct sigaction.
8145 2001-12-08 14:42 millert
8147 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8150 2001-12-08 14:39 millert
8152 * compat.h: Add scaffolding for POSIX signal emulation
8154 2001-12-08 14:36 millert
8156 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8157 since we don't include stdio.h
8159 2001-12-08 14:23 millert
8161 * sigaction.c: Emulate sigaction() using sigvec()
8163 2001-11-12 19:32 millert
8165 * sudoers.pod: Document new behavior of negative values of
8166 timestamp_timeout Fix a typo
8168 2001-11-12 19:31 millert
8170 * sudo.pod: Add security note about command not being logged after
8171 'sudo su' and friends.
8173 2001-11-12 19:19 millert
8175 * sudo.pod: Mention that -V prints default values when run as root,
8176 including the list of environment variables to clear.
8178 2001-11-12 19:14 millert
8180 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8181 quoting of C<> entries.
8183 2001-11-12 13:12 millert
8185 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8186 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8187 behavior to also send mail when the password is wrong
8189 2001-11-12 13:08 millert
8191 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8194 2001-11-11 23:52 millert
8196 * sudoers.pod: document env_delete
8198 2001-11-11 23:51 millert
8200 * env.c: Add support for '*' in env_keep when not resetting the
8201 environment (ie: the normal case).
8203 2001-11-11 23:47 millert
8205 * env.c: Add env_delete variable that lets the user replace/add to
8206 the bad_env_table. Allow '*' wildcard in env_keep entries.
8208 2001-11-06 13:59 millert
8210 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8213 2001-11-02 18:09 millert
8215 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8218 2001-11-02 17:25 millert
8220 * mkdefaults: fix breakage in last commit
8222 2001-11-02 17:18 millert
8224 * Makefile.in: acsite.m4 -> aclocal.m4
8226 2001-11-02 15:59 millert
8228 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8231 2001-11-02 15:57 millert
8233 * def_data.c: regenerated from def_data.in
8235 2001-11-02 15:56 millert
8237 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8238 things use instead of T_INT If timestamp_timeout is < 0 then
8239 treat the ticket as never expiring (to be expired manually by the
8242 2001-11-02 15:51 millert
8244 * def_data.in: change most T_INT -> T_UINT
8246 2001-11-02 15:51 millert
8248 * mkdefaults: fix warning when no args
8250 2001-11-02 12:52 millert
8252 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8253 call _exit() if we are a signal handler. We no longer print the
8254 signal number but the user can just check the exit value for
8257 2001-10-16 01:35 millert
8259 * logging.c: when setting up pipes in child process check for case
8260 where stdin == pipe fd 0
8262 2001-10-11 13:20 millert
8264 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8265 value is the count of editing errors made (failed searches, etc).
8267 2001-10-05 16:39 millert
8271 2001-10-05 16:39 millert
8273 * configure.in: sco now is identified by config.guess as *-sco-*
8275 2001-10-05 16:24 millert
8277 * configure.in: Check for getspnam() in -lgen if not in -lc for
8280 2001-09-17 21:48 millert
8282 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8284 2001-09-17 21:32 millert
8286 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8288 2001-08-28 10:26 millert
8290 * sudoers.pod: Missing word (specify); krapht@secureops.com
8292 2001-08-23 17:43 millert
8294 * sudo.c: If we fail to lookup a login class, apply the default
8297 2001-08-23 17:42 millert
8299 * logging.c: In log_error() free message, not logline
8300 unconditionally, then free logline if it is not the same as
8301 message. No function change but this mirrors how they are
8304 2001-07-16 23:33 millert
8306 * configure: regenerate
8308 2001-07-16 23:33 millert
8310 * configure.in: remove some backslash quotes that are unneeded
8312 2001-07-16 23:30 millert
8314 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8315 AC_LIBOBJ instead of changing LIBOBJS directly o Use
8316 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8317 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8319 2001-07-16 23:28 millert
8321 * config.guess, config.sub: Updated from autoconf-2.50
8323 2001-05-22 19:11 millert
8325 * README: Update mailing list section. We use mailman now, not
8328 2001-05-10 14:55 millert
8330 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8331 the shadow variants to make sure we don't inadvertantly leak an
8332 fd to the child. Apparently Linux's shadow routines leave the fd
8333 open even if you don't call setspent(). Reported by
8334 mike@gistnet.com; different patch used.
8336 2001-04-12 21:43 millert
8338 * sudoers.pod: s/eg./e.g./
8340 2001-04-12 21:42 millert
8342 * tgetpass.c: select() may return EAGAIN. If so, continue like we
8345 2001-04-12 21:41 millert
8347 * logging.c: Fix a non-exploitable buffer overflow in the word
8348 splitting code. This should really be rewritten.
8350 2001-04-12 21:41 millert
8352 * Makefile.in: FAQ link goes away
8354 2001-04-12 21:40 millert
8356 * INSTALL: Tell people to look in sample.syslog.conf for examples,
8359 2001-04-12 21:40 millert
8361 * TROUBLESHOOTING: Update list of env vars that are cleared
8363 2001-04-12 21:36 millert
8365 * sudo.c: remove struct env_table decl since that stuff has all
8368 2001-04-04 13:17 millert
8370 * fileops.c: Fix a pasto in flock-style unlocking and include
8371 <sys/file.h> for flock on older systems; twetzel@gwdg.de
8373 2001-04-04 13:14 millert
8375 * configure: regen to get NeXT lockf/flock fix
8377 2001-04-04 13:14 millert
8379 * configure.in: force NeXT to use flock since lockf is broken
8381 2001-03-30 08:54 millert
8383 * check.c: Use stashed user_gid when checking against exempt gid
8384 since sudo sets its gid to a a value that makes sudoers readable.
8385 Previously if you used gid 0 as the exempt group everyone would
8386 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8388 2001-03-29 13:14 millert
8392 2001-03-29 13:08 millert
8394 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8395 aparently defines some types (such as ssize_t) therein.
8397 2001-03-02 09:09 millert
8399 * defaults.c: Fix negation of paths in a boolean context. Problem
8402 2001-02-23 13:03 millert
8406 2001-02-17 16:11 millert
8408 * visudo.c: SA_RESETHAND means the opposite of what I was
8409 thinking--oops To block all signals in old-style signals use ~0,
8412 2001-02-04 11:16 millert
8414 * defaults.c: coerce difference of pointers to int when used in a
8415 string length printf format; deraadt@openbsd.org
8417 2001-01-17 11:34 millert
8419 * visudo.c: Block all signals in Exit() to avoid a signal race.
8420 There is still a tiny window but I'm not going to worry about it.
8422 2001-01-07 13:57 millert
8424 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
8427 2001-01-07 13:55 millert
8429 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
8430 from clobbering by isatty().
8432 2000-12-30 20:39 millert
8434 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
8435 Some defaults I_ defines got renamed.
8437 2000-12-30 20:38 millert
8439 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
8440 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
8441 set_perms.c, sudo.c: Move defaults info into its own files from
8442 which we generate .h and .c files. This makes adding or
8443 rearranging variables much simpler.
8445 2000-12-30 16:58 millert
8447 * configure, configure.in: fix typo in last commit
8449 2000-12-30 16:55 millert
8451 * compat.h, config.h.in, configure, configure.in: Add check +
8452 emulation for setegid (like seteuid).
8454 2000-12-30 16:22 millert
8456 * env.c: Make env_keep override badenv_table as documented Fix
8457 traversal of badenv_table (broken in last commit)
8459 2000-12-29 22:59 millert
8461 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
8462 version of set_perms on systems w/o them. Rename
8463 set_perms_saved_uid() -> set_perms_posix() Make
8464 set_perms_setreuid simply be set_perms_fallback() and simply
8465 include the appropriate function at compile time (setreuid()
8468 2000-12-29 22:45 millert
8470 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
8471 when env_reset is in effect
8473 2000-12-29 22:29 millert
8475 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
8476 configure, configure.in, defaults.c, defaults.h, find_path.c,
8477 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
8478 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
8479 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
8480 options: o stay_setuid - sudo will remain setuid if system has
8481 saved uids or setreuid(2) o env_reset - reset the environment to
8482 a sane default o env_keep - preserve environment variables that
8483 would otherwise be cleared
8485 No longer use getenv/putenv/setenv functions--do environment
8486 munging by hand. Potentially dangerous environment variables can
8487 be cleared only if they contain '/' pr '%' characters to protect
8488 buggy programs. Moved environment routines into env.c (new file)
8490 2000-12-29 22:17 millert
8492 * INSTALL: Clear up --without-passwd description
8494 2000-12-29 19:39 millert
8496 * sudo_setenv.c, putenv.c: We now build up a new environment from
8497 scratch and assign it to "environ".
8499 2000-12-18 22:35 millert
8501 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
8503 2000-12-14 23:19 millert
8505 * visudo.c: If there was a syntax error and the user just wants to
8506 quit, unlink sudoers if it is zero length.
8508 2000-12-14 23:10 millert
8510 * visudo.c: 'Q' means ignore parse error, not 'q'
8512 2000-12-14 22:57 millert
8514 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
8515 Dimitry Andric <dim@xs4all.nl>
8517 2000-12-13 12:23 millert
8519 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
8522 2000-12-09 11:46 millert
8524 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
8525 Sanchez <wsanchez@apple.com>
8527 2000-11-03 09:36 millert
8529 * sudo.c, visudo.c: Use exit(127), not exit(-1)
8531 2000-11-03 00:37 millert
8533 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
8534 set_perms() to its own file and use POSIX saved uid or setreuid()
8537 Added stay_setuid option for systems that have libraries that
8538 perform extra paranoia checks in system libraries for setuid
8539 programs (ie: anything with issetugid(2)).
8541 2000-11-02 20:28 millert
8543 * sudo.c: strip more bits from the environment and add a facility
8544 for stripping things only if they contain '/' or '%' to address
8545 printf format string vulnerabilities in other programs.
8547 2000-11-02 12:55 millert
8551 2000-11-02 12:55 millert
8553 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
8554 the existence of strcasecmp().
8556 2000-11-02 12:46 millert
8560 2000-11-02 12:46 millert
8562 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
8564 2000-11-01 10:22 millert
8566 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
8568 2000-11-01 10:17 millert
8572 2000-11-01 10:17 millert
8574 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
8575 since NCR systems have that instead of innetgr(3).
8577 2000-10-31 14:16 millert
8579 * auth/securid.c: check return value of creadcfg() call sd_close()
8580 after sd_auth() store username in sd->username so we don't rely
8581 on the USER env variable
8583 2000-10-29 23:00 millert
8585 * INSTALL: document --with-bsdauth
8587 2000-10-29 22:57 millert
8591 2000-10-29 22:56 millert
8593 * configure.in: --with-bsdauth assumes --with-logincap
8595 2000-10-29 22:45 millert
8597 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
8598 challenge, if the user just hits return then reprompt with echo
8601 2000-10-29 17:31 millert
8603 * sudo.c: Remove debugging code that should not have been
8606 2000-10-29 17:31 millert
8608 * auth/bsdauth.c: Use lower-level routines and get the password
8609 ourselves. Checks for a challenge and if there is one echo is
8612 2000-10-29 17:30 millert
8614 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
8617 2000-10-27 18:41 millert
8619 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
8620 fails by deferring the call to log_error() until things are
8623 Fix return value of set_loginclass() in non-BSD-auth case.
8625 Hard-code 'sudo' in the usage message so we can fit more options
8628 2000-10-27 18:35 millert
8630 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
8632 2000-10-26 13:03 millert
8634 * sudo.cat, sudo.man.in: regen
8636 2000-10-26 13:01 millert
8638 * sudo.pod: Document -a flag
8640 2000-10-26 12:42 millert
8642 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
8643 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
8646 2000-10-19 10:09 millert
8648 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
8650 2000-10-12 09:49 millert
8652 * sudoers.pod: Mention negating umask
8654 2000-10-12 01:30 millert
8656 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
8658 2000-10-08 21:46 millert
8660 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
8663 2000-10-08 12:25 millert
8665 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
8667 2000-09-14 16:48 millert
8669 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
8670 alloc failure instead of returning -1.
8672 2000-09-07 17:41 millert
8674 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
8675 for FreeBSD and possibly others.
8677 2000-09-07 10:43 millert
8679 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
8680 it. This means that "%m" won't be expanded but we don't use that
8681 anyway since the logging routines may splat to stderr as well.
8683 2000-09-06 21:35 millert
8685 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
8686 sudoers.pod: Add always_set_home variable
8688 2000-09-06 21:24 millert
8690 * configure, configure.in: Have to hard code default values in help
8691 since the defaults are set _after_ the help stuff.
8693 2000-08-31 13:08 millert
8695 * lex.yy.c, parse.lex: Allow special characters (including '#') to
8696 be embedded in pathnames if quoted by a '\\'. The quoted chars
8697 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
8700 2000-08-13 17:10 millert
8702 * install-sh: Better path searching for programs we need.
8704 2000-08-13 17:10 millert
8706 * TROUBLESHOOTING: Add section on "C compiler cannot create
8707 executables" errors.
8709 2000-08-13 17:10 millert
8711 * Makefile.binary, Makefile.in, version.h: Crank version
8713 2000-08-13 17:09 millert
8715 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
8716 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
8717 visudo.man.in, visudo.pod: Substitute values from configure into
8720 2000-08-12 16:48 millert
8722 * parse.c, sudo.c: The listpw and verifypw sudoers options would
8723 not take effect because the value of the default was checked
8724 *before* sudoers was parsed. Instead of passing in the value of
8725 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
8726 the check can be deferred until after sudoers is parsed.
8728 2000-08-11 15:41 millert
8730 * tgetpass.c: When writing prompt, no need to write the NUL as
8731 well; hag@linnaean.org
8733 2000-06-09 12:25 millert
8735 * install-sh: When looking for chown, check in /sbin too
8737 2000-06-04 22:57 millert
8739 * visudo.c: Remove extraneous call to init_defaults() and set
8740 runas_user to NULL betweem parses so init_defaults will reset it
8741 each time, thus avoiding a reference to free()d data.
8743 2000-06-04 19:57 millert
8745 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
8746 using getifaddrs() to get the list of ip addr / netmask pairs.
8747 Currently IPv4-only.
8749 2000-06-04 19:51 millert
8751 * visudo.c: Add a missing check for UserEditor == NULL Add missing
8752 '+' before line number when invoking editor to fix a syntax error
8754 2000-05-12 16:55 millert
8756 * sudo.c: Call clean_env very early in main() for paranoia's sake.
8757 Idea from Marc Esipovich.
8759 2000-05-10 01:11 millert
8761 * sudo.h: Update proto for evasprintf and easprintf
8763 2000-05-10 01:10 millert
8765 * alloc.c: Make easprintf() and evasprintf() return an int.
8767 2000-05-10 00:56 millert
8769 * check.c: If the targetpw flag is set, use target username as part
8770 of the timestamp path. If tty tickets are in effect cat the tty
8771 and the target username with a ':' as the separator.
8773 2000-05-09 12:05 millert
8775 * auth/pam.c: Backout part of last change; setting PAM_USER to the
8776 invoking user breaks things like targetpw.
8778 2000-05-09 11:52 millert
8780 * auth/pam.c: set tty and username via pam_set_item
8782 2000-05-09 11:42 millert
8784 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
8785 runas, and target authentication for non-passwd file auth
8788 2000-04-22 14:15 millert
8790 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
8791 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
8792 C<-Z> for command line flags in all places. This is more
8793 consistent and works around a bug in Pod::Man.
8795 2000-04-22 13:59 millert
8797 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
8798 'semicolon' that should be 'colon'
8800 2000-04-19 15:30 millert
8802 * configure, configure.in: Fix --with-badpri help line
8804 2000-04-17 14:01 millert
8806 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
8807 openlog() and closelog() since some authentication methods (like
8808 PAM) may do their own logging via syslog. Since we don't use
8809 syslog much (usually just once per session) this doesn't really
8810 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
8812 2000-04-15 16:32 millert
8814 * sudo.c: Fix -H flag. runas_homedir is only valid after
8815 set_perms(PERM_RUNAS, mode)
8817 2000-04-12 18:56 millert
8819 * INSTALL: Clarify the fact that insults are not enabled just by
8820 including them in the binary.
8822 2000-04-07 10:39 millert
8824 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
8825 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
8827 2000-04-07 10:38 millert
8829 * Makefile.in: Give date string to pod2man since its default is
8830 ugly and it ain't got no alibi.
8832 2000-04-07 10:27 millert
8834 * Makefile.in: Do section substitution on the output of pod2man and
8835 remove hack needed for old pod2man.
8837 2000-04-07 10:26 millert
8839 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
8840 will do the substitution later.
8842 2000-04-02 11:44 millert
8844 * configure, configure.in: Don't bother checking for the path to vi
8845 if user specified --with-editor
8847 2000-04-01 17:25 millert
8849 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
8852 2000-04-01 16:23 millert
8854 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
8855 sudoers.pod, visudo.c: Visudo now checks for the existence of an
8856 editor and gives a sensible error if it does not exist.
8858 The path to the editor for visudo is now a colon-separated list
8859 of allowable editors. If the user has $EDITOR set and it matches
8860 one of the allowed editors that editor will be used. If not, the
8861 first editor in the list that actually exists is used.
8863 2000-04-01 16:22 millert
8865 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
8868 2000-03-27 12:08 millert
8870 * Makefile.in: Strip sudo and visudo for bindist target
8872 2000-03-26 22:26 millert
8874 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
8875 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
8876 @mansectsu@ and @mansectform@ in the man page bodies as well.
8878 2000-03-26 22:07 millert
8880 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
8883 2000-03-26 21:57 millert
8885 * Makefile.in: 'make dist' should not cause any files to be
8886 modified so remove its dependencies.
8888 2000-03-26 21:43 millert
8890 * CHANGES: Whoops, forgot to add release marker
8892 2000-03-26 11:57 millert
8894 * CHANGES: Final change for 1.6.3 (or so I hope)
8896 2000-03-26 11:57 millert
8898 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
8899 BSD systems will have nroff...
8901 2000-03-24 18:58 millert
8903 * parse.yacc: When checking to see if the host/user matches in a
8904 defaults spec, check against TRUE, not just non-zero since it
8907 2000-03-24 15:14 millert
8909 * configure.in, configure: OSF/1 puts file formats in section 4,
8912 2000-03-24 15:13 millert
8914 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
8916 2000-03-23 20:24 millert
8918 * RUNSON: Update for 1.6.3
8920 2000-03-23 20:23 millert
8922 * configure, configure.in: If there is no inet_addr but there *is*
8923 an __inet_addr that's ok since inet_addr is probably just a macro
8924 then. The better thing to do would be to look for the macro, but
8925 this is fine for now.
8927 2000-03-23 19:50 millert
8929 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
8931 2000-03-23 19:40 millert
8933 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
8934 lives in $(srcdir), add a @mansrcdir@ configure variable so we
8935 can deal with this. Also, only remove *.man for 'distclean' not
8938 2000-03-23 19:16 millert
8940 * sudo.c: set_loginclass() should be static like the proto says
8942 2000-03-23 14:14 millert
8944 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
8945 header to avoid promotion of test to int, thus violating the
8946 prototype. Gcc handles this gracefully but more std ANSI
8947 compilers will complain.
8949 2000-03-23 10:11 millert
8951 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
8954 2000-03-23 10:11 millert
8956 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
8957 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
8960 2000-03-22 23:41 millert
8962 * CHANGES, TODO: update for 1.6.3
8964 2000-03-22 23:38 millert
8966 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
8967 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
8968 not matching the FQHOST token type. There's really no need for a
8969 separate token for fully-qualified vs. unqualified anymore so
8970 FQHOST is now history and hostname_matches now decides which
8971 hostname (short or long) to check based on whether or not the
8972 pattern contains a '.'.
8974 2000-03-22 23:09 millert
8976 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
8977 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
8980 2000-03-22 22:50 millert
8982 * Makefile.in: Add targets for *.man.in, using config.status to
8983 generate *.man from *.man.in
8985 2000-03-22 22:20 millert
8987 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
8988 option and enbolden refs to sudo and visudo.
8990 2000-03-22 19:35 millert
8992 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
8993 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
8994 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
8995 FreeBSD login.conf support (untested on BSD/OS) based on a patch
8996 from Michael D. Marchionna. configure now does substitution on
8997 the man pages, allowing us to fix up the paths and set the
8998 section correctly. Based on an idea from Michael D. Marchionna.
9000 2000-03-22 19:27 millert
9002 * auth/passwd.c: Better fix for handling HP-UX aging info.
9004 2000-03-22 19:20 millert
9006 * sudo.c: Add support for set_logname run-time default
9008 2000-03-22 19:17 millert
9010 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9011 substitution on these to produce *.man
9013 2000-03-22 19:16 millert
9015 * sudo.man, sudoers.man, visudo.man: These files now get generated
9016 from *.man.in at configure time.
9018 2000-03-22 18:40 millert
9020 * defaults.c, defaults.h: Add set_logname option so users can turn
9021 off setting of LOGNAME/USER environment variables.
9023 2000-03-22 10:53 millert
9025 * testsudoers.c, lsearch.c, parse.c: kill register
9027 2000-03-13 15:52 millert
9029 * auth/passwd.c: HP-UX adds extra info at the end for password
9030 aging so when comparing the result of crypt to pw_passwd we only
9031 compare the first len(epass) bytes *unless* the user entered an
9032 empty string for a password.
9034 2000-03-13 11:05 millert
9036 * logging.c: Get rid of grandchild hack, it was causing problems
9037 and there is really no need for it. This fixes a bug where we
9038 spin eating up CPU when the user runs a long-running process like
9041 2000-03-07 14:26 millert
9043 * sudo.c: User can always specify a login class if he/she is
9046 2000-03-06 23:29 millert
9048 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9049 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9051 2000-03-06 14:42 millert
9053 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9056 2000-03-03 18:04 millert
9058 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9059 encrypted password is exactly 13 characters (indicateing standard
9060 a DES password). Many versions of crypt() do this for you, but
9061 not all (like HP-UX's).
9063 2000-03-01 21:01 millert
9065 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9067 2000-02-29 17:46 millert
9069 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9072 2000-02-29 17:41 millert
9074 * defaults.c: Use Argv[0] as the first arg to openlog() since
9075 visudo uses this too.
9077 2000-02-28 18:58 millert
9079 * sudo.c: Stash coredumpsize resource limit and retsore it before
9080 the exec() Otherwise the child ends up with a coredumpsize of 0.
9082 2000-02-26 22:56 millert
9084 * sudo.cat, sudo.man, sudo.pod: document -S flag
9086 2000-02-26 22:54 millert
9088 * sudo.c: fix usage string
9090 2000-02-26 22:48 millert
9092 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9093 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9094 -S flag (read passwd from stdin) and tgetpass_flags global that
9095 holds flags to be passed in to tgetpass(). Change echo_off param
9096 to tgetpass() into a flags field. There are currently 2 possible
9097 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9098 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9099 but echo is not set on the terminal, but sure to set it.
9101 2000-02-26 22:11 millert
9103 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9104 password timeout was disabled.
9106 2000-02-18 12:56 millert
9108 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9109 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9110 runaspw, and targetpw options.
9112 2000-02-18 12:11 millert
9114 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9115 visudo.c: enveditor -> env_editor
9117 2000-02-15 19:07 millert
9119 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9120 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9121 visudo.cat, visudo.man: crank versino to 1.6.3
9123 2000-02-15 19:03 millert
9125 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9126 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9127 defaults and make visudo honor them. This means that visudo will
9128 now parse the sudoers file *before* it is edited so a bogus
9129 sudoers file will cause a warning to go to stderr. Also, visudo
9130 checks the variables once--it does not check them after each
9131 editor run since that could be confusing.
9133 2000-02-15 18:49 millert
9135 * RUNSON: 1.6.2 -> 1.6.2p1
9137 2000-02-15 18:36 millert
9139 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9142 2000-02-13 13:38 millert
9144 * configure, configure.in: Fix thinko, some && should have been ||
9147 2000-02-13 13:28 millert
9149 * configure, configure.in: Don't initialized Makefile variables to
9150 be NULL since the user may want to import variables from their
9153 2000-02-03 21:09 millert
9155 * configure, configure.in: typo
9157 2000-01-27 15:01 millert
9159 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9160 11.0;jaearick@colby.edu
9162 2000-01-27 15:01 millert
9164 * CHANGES: recent changes; prepare for 1.6.2p1
9166 2000-01-26 23:31 millert
9168 * find_path.c: Don't apply SECURE_PATH if user is example;
9171 2000-01-26 16:21 millert
9173 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9174 'defaults' options based on INSTALL file info.
9176 2000-01-26 16:21 millert
9178 * INSTALL: Fix some while lies
9180 2000-01-24 10:48 millert
9182 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9185 2000-01-23 22:57 millert
9187 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9189 2000-01-23 22:42 millert
9191 * RUNSON: Last minute updates
9193 2000-01-23 22:26 millert
9195 * TROUBLESHOOTING: PAM entry
9197 2000-01-23 22:23 millert
9199 * auth/pam.c: correct a comment
9201 2000-01-23 22:03 millert
9203 * CHANGES, RUNSON: update for 1.6.2
9205 2000-01-23 21:59 millert
9207 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9208 with PAM. Based on patches from "Cloyce D. Spradling"
9209 <cloyce@headgear.org>
9211 2000-01-20 11:15 millert
9213 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9214 to an unsigned long long value.
9216 2000-01-19 14:07 millert
9218 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9219 sudoers locking in visudo. We now lock the sudoers file itself,
9220 not the temp file (since locking the temp file can foul up
9221 editors). The previous locking scheme didn't work because the fd
9222 was closed too early.
9224 2000-01-19 13:37 millert
9226 * configure, config.h.in, configure.in: Don't need test for
9227 ftruncate() any more.
9229 2000-01-18 21:23 millert
9231 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9232 cc. Fixes compilation with the unbundled HP-UX cc.
9234 2000-01-18 17:00 millert
9236 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9237 Campbell <aaron@cs.dal.ca>
9239 2000-01-17 18:46 millert
9241 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9242 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9243 tgetpass.c, version.h, visudo.c: update copyright year on changed
9246 2000-01-17 18:45 millert
9250 2000-01-17 18:45 millert
9254 2000-01-17 18:42 millert
9256 * INSTALL: Crank version to 1.6.2
9258 2000-01-17 18:11 millert
9260 * configure: Crank version to 1.6.2
9262 2000-01-17 17:46 millert
9264 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9265 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9267 2000-01-17 12:32 millert
9269 * CHANGES: recent changes
9271 2000-01-17 12:28 millert
9273 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9274 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9275 Crank version to 1.6.2
9277 2000-01-17 12:25 millert
9279 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9280 'shell_noargs' runtime option back in. We have to defer checking
9281 until after the sudoers file has been parsed but since there are
9282 now other options that operate that way this one can too. Based
9283 on a patch from bguillory@email.com.
9285 2000-01-16 23:05 millert
9287 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9290 2000-01-16 22:57 millert
9292 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9293 o Add section on verifypw and listpw o Define how NOPASSWD
9294 interacts with the -v and -l flags
9296 2000-01-14 12:39 millert
9298 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9299 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9301 2000-01-14 12:29 millert
9303 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9304 to the end and don't initialize the union member since that only
9305 works with an ANSI compiler. We set the value of the union by
9306 hand in init_defaults() anyway. This allows sudo to compile on a
9309 2000-01-11 13:20 millert
9311 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9312 netgr_matches needs to check shost as well as host since they may
9315 2000-01-11 13:17 millert
9317 * tgetpass.c: End on \r as well as \n
9319 2000-01-02 23:53 millert
9321 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9322 chaning from 0400 to whatever SUDOERS_MODE is (converting from
9323 the old sudoers mode). Assumes that SUDOERS_MODE is less
9324 restrictive than 0400 which should always be the case.
9326 2000-01-02 23:43 millert
9328 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9329 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9330 *any* entry for the user on the host with a NOPASSWD flag. For
9331 -v, only allow w/o a passwd if *all* entries for the user on the
9332 host w/ the specified runas user have the NOPASSWD flag set.
9334 2000-01-02 23:26 millert
9336 * Makefile.in: add check target
9338 1999-12-16 13:02 millert
9340 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9343 1999-12-10 00:09 millert
9345 * CHANGES: recent changes
9347 1999-12-08 23:04 millert
9349 * config.h.in, configure, configure.in, sudo.c: Add check for
9350 initgroups() since old SYSV lacks this.
9352 1999-12-08 22:54 millert
9354 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9355 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9356 Only define HAVE_FNMATCH if <fnmatch.h> exists.
9358 1999-12-06 01:47 millert
9360 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9361 to be enabled if the insults[] array is empty. Otherwise there
9362 would be division by zero.
9364 1999-12-06 01:25 millert
9366 * insults.h: Don't care about USE_INSULTS #define since the insult
9367 stuff may be overridden at runtime.
9369 1999-12-06 01:23 millert
9371 * auth/sudo_auth.c: Honor insults flag.
9373 1999-12-05 19:14 millert
9375 * CHANGES, parse.c: Don't ask the user for a password if the user
9376 is not allowed to run the command and the authenticate flag (in
9379 1999-12-05 19:05 millert
9381 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9382 newline we change to the INITIAL state. o Enter GOTRUNAS when we
9385 This allows #uid to work in a RunasAlias.
9387 1999-12-05 14:06 millert
9389 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9390 and runaslist now return a value o in a runasspec, if a runaslist
9391 does not return TRUE, set runas_matches to FALSE. Normally, a
9392 runaslist only returns FALSE for explicitly denied users. o
9393 since runaslist does not modify the stack there is no need for a
9394 push/pop in runasalias.
9396 1999-12-04 21:54 millert
9398 * check.c, sudo.c: Don't kill the user's tickets until after
9399 sudoers has been parsed since tty_tickets and ticket_dir could be
9402 1999-12-04 21:18 millert
9404 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9405 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9406 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9409 1999-12-04 21:18 millert
9411 * testsudoers.c: add set_fqdn() stub
9413 1999-12-02 15:31 millert
9415 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9416 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
9417 it cannot work since the command needs to be set before sudoers
9418 is parsed. o Fix the "set_home" sudoers option (only worked at
9419 compile time). o Fix "fqdn" sudoers option. We now set
9420 host/shost via set_fqdn which gets called when the "fqdn"
9421 option is set in sudoers. o Move the openlog() to
9422 store_syslogfac() so this gets overridden correctly from the
9425 1999-12-02 15:21 millert
9427 * auth/securid.c: SecurID support should compile now.
9429 1999-11-28 20:56 millert
9431 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
9432 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
9434 1999-11-28 18:51 millert
9436 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
9437 the .html files as they are generated automatically on the web
9440 1999-11-28 18:49 millert
9442 * CHANGES, LICENSE: kill characters that made wml unhappy
9444 1999-11-28 18:34 millert
9448 1999-11-25 12:05 millert
9450 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
9452 1999-11-24 19:43 millert
9454 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
9457 1999-11-23 22:52 millert
9459 * sudo.c: Make the -s flag be exclusive too. Also reorder the
9460 flags in the exclusive usage message so they are alphabetical.
9462 1999-11-23 13:27 millert
9464 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
9466 1999-11-23 13:07 millert
9468 * auth/API: fix typo
9470 1999-11-23 13:07 millert
9472 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
9474 1999-11-23 13:06 millert
9476 * auth/pam.c: fix a warning on redhat and spew an error if
9477 pam_authenticate() returns an error other than AUTH_SUCCESS or
9480 1999-11-23 00:43 millert
9482 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
9483 password required is the user's not root's
9485 1999-11-19 21:04 millert
9487 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
9489 1999-11-18 19:13 millert
9491 * RUNSON: updates from Brian Jackson + some formatting
9493 1999-11-17 21:39 millert
9495 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
9496 update o Changes for automating real binary releases
9498 1999-11-17 21:38 millert
9500 * Makefile.in: Add bindist target
9502 1999-11-16 16:26 millert
9504 * TROUBLESHOOTING: talk about run-time options in addition to
9505 compile-time options
9507 1999-11-16 01:16 millert
9509 * CHANGES: fix typos
9511 1999-11-16 01:09 millert
9513 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
9515 1999-11-16 00:42 millert
9517 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
9518 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
9519 rid of references to sudo-bugs. Now mention the web site or the
9522 1999-11-16 00:35 millert
9524 * sudoers.html: repair pod2html damage
9526 1999-11-16 00:28 millert
9528 * RUNSON, TODO: Update for 1.6 release
9530 1999-11-16 00:23 millert
9532 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
9533 about using ALL in a command context.
9535 1999-11-09 15:12 millert
9537 * visudo.c: Call yyrestart() on a parse error to reset the lexer
9540 1999-11-09 15:06 millert
9542 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
9543 yyrestart() into visudo.c since it might not get called in yywrap
9544 if we get a parse error (and we only reread the file on error
9547 1999-11-09 14:32 millert
9549 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
9550 clean up any buffers that might still exist. Call yyrestart()
9551 instead of using the deprecated YY_NEW_FILE macro.
9553 1999-11-09 12:13 millert
9555 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
9557 1999-11-08 19:00 millert
9559 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
9560 characters need to be escaped in names.
9562 1999-11-08 18:59 millert
9566 1999-11-08 18:59 millert
9568 * INSTALL: clarify Mac OS X entry
9570 1999-11-08 18:59 millert
9574 1999-11-08 17:45 millert
9576 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
9577 configure options for danity
9579 1999-11-05 17:11 millert
9581 * defaults.c: Fix printing of type T_MODE in dump_defaults()
9583 1999-11-05 12:00 millert
9585 * strcasecmp.c: missing sys/types.h
9587 1999-11-05 00:42 millert
9589 * INSTALL: Break out options that may be overridden at run time
9590 into their own section. Add a not about Max OS X and correct
9593 1999-11-04 14:01 millert
9595 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
9596 getrlimit to find the highest fd when closing all non-std fd's o
9597 Turn off core dumps via setrlimit for the sake of paranoia
9599 1999-11-04 13:57 millert
9603 1999-11-01 10:59 millert
9607 1999-11-01 10:58 millert
9609 * tgetpass.c: When read()'ing, do a single character at a time to
9610 be sure we don't go oast the newline.
9612 1999-11-01 10:43 millert
9614 * sudo.c: For the sudo_root option, check against user_uid, not
9615 getuid() since at this point, ruid == euid == 0.
9617 1999-10-31 23:14 millert
9619 * RUNSON: some updates
9621 1999-10-31 23:14 millert
9623 * logging.h: Fix compilation problem when --with-logging=file was
9624 specified. This means that syslog is now required to build sudo
9625 but that should not be a problem. If it is it can be fixed
9626 trivially with a configure check for syslog() or syslog.h.
9628 1999-10-31 23:00 millert
9630 * tgetpass.c: Make this work again for things like "sudo echo hi |
9631 more" where the tty gets put into character at a time mode. We
9632 read until we read end of line or we run out of space (similar to
9635 1999-10-20 11:23 millert
9637 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
9640 1999-10-20 11:23 millert
9644 1999-10-16 13:56 millert
9646 * defaults.c: Error out if syslog parameters are given without a
9647 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
9648 since there are no facilities in the 4.2BSD syslog.
9650 1999-10-15 16:37 millert
9652 * defaults.c: Ignore the syslog facility for systems w/ old syslog
9655 1999-10-15 12:51 millert
9657 * TROUBLESHOOTING: people with "." early in their path can have
9658 problems running sudo from the build dir ;-)
9660 1999-10-13 00:18 millert
9662 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
9664 1999-10-12 22:34 millert
9666 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
9667 auth/sudo_auth.h: New krb5 code from Frank Cusack
9668 <fcusack@iconnet.net>.
9670 1999-10-12 22:33 millert
9672 * CHANGES: update to reality
9674 1999-10-11 20:53 millert
9676 * auth/fwtk.c: include <auth.h> to get function prototypes.
9678 1999-10-11 20:05 millert
9680 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
9682 1999-10-11 19:42 millert
9684 * sudo.c: in set_perms(), always call setuid(0) before changing the
9685 ruid/euid so we always know it will succeed.
9687 1999-10-11 12:24 millert
9689 * defaults.h: #undef T_FOO to avoid conflicts with system defines
9692 1999-10-11 11:55 millert
9694 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
9695 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
9696 needs some fleshing out but this is a start.
9698 1999-10-10 17:21 millert
9700 * defaults.c: use strtol, not strtoul since not everyone has not
9703 1999-10-10 15:01 millert
9705 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
9708 1999-10-10 14:38 millert
9710 * lex.yy.c, parse.lex: o Add support for escaped characters in the
9711 WORD macro o Modify fill() to squash escape chars
9713 1999-10-10 13:56 millert
9715 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
9716 checks for default values that are supposed to be pathnames. o
9717 Fix a duplicate free when visudo finds an error.
9719 1999-10-09 01:01 millert
9721 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
9723 1999-10-07 21:12 millert
9725 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
9726 requiretty option o Move O_NOCTTY to compat.h
9728 1999-10-07 21:12 millert
9730 * logging.c: The exit() in log_error() was mistakenly removed in a
9731 previous version. Put it back...
9733 1999-10-07 17:20 millert
9735 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
9736 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
9737 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
9738 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
9739 Change defaults stuff to put the value right in the struct. o
9740 Implement mailer_flags o Store syslog stuff both in int and
9741 string form. Setting the string form magically updates the int
9742 version. o Add boolean attribute to strings where it makes sense
9745 1999-10-07 17:13 millert
9747 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
9749 1999-10-06 00:48 millert
9751 * auth/API: cleanup function no longer takes a status arg
9753 1999-10-06 00:48 millert
9757 1999-09-15 05:15 millert
9759 * TODO, config.h.in, configure, configure.in, logging.c: Use
9760 strftime() instead of ctime() if it is available.
9762 1999-09-14 12:58 millert
9764 * defaults.c: fix copyright date
9766 1999-09-14 12:57 millert
9768 * RUNSON: update ReliantUNIX entry
9770 1999-09-14 12:56 millert
9772 * defaults.c, defaults.h, logging.c: add log_year option
9774 1999-09-14 04:01 millert
9776 * configure, configure.in: add --without-sendmail to help output
9778 1999-09-14 03:42 millert
9780 * configure, configure.in: enforce an otctal arg for
9783 1999-09-08 04:06 millert
9785 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
9786 config.h.in, configure, configure.in, defaults.c, defaults.h,
9787 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
9788 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
9789 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
9790 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
9791 "Defaults" line in sudoers to make configuration variables
9792 changable at runtime (and on a global, per-host and per-user
9793 basis). Both the names and the internal representation are still
9794 subject to change. It was necessary to make sudo_user.runas but
9795 a char ** instead of a char * since this value can be changed by
9796 a Defaults line. There is a similar (but more complicated) issue
9797 with sudo_user.prompt but it is handled differently at the
9800 Add a "-L" flag to list the name of options with their
9801 descriptions. This may only be temporary.
9803 Move some prototypes to parse.h
9805 Be much less restrictive on what is allowed for a username.
9807 1999-09-08 04:01 millert
9809 * sample.syslog.conf: Add more info
9811 1999-09-04 03:09 millert
9813 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
9814 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
9817 1999-08-31 05:39 millert
9819 * auth/sudo_auth.h: move dce_verofy proto to correct section
9821 1999-08-31 05:39 millert
9823 * auth/dce.c: remove XXX
9825 1999-08-28 06:00 millert
9827 * emul/fnmatch.h: Add fnmatch() prototype
9829 1999-08-28 06:00 millert
9831 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
9832 emul/fnmatch.h to be after sudo.h for __P
9834 1999-08-28 05:59 millert
9836 * sudo.h: add strcasecmp proto
9838 1999-08-28 05:50 millert
9840 * auth/sudo_auth.c: add check for case where there are no auth
9843 1999-08-28 05:36 millert
9845 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
9846 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
9848 1999-08-28 05:24 millert
9850 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
9851 everywhere we include string.h
9853 1999-08-28 05:22 millert
9855 * version.c: nicer output when showing auth methods
9857 1999-08-28 05:00 millert
9859 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
9861 1999-08-28 04:49 millert
9863 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
9865 1999-08-28 04:22 millert
9867 * parse.lex, lex.yy.c: fix definition of OCTECT
9869 1999-08-28 04:10 millert
9871 * configure, configure.in: aix_auth.o not authenticate.o
9873 1999-08-27 17:02 millert
9875 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
9876 generated from the keyboard). Since we run with ruid/euid == 0
9877 the user can't really signal us in nasty ways.
9879 1999-08-27 17:01 millert
9881 * visudo.c: Don't need to worry about catching too many signals
9882 since we do locking on the tmp file. If a lockfile is really
9883 stale, it will be detected and overwritten.
9885 1999-08-27 16:09 millert
9887 * INSTALL, Makefile.in: include auth/API in tarball
9889 1999-08-27 16:09 millert
9891 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
9892 loop and only do the memset if we are *not* in standalone mode.
9894 1999-08-27 13:46 millert
9896 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
9898 1999-08-27 11:53 millert
9900 * sudo.c: fix --enable-noargs-shell
9902 1999-08-27 11:06 millert
9904 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
9906 1999-08-27 10:54 millert
9908 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
9910 1999-08-27 10:50 millert
9912 * auth/dce.c: there were still some return(0)'s hanging around,
9913 make them AUTH_FAILURE
9915 1999-08-27 10:39 millert
9917 * parse.c: typo in comment
9919 1999-08-27 10:03 millert
9921 * version.c: add missing semicolon
9923 1999-08-27 08:31 millert
9925 * auth/sudo_auth.h: missing backslash
9927 1999-08-26 17:24 millert
9929 * CHANGES, config.h.in, configure, configure.in: Kill
9930 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
9932 1999-08-26 09:21 millert
9934 * Makefile.in: add parse.h to HDRS
9936 1999-08-26 09:16 millert
9938 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
9939 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
9940 in LIBS, commong ld flags go in LDFLAGS and network libs like
9941 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
9942 on Solaris and is a bit cleaner in general.
9944 1999-08-26 06:56 millert
9946 * UPGRADE: mention ptmp -> sudoers.tmp
9948 1999-08-26 06:12 millert
9950 * configure.in, configure, config.h.in: Define
9951 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
9953 1999-08-26 05:37 millert
9955 * RUNSON: add 2 reports
9957 1999-08-26 05:20 millert
9959 * auth/kerb5.c: Minor changes, mostly cosmetic.
9960 verify_krb_v5_tgt() changed to return a value more like a system
9963 1999-08-26 05:19 millert
9965 * auth/dce.c: Add an XXX
9967 1999-08-26 05:19 millert
9969 * TODO: more things todo!
9971 1999-08-26 05:18 millert
9973 * sample.sudoers: update based on what is in the man page
9975 1999-08-26 05:10 millert
9977 * parse.yacc: minor change to first line printed in -l mode
9979 1999-08-26 05:10 millert
9981 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
9982 VARIABLES" section to "ENVIRONMENT" to be more standard and add
9985 1999-08-26 05:08 millert
9987 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
9988 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
9991 1999-08-26 05:06 millert
9993 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
9995 1999-08-26 05:05 millert
9997 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
9999 1999-08-26 05:04 millert
10001 * UPGRADE: mention timestamp changes
10003 1999-08-26 05:04 millert
10005 * PORTING: cosmetic cleanup
10007 1999-08-26 05:00 millert
10009 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10010 sudoers(8) man page
10012 1999-08-24 13:45 millert
10014 * version.c: Update comments about syslog name tables
10016 1999-08-24 13:37 millert
10018 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10019 configure.in, parse.yacc: include strcasecmp() for those without
10022 1999-08-24 12:43 millert
10024 * sample.sudoers: Use the : operator some more and fix a typo
10026 1999-08-24 12:43 millert
10028 * HISTORY: update the history of sudo
10030 1999-08-24 12:42 millert
10032 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10034 1999-08-24 12:41 millert
10036 * CHANGES: recent changes
10038 1999-08-24 12:40 millert
10040 * sudo.tab.h: these should be generated with byacc, not bison
10042 1999-08-24 12:40 millert
10046 1999-08-24 11:58 millert
10048 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10049 the stored (expanded) alias was not stored with the contents.
10050 This could lead to incorrect output if the sudoers file had
10051 different alias types with the same name. Normal parsing (ie:
10052 not in '-l' mode) is unaffected.
10054 1999-08-23 12:47 millert
10056 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10057 proto on some systems
10059 1999-08-22 13:10 millert
10061 * snprintf.c: fix comment
10063 1999-08-22 13:09 millert
10065 * tgetpass.c: don't need limits.h
10067 1999-08-22 07:36 millert
10069 * snprintf.c: kill bogus reference to vfprintf
10071 1999-08-22 07:26 millert
10073 * sample.sudoers, sudoers: better examples
10075 1999-08-22 07:23 millert
10077 * snprintf.c: Add some const in the K&R defs. This is safe since
10078 we define const away if the compiler doesn't grok it.
10080 1999-08-22 07:22 millert
10082 * aclocal.m4, configure: Better test for working long long support.
10083 Ultrix compiler supports basic long long but not all operations
10086 1999-08-22 05:59 millert
10088 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10089 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10090 MAXINT before including hpsecurity.h to silence an HP-UX warning
10091 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10093 1999-08-21 15:00 millert
10095 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10096 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10097 quads if the compiler does. No floating point yet, perhaps
10100 1999-08-20 16:37 millert
10102 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10103 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10104 code as root, not the invoking user. It doesn't really gain us
10105 anything to run as the user since an attacker can just have an
10106 setuid(0) in their egg. Running as root solves potential
10107 problems wrt signalling.
10109 1999-08-19 13:45 millert
10111 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10112 let the signal handler get it if we are still running, else let
10113 init reap it for us. The extra time it takes to wait lets the
10114 user know that mail is being sent.
10116 Install SIGCHLD handler in main() and for POSIX signals, block
10117 everything *except* SIGCHLD.
10119 1999-08-19 12:30 millert
10121 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10122 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10123 a bitmap instead of an int. This makes it possible to express
10124 things like "failed to validate because user not listed for this
10125 host". Some thigns that were previously VALIDATE_FOO are now
10126 FLAG_FOO. This may change later on.
10128 Reorganized code in log_auth() and sudo.c to deal with above
10131 Safer versions of push/pushcp with in the do { ... } while (0)
10134 parse.yacc now saves info on the stack to allow parse.c to
10135 determine if a user was listed, but not for the host he/she tried
10138 Added --with-mail-if-no-host option
10140 1999-08-17 11:29 millert
10142 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10143 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10144 externally visible. o If pedantic > 1, it is a parse error. o
10145 Add -s (strict) option to visudo which sets pedantic to 2.
10147 1999-08-17 11:26 millert
10149 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10151 1999-08-17 11:20 millert
10153 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10155 1999-08-17 10:29 millert
10157 * configure, configure.in, Makefile.in: Add testsudoers to default
10158 build target if --with-devel Don't clean generated parser files
10159 unless "distclean".
10161 1999-08-17 08:47 millert
10163 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10164 not just those that match, or we get spurious warnings.
10166 1999-08-17 05:32 millert
10168 * TROUBLESHOOTING: reference samples.sylog.conf
10170 1999-08-14 11:50 millert
10172 * sample.syslog.conf: Sample entries for syslog.conf
10174 1999-08-14 11:40 millert
10176 * CHANGES: recent changes
10178 1999-08-14 11:36 millert
10180 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10181 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10182 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10183 configured into flags and add a flag to specify an auth method is
10184 running alone (the only one). Pass auth methods their sudo_auth
10185 pointer, not the data pointer. This allows us to get at the
10186 flags and tell if we are the only auth method. That, in turn,
10187 allows the method to be able to decide what should/should not be
10188 a fatal error. Currently only rfc1938 uses it this way, which
10189 allows us to kill the OTP_ONLY define and te hackery that went
10190 with it. With access to the sudo_auth struct, methods can also
10191 get at a string holding their cannonical name (useful in error
10194 1999-08-14 11:34 millert
10196 * Makefile.in, INSTALL, README, config.h.in, configure,
10197 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10198 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10199 o real dependencies in the Makefile o --with-devel option to
10200 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10201 "foo->bar" o ALL goes back to being a token, not a string but
10202 don't leak memory o rename hsotspec -> host in parse.yacc
10204 1999-08-12 12:26 millert
10206 * BUGS, CHANGES: recent changes
10208 1999-08-12 12:24 millert
10210 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10211 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10212 *snprintf() before -ldb is added to LIBS since -ldb includes a
10213 bogus snprintf(). o Add forward refs for struct mbuf and struct
10214 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10215 to fix -Wall o Add missing includes to fix more -Wall
10217 1999-08-12 10:37 millert
10219 * INSTALL, check.c, config.h.in, configure, configure.in,
10220 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10221 o Add a "pedentic" flag to the parser. This makes sudo warn in
10222 cases where an alias may be used before it is defined. Only
10223 turned on for visudo and testsudoers. o Add
10224 --disable-authentication option that makes sudo not require
10225 authentication by default. The PASSWD tag can be used to require
10226 authentication for an entry. We no longer overload
10229 1999-08-12 10:29 millert
10231 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10232 USERNAME. These days a username can contain just about anything
10233 so be very permissive. Also drop the unused \. punctuation.
10235 1999-08-09 18:25 millert
10237 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10238 parse.h o find_alias() now returns an aliasinfo * instead of
10239 boolean o add_alias() now takes a value parameter to store in the
10240 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10241 return: 1) positive match 0) negative match (due to '!') -1) no
10242 match This means setting $$ explicitly in all cases, which I
10243 should have done in the first place. It also means that we
10244 always store a value that is != -1 and when we see a '!' we can
10245 set *_matches to !rv if rv != -1. The upshot of all of this is
10246 that '!' now works the way it should in lists and some of the
10247 rules are more uniform and sensible.
10249 1999-08-09 18:17 millert
10251 * Makefile.in: add parse.h dependency
10253 1999-08-09 18:17 millert
10255 * parse.h: kill unused *_matched macros
10257 1999-08-09 10:35 millert
10259 * parse.yacc: Allow a list of users as the first thing in a user
10260 spec, not just a single entry. This makes things more uniform,
10261 though it does allow you to write user specs that are hard to
10264 1999-08-09 10:08 millert
10268 1999-08-09 10:08 millert
10270 * configure.in: fix check for crypt() in libufc
10272 1999-08-07 14:03 millert
10274 * README: sudo-users list now exists
10276 1999-08-07 07:46 millert
10278 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10281 1999-08-07 05:59 millert
10283 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10284 config.h.in, configure.in, logging.c, sudo.h, version.c,
10285 visudo.c, configure, fileops.c: o Move lock_file() and touch()
10286 into fileops.c so visudo can use them o Visudo now locks the
10287 sudoers temp file instead of bailing when the temp file already
10288 exists. This fixes the problem of stale temp files but it does
10289 *require* that you not try to put the temp file in a
10290 world-writable directory. This shoud not be an issue as the temp
10291 file should live in the same dir as sudoers. o Visudo now only
10292 installs the temp file as sudoers if it changed.
10294 1999-08-06 09:49 millert
10296 * logging.c: add fcntl locking
10298 1999-08-06 09:33 millert
10300 * configure, config.h.in, configure.in, logging.c: Lock the log
10303 1999-08-06 05:36 millert
10305 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10306 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10307 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10308 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10309 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10311 1999-08-05 17:38 millert
10313 * INSTALL, check.c, config.h.in, configure, configure.in,
10314 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10315 more things to root sudo -V config reporting
10317 1999-08-05 10:56 millert
10319 * configure, configure.in: aix_auth.o not authenticate.o
10321 1999-08-05 10:48 millert
10323 * config.h.in: Add --with-goodpri and --with-badpri configure
10324 options to specify the syslog priority to use.
10326 1999-08-05 10:30 millert
10328 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10329 and --with-badpri configure options to specify the syslog
10332 1999-08-05 10:25 millert
10334 * compat.h: kill crufty AIX stuff
10336 1999-08-05 06:55 millert
10338 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10339 deal with $< like I would expect. Both GNU and BSD makes get
10340 this right but... So, we just expand $< inline at the cost of
10343 1999-08-05 06:52 millert
10345 * version.c: If the invoking user is root, sudo will now print
10346 configure info in -V mode. Currently just prints logging info,
10347 to be expanded later.
10349 1999-08-05 06:51 millert
10351 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10352 facility and priority o use new print_version() functino for -V
10355 1999-08-05 06:49 millert
10357 * check.c: Don't need version.c
10359 1999-08-05 06:21 millert
10361 * configure, configure.in, aclocal.m4, config.h.in: Add check for
10362 syslog facilities and priorities tables in syslog.h
10364 1999-08-05 05:23 millert
10366 * Makefile.in: o authenticate -> aix_auth o add version.c
10368 1999-08-05 05:21 millert
10370 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10372 1999-08-04 13:32 millert
10374 * TODO: sudo should lock its logfile
10376 1999-08-04 13:28 millert
10378 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10379 shortcut macros for append() to make things more readable. o The
10380 separator in append() is now a string instead of a char. o In
10381 append(), only prepend the separator if the last char is not a
10382 '!'. This is a hack but it greatly simplifies '!' handling. o
10383 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10384 inherited across entries in a list (matches current behavior).
10385 o Fix formatting in -l mode such that items in a list are
10386 separated by a space. Greatlt improves readability. o Space
10387 for name field in struct aliasinfo is now allocated dyanically
10388 instead of using a (big) buffer. o In add_alias(), only search
10389 the list once (lsearch instead of lfind + lsearch)
10391 1999-08-04 11:31 millert
10393 * lex.yy.c, sudo.tab.h: regen
10395 1999-08-04 10:54 millert
10397 * configure, configure.in: Solais pam doesn't require anye xtra
10400 1999-08-04 05:35 millert
10402 * parse.yacc: o Simpler '!' support now that the lexer deals with
10403 multiple !'s for us. o In the case of opFOO, have FOO give a
10404 boolean return value and set foo_matches in opFOO, not FOO. o
10405 Treat 'ALL' as a string since it gets fill()'d in
10406 parse.lex--fixes a small memory leak. In the long run it may
10407 be better to just fix parse.lex and make ALL back into a token.
10408 However, having it be a string is useful since it can be
10409 easily passed back to the parent rule if we so desire.
10411 1999-08-04 03:54 millert
10413 * parse.lex: o Remove some unnecessary backslashes o collapse
10414 multiple !'s by using !+ and checking if yyleng is even or odd.
10415 this allows us to simplify ! handling in parse.yacc
10417 1999-08-04 03:53 millert
10419 * sudo.c: -u flag was being ignored
10421 1999-08-01 13:04 millert
10423 * Makefile.in: correct fix
10425 1999-08-01 12:37 millert
10427 * Makefile.in: work around pod2man stupididy
10429 1999-08-01 12:35 millert
10431 * Makefile.in: correct dependencies for .cat
10433 1999-08-01 12:26 millert
10435 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
10437 1999-08-01 12:25 millert
10439 * sudo.pod, visudo.pod: Add copyright Update to reality
10441 1999-08-01 11:42 millert
10443 * parse.c, sudo.c, sudo.h: rename validate() to the more
10444 descriptive sudoers_lookup()
10446 1999-08-01 06:49 millert
10448 * auth/aix_auth.c: use tgetpass
10450 1999-07-31 12:32 millert
10454 1999-07-31 12:31 millert
10456 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
10457 configure, configure.in, sudo.c: Sudo, not CU Sudo
10459 1999-07-31 12:19 millert
10461 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
10462 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
10463 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
10464 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
10465 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
10466 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
10467 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
10468 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
10469 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
10470 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
10471 LICENSE: add 4th term to license similar to term 5 in the apache
10474 1999-07-31 12:02 millert
10476 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
10477 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
10479 1999-07-28 05:24 millert
10483 1999-07-28 05:21 millert
10485 * check.c: Use dirs instead of files for timestamp. This allows
10486 tty and non-tty schemes to coexist reasonably. Note, however,
10487 that when you update a tty ticket, the mtime on the user dir gets
10490 1999-07-28 05:17 millert
10492 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
10493 to link with "-lprot -lx" when linking test program, not just
10494 -lprot. Also add check for getspnam(). The SCO docs indicate
10495 that /etc/shadow can be used but this may be a lie.
10497 1999-07-24 03:35 millert
10499 * auth/API: first cut at auth API description
10501 1999-07-22 15:48 millert
10503 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
10504 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
10505 now an init method that gets run before the main loop. This
10506 allows auth routines to differentiate between initialization that
10507 happens once vs. setup that needs to run each time through the
10510 1999-07-22 12:23 millert
10512 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
10514 1999-07-22 12:22 millert
10516 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
10517 versions of asprintf() and vasprintf()
10519 1999-07-22 09:14 millert
10521 * TODO: remove 2 items. One done, one won't do.
10523 1999-07-22 09:10 millert
10525 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
10526 visudo.cat, visudo.html, configure, lex.yy.c: regen
10528 1999-07-22 09:06 millert
10530 * CHANGES: new changes
10532 1999-07-22 09:01 millert
10534 * sudo.pod: o Document -K flag and update meaning of -k flag. o
10535 BSD-style copyright o Document clearing of BIND resolver
10536 environment variables o Clarify bit about shared libs o suggest
10537 rc files create /tmp/.odus if your OS gives away files
10539 1999-07-22 08:59 millert
10541 * visudo.pod: BSD license
10543 1999-07-22 08:58 millert
10545 * tgetpass.c: o BSD copyright o no need to block signals, we now do
10546 that in main() o cosmetic changes
10548 1999-07-22 08:57 millert
10550 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
10551 sudo_user" instead of old globals. o some cometic cleanup
10553 1999-07-22 08:56 millert
10555 * sudo_setenv.c, version.h: BSD-style copyright
10557 1999-07-22 08:56 millert
10559 * sudo.h: o BSD copyright o logging and parser bits moved to their
10560 own .h files o new "struct sudo_user" to encapsulate many of the
10563 1999-07-22 08:55 millert
10565 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
10566 use new logging routines o simplified flow of control o BIND
10567 resolver additions to badenv_table
10569 1999-07-22 08:53 millert
10571 * strerror.c: BSD-style copyright
10573 1999-07-22 08:53 millert
10575 * snprintf.c: Now compiles on more K&R compilers
10577 1999-07-22 08:52 millert
10579 * putenv.c: BSD-style copyright, cosmetic changes
10581 1999-07-22 08:51 millert
10583 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
10584 Move parser-specific defines and structs into parse.h + other
10587 1999-07-22 08:51 millert
10589 * logging.h: defines for logging routines
10591 1999-07-22 08:49 millert
10593 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
10594 interfaces.h, pathnames.h.in: BSD-style copyright
10596 1999-07-22 08:48 millert
10598 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
10599 copyright, cosmetic changes
10601 1999-07-22 08:46 millert
10603 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
10604 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
10605 changes to fill in AUTH_OBJS for new auth api o check for
10606 strerror(), v?snprintf() and v?asprintf() o replace
10607 --with-AuthSRV with --with-fwtk
10609 1999-07-22 08:43 millert
10611 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
10612 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
10613 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
10616 1999-07-22 08:42 millert
10618 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
10621 1999-07-22 08:39 millert
10623 * alloc.c: BSD-style copyright
10625 1999-07-22 08:38 millert
10627 * TROUBLESHOOTING: no more --with-getpass
10629 1999-07-22 08:34 millert
10631 * TODO: Take out things I've done...
10633 1999-07-22 08:34 millert
10635 * README: Refer to LICENSE
10637 1999-07-22 08:34 millert
10639 * PORTING: --with-getpass no longer exists
10641 1999-07-22 08:33 millert
10643 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
10644 new files and new auth modules.
10646 1999-07-22 08:32 millert
10648 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
10649 --with-fwtk and --without-passwd.
10651 1999-07-22 08:31 millert
10653 * HISTORY: Update history a bit
10655 1999-07-22 08:29 millert
10657 * COPYING, LICENSE: Now distributed under a BSD-style license
10659 1999-07-22 08:28 millert
10661 * auth/sudo_auth.c: o BSD-style copyright o Add support for
10662 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
10663 rfc1938 code o new struct sudo_user global
10665 1999-07-22 08:25 millert
10667 * auth/: pam.c, sia.c: BSD-style copyright and use new log
10670 1999-07-22 08:24 millert
10672 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
10673 Use asprintf() and snprintf() where sensible.
10675 1999-07-22 08:19 millert
10677 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
10678 handling is now done more reasonably--better sanity checks and
10679 tty-based stamps are now done as files in a directory with the
10680 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
10681 It is not currently possible to mix tty and non-tty based ticket
10682 schemes but this may change in the future (it requires sudo to
10683 use a directory instead of a file in the non-tty case). Also,
10684 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
10685 really deletes the file. That way you don't get the lecture
10686 again just because you killed your ticket in .logout. BSD-style
10689 1999-07-22 08:13 millert
10691 * logging.c: o rewritten logging routines. log_error() now takes
10692 printf-style varargs and log_auth() for the return value of
10693 validate(). o BSD-style copyright
10695 1999-07-22 07:04 millert
10697 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
10700 1999-07-22 07:02 millert
10702 * auth/fwtk.c: Use snprintf() where it makes sense and add a
10703 BSD-style copyright
10705 1999-07-22 07:00 millert
10707 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
10708 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
10711 1999-07-22 06:57 millert
10713 * emul/utime.h, utime.c: BSD-style copyright
10715 1999-07-22 06:57 millert
10717 * emul/search.h: this has been rewritten so use my BSD-style
10720 1999-07-15 11:21 millert
10722 * snprintf.c: include malloc.h if no stdlib.h
10724 1999-07-15 10:21 millert
10726 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
10728 1999-07-15 10:20 millert
10730 * strerror.c: strerror() for systems w/o it
10732 1999-07-12 06:53 millert
10734 * visudo.c: stylistic changes
10736 1999-07-12 06:25 millert
10738 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
10741 1999-07-11 16:10 millert
10743 * auth/pam.c: remove missed ref to PAM_nullpw
10745 1999-07-11 16:10 millert
10747 * auth/sudo_auth.h: pasto
10749 1999-07-11 15:19 millert
10751 * auth/kerb5.c: more or less complete now--still untested
10753 1999-07-11 15:09 millert
10755 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
10757 1999-07-11 14:42 millert
10759 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
10760 code into rfc1938.c
10762 1999-07-11 07:22 millert
10764 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
10765 unchanged from dce_pwent.c
10767 1999-07-11 06:44 millert
10769 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
10770 Could probably be much better
10772 1999-07-11 06:43 millert
10774 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
10777 1999-07-11 05:37 millert
10779 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
10781 1999-07-11 05:33 millert
10783 * auth/pam.c: don't use prompt global, it will go away
10785 1999-07-11 05:32 millert
10787 * auth/secureware.c: correct copyright years
10789 1999-07-10 20:32 millert
10791 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
10792 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
10793 New authentication API and methods
10795 1999-07-08 06:46 millert
10797 * parse.yacc: only save an entry if user_matches && host_matches,
10798 even if the stack is empty (fix for previous commit)
10800 1999-07-08 06:35 millert
10802 * parse.yacc: 1) Always save an entry on the stack if it is empty.
10803 This fixes the -l and -v flags that were broken by earlier parser
10806 2) In a Runas list, don't negate FALSE -> TRUE since that would
10807 make !foo match any time the user specified a runas user (via -u)
10810 1999-07-08 05:45 millert
10812 * testsudoers.c: interfaces and num_interfaces are now auto, not
10815 1999-07-07 14:09 millert
10817 * auth.c: use a static global to keep stae about empty passwords
10819 1999-07-07 14:08 millert
10821 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
10824 1999-07-05 16:53 millert
10826 * auth.c: PAM prompt code was wrong, looks like we have to kludge
10829 1999-07-05 16:35 millert
10831 * auth.c: In the PAM code, when a user hits return at the first
10832 password prompt, exit without a warning just like the normal auth
10835 1999-07-05 16:15 millert
10837 * configure, configure.in: kludge around cross-compiler false
10840 1999-07-05 16:14 millert
10842 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
10843 (correct) PAM code Tgetpass now takes an echo flag for use with
10844 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
10845 useless umask setting Change error from BAD_ALLOCATION ->
10846 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
10847 auth.c for consistency
10849 1999-07-05 16:11 millert
10851 * sudo.c: Some -Wall and kill some trailing spaces
10853 1999-07-05 16:10 millert
10855 * configure.in: define -D__EXTENSIONS__ for solaris so we get
10858 1999-06-22 09:42 millert
10860 * RUNSON: add Dynix 4.4.4
10862 1999-06-22 09:30 millert
10864 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
10865 version, fall back on old kerb4 auth code
10867 1999-06-22 06:41 millert
10869 * INSTALL: clarify some things
10871 1999-06-22 06:38 millert
10873 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
10875 1999-06-14 19:47 millert
10877 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
10879 1999-06-03 12:34 millert
10881 * tgetpass.c: Fix open(2) return value checking, was NULL for
10882 fopen, should be -1 for open
10884 1999-06-03 12:06 millert
10888 1999-06-03 12:06 millert
10890 * configure.in: better wording for solaris pam notice
10892 1999-06-03 11:52 millert
10894 * CHANGES: document recent changes
10896 1999-06-03 11:52 millert
10898 * TROUBLESHOOTING: Update shadow password section
10900 1999-06-03 11:51 millert
10902 * auth.c: move authentication code from check.c to auth.c
10904 1999-06-03 11:51 millert
10906 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
10908 1999-05-16 21:36 millert
10910 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
10911 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
10912 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
10913 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
10914 interface-related defines to interfaces.h so we don't have to
10915 include <netinet/in.h> everywhere.
10917 1999-05-14 12:30 millert
10919 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
10920 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
10921 braindeath with our own SUDO_MAX_PASS.
10922 It turns out the old DES crypt does the right thing with
10924 longert than 8 characters.
10925 o Fix common typo (necesary -> necessary)
10928 1999-05-03 12:00 millert
10930 * sudo.c: set $LOGNAME when we set $USER
10932 1999-04-27 00:00 millert
10934 * INSTALL: add comment about digital unix and interfaces.c warning
10937 1999-04-15 01:12 millert
10939 * sample.sudoers: use modern paths and give examples for some of
10940 the new parser features
10942 1999-04-10 13:03 millert
10944 * parse.c: fix comment
10946 1999-04-10 00:49 millert
10948 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
10949 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
10950 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
10951 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
10952 Function names should be flush with the start of the line so they
10953 can be found trivially in an editor and with grep
10955 1999-04-10 00:40 millert
10957 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
10958 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
10959 is already void, no need to cast it
10961 1999-04-10 00:37 millert
10963 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
10964 (this should not be possible)
10966 1999-04-10 00:10 millert
10968 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
10969 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
10970 listed in sudoers) to the command instead of stashing the struct
10971 stat. Should be safer.
10973 1999-04-08 19:56 millert
10975 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
10978 1999-04-07 20:20 millert
10982 1999-04-07 19:18 millert
10984 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
10985 sudoers.pod: You can now specifiy a host list instead of just a
10986 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
10989 1999-04-07 02:59 millert
10991 * testsudoers.c: Quiet -Wall
10993 1999-04-07 02:50 millert
10995 * parse.yacc: Move the push from the beginning of cmndspec to the
10996 end. This means we no longer have to do a push at the end of
10997 privilege, just reset some values.
10999 1999-04-06 20:24 millert
11001 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11002 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11005 1999-04-06 14:12 millert
11007 * sudoers.pod: modernize paths and update su example based on
11010 1999-04-06 14:06 millert
11012 * sample.sudoers: New runas semantics
11014 1999-04-06 13:54 millert
11016 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11017 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11018 ourselves so we don't need to rely on the system strdup(3) which
11019 may or may not exist. There is now no need to provide strdup()
11020 for those w/o it. Also, the prototype for estrdup() was wrong,
11021 it returns char * and its param is const.
11023 1999-04-06 13:40 millert
11025 * getcwd.c: $Sudo tag
11027 1999-04-06 13:20 millert
11029 * check.c: buf should be prompt; Michael Robokoff
11030 <mrobo@networkcs.com>
11032 1999-04-06 01:40 millert
11034 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11035 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11038 1999-04-06 01:38 millert
11040 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11043 1999-04-06 01:08 millert
11045 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11048 1999-04-06 01:00 millert
11050 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11051 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11052 command but the NOPASSWD flag was set. Make runasspec,
11053 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11054 support for '!' in the runas list Fix double printing of '%' and
11055 '+' for groups and netgroups respectively Add *_matched macros
11056 (no need for local stack variable). Should only be used directly
11057 after a pop (since top must be >= 2).
11059 1999-04-05 23:25 millert
11061 * aclocal.m4, configure.in: Add copyright, somewhat silly
11063 1999-04-05 16:57 millert
11065 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11066 check_sia.c, compat.h, config.h.in, configure, configure.in,
11067 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11068 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11069 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11070 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11071 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11072 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11073 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11074 1.6 and combine copyright statements
11076 1999-04-05 16:30 millert
11078 * sample.sudoers: Use ! not ^ to do negation
11080 1999-04-05 16:29 millert
11084 1999-04-05 16:28 millert
11086 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11087 across entris in a command list. Add a PASSWD tag to reverse
11088 NOPASSWD. When you override a runas or *PASSWD tag the value
11089 given becomes the new default for the rest of the command list.
11091 1999-04-02 16:03 millert
11093 * CHANGES, RUNSON: update for 1.5.9
11095 1999-04-02 16:02 millert
11097 * visudo.c: Shift return value of system(3) by 8 to get real exit
11098 value and if it is not 1 or 0 print the retval along with the
11101 1999-03-30 16:45 millert
11103 * Makefile.in: testsudoers needs LIBOBJS too
11105 1999-03-30 12:17 millert
11107 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11108 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11109 would not allow millert to run ls as root.
11111 1999-03-30 01:08 millert
11113 * CHANGES: new change
11115 1999-03-30 01:03 millert
11117 * parse.yacc: Save entries that match a ! command on the matching
11120 1999-03-30 01:01 millert
11122 * sudo.c: Make sudo's usage info better when mutually exclusive
11123 args are given and don't rely on argument order to detect this;
11126 1999-03-29 15:03 millert
11128 * CHANGES, Makefile.in, RUNSON: updates from CU
11130 1999-03-28 23:38 millert
11132 * Makefile.in: use gzip
11134 1999-03-28 23:31 millert
11136 * parse.yacc: Fix off by one error introduced in *alloc changes
11138 1999-03-28 23:05 millert
11140 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11141 check_sia.c, compat.h, config.h.in, configure, configure.in,
11142 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11143 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11144 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11145 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11146 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11147 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11148 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11149 emul/utime.h: ++version
11151 1999-03-28 21:59 millert
11153 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11154 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11155 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11156 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11157 emalloc/erealloc/estrdup
11159 1999-03-28 20:29 millert
11161 * alloc.c: error checking memory allocation routines
11163 1999-03-28 19:23 millert
11165 * parse.yacc: Still not right, this fixes it for real
11167 1999-03-28 19:08 millert
11169 * parse.yacc: Fix for previous commit
11171 1999-03-28 19:05 millert
11173 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11174 when mixing different runas specs and ! commands. For example:
11175 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11176 allow millert to run whoami as root as well as daemon when it
11177 should just allow daemon. The problem was that comma-separated
11178 commands in a list shared the same entry on the matching stack.
11179 Now they get their own entry iff there is a full match. It may
11180 be better to just make the runas spec persistent across all
11181 commands in a list like the user and host entries of the matching
11182 stack. However, since that is a fairly major change it should
11183 gets its own minor rev increase.
11185 1999-03-28 13:50 millert
11187 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11190 1999-03-26 13:17 millert
11194 1999-03-26 13:12 millert
11196 * sample.sudoers: better su entry
11198 1999-03-26 13:10 millert
11202 1999-03-26 13:09 millert
11204 * check.c, configure.in: new pam code that works on solaris, should
11205 work on linux too; aelberg@home.com
11207 1999-03-19 14:44 millert
11209 * RUNSON: more entries
11211 1999-03-19 14:43 millert
11213 * config.h.in: only include strings.h if there is no string.h
11215 1999-03-17 15:25 millert
11217 * config.guess: Sinix is now being called ReliantUNIX;
11218 bjjackso@us.oracle.com
11220 1999-03-13 13:37 millert
11222 * sudo.c: shost must be set before log functions are called #ifdef
11225 1999-03-07 18:34 millert
11227 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11228 command args. Stop processing an arg when you hit a backslash so
11229 the quoted-character detection can catch it.
11231 1999-02-26 01:19 millert
11233 * interfaces.c: include sys/time.h; aparently AIX needs it.
11236 1999-02-23 19:43 millert
11238 * configure, configure.in: add missing case statement so
11239 --without-sendmail works
11241 1999-02-22 21:51 millert
11245 1999-02-22 15:10 millert
11247 * configure, configure.in: only search for -lsun in irix <= 4.x
11249 1999-02-22 15:01 millert
11251 * configure, configure.in: back out last configure.in change now
11252 that I've hacked autoconf to fix the real problem and add a
11255 1999-02-22 14:32 millert
11259 1999-02-22 14:05 millert
11261 * getcwd.c: add def of dirfd() for those without it
11263 1999-02-22 10:58 millert
11265 * configure.in, configure: When falling back to checking for
11266 socket() when linking with "-lsocket -lnsl" check for main()
11267 instead since autoconf has already cached the results of checking
11268 for socket() in -lsocket. This is really an autoconf bug as it
11269 should use the extra libs as part of the cache variable name.
11271 1999-02-22 10:47 millert
11273 * configure.in: typo
11275 1999-02-21 15:18 millert
11277 * configure.in: fix occurrence of $with_timeout that should be
11278 $with_password_timeout;
11279 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11281 1999-02-17 11:40 millert
11283 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11286 1999-02-11 01:41 millert
11288 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11289 it does not have it
11291 1999-02-09 13:11 millert
11293 * configure, configure.in: define for_BSD_TYPES irix
11295 1999-02-06 19:47 millert
11297 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11298 clear that it is the user's password, not root's, that we want.
11300 1999-02-06 19:43 millert
11302 * check.c, sudo.h: If the user enters an empty password and really
11303 has no password, accept the empty password they entered.
11304 Perviously, they could enter anything *but* an empty password.
11305 Also, add GETPASS macro that calls either tgetpass() or getpass()
11306 depending on how sudo was configured. Problem noted by
11307 jdg@maths.qmw.ac.uk
11309 1999-02-02 23:32 millert
11311 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11312 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11313 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11314 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11315 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11316 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11317 emul/utime.h: add explicate copyright
11319 1999-02-02 23:16 millert
11321 * CHANGES: mention -lsocket, -lnsl configure changes
11323 1999-02-02 17:54 millert
11325 * sudo.c: Don't clobber errno after calling check_sudoers().
11327 1999-01-31 19:46 millert
11329 * configure.in, configure: When linking with both -lsocket and
11330 -lnsl be sure to do so in that order. Also, when we can't find
11331 socket() or inet_addr() and have to try linking with both libs,
11334 1999-01-31 19:45 millert
11336 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11338 1999-01-23 12:18 millert
11340 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11343 1999-01-22 13:13 millert
11345 * configure, CHANGES, INSTALL, configure.in: fix and correctly
11346 document --with-umask; problem noted by adap@adap.org
11348 1999-01-19 20:38 millert
11350 * configure.in, configure: only use /usr/{man,catman}/local to
11351 store man pages if suer didn't override prefix or mandir
11353 1999-01-19 20:24 millert
11355 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11358 1999-01-18 21:53 millert
11360 * RUNSON: updates from users
11362 1999-01-18 21:04 millert
11364 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11365 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11367 1999-01-18 20:00 millert
11369 * configure, configure.in: better fix for the problem of unresolved
11370 symbols in -lnsl or -lsocket
11372 1999-01-18 19:39 millert
11374 * configure, configure.in: when checking for functions in -lnsl and
11375 -lsocket link with both of them to avoid unresolved symbols on
11376 some weirdo systems
11378 1999-01-17 20:49 millert
11380 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11381 RCS before the RCS->CVS switch
11383 1999-01-17 18:16 millert
11385 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11386 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11387 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11388 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11389 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11390 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11391 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11392 emul/utime.h: add sudo tags
11394 1999-01-17 17:53 millert
11396 * version.h, sudo.h: testing Sudo tag
11398 1999-01-17 17:40 millert
11400 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11401 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11402 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11403 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11404 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11405 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11406 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11407 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11408 emul/utime.h: crank version and regen files
11410 1999-01-17 17:27 millert
11412 * Makefile.in: kill rcs goop in update_version and fix now that
11415 1999-01-17 17:08 millert
11417 * INSTALL, check.c, config.h.in, configure, configure.in,
11418 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
11419 fcusack@iconnet.net
11421 1999-01-17 16:45 millert
11423 * realpath.c, sudo_realpath.c: we no longer use realpath
11425 1999-01-17 16:44 millert
11427 * qualify.c: replaced by find_path.c
11429 1999-01-17 16:43 millert
11431 * options.h: all options are now configure flags
11433 1999-01-17 16:42 millert
11437 1999-01-17 16:41 millert
11439 * getwd.c: superceded by getcwd.c
11441 1999-01-17 16:36 millert
11443 * getpass.c: superceded by tgetpass.c
11445 1999-01-17 16:36 millert
11447 * SUPPORTED: superceded by RUNSON
11449 1999-01-17 16:33 millert
11451 * OPTIONS: No longer used now that we have configure options for
11454 1999-01-17 16:32 millert
11456 * configure: regen based on configure.in
11458 1999-01-17 16:31 millert
11460 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
11461 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
11462 on sudo.pod, sudoers.pod, and visudo.pod
11464 1998-12-11 12:16 millert
11466 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
11468 1998-12-07 16:16 millert
11470 * interfaces.c: close sock when we are done with it
11472 1998-11-27 19:37 millert
11474 * parse.yacc: never say "error on line -1"
11476 1998-11-23 23:38 millert
11478 * configure.in: check for -lnsl before -lsocket
11480 1998-11-23 23:29 millert
11482 * configure.in: quote '[', ']' used in ranges correctly
11484 1998-11-21 17:54 millert
11486 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
11488 1998-11-20 18:33 millert
11492 1998-11-20 18:33 millert
11494 * INSTALL: more info for 1.5.7
11496 1998-11-20 18:30 millert
11498 * README: update for 1.5.7
11500 1998-11-20 14:26 millert
11502 * parse.yacc: make increases of cm_list_size and ga_list_size be
11503 similar to increases of stacksize (ie: >= not > in initial
11506 1998-11-20 14:22 millert
11508 * parse.yacc: when we get a syntax error, report it for the
11509 previous line since that's generally where the error occurred.
11511 1998-11-18 15:31 millert
11513 * config.h.in, configure.in, interfaces.c: add back check for
11514 sys/sockio.h but only use it if SIOCGIFCONF is not defined
11516 1998-11-18 15:25 millert
11518 * config.h.in: define BSD_COMP for svr4
11520 1998-11-17 23:16 millert
11522 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11523 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11524 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11525 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
11528 1998-11-17 23:10 millert
11530 * configure.in: kill check for sockio,h
11532 1998-11-17 23:10 millert
11534 * config.h.in: no more HAVE_SYS_SOCKIO_H
11536 1998-11-17 22:51 millert
11538 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11539 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11540 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11541 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11544 1998-11-16 17:38 millert
11546 * sudo.c: add missing inform_user()
11548 1998-11-13 19:21 millert
11550 * find_path.c: return NOT_FOUND if given fully qualified path and
11551 it does not exist previously it would perror(ENOENT) which
11552 bypasses the option to not leak path info
11554 1998-11-13 19:20 millert
11556 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
11557 for kerb, check for -ldes
11559 1998-11-13 14:19 millert
11561 * INSTALL: tty tickets are user:tty now
11563 1998-11-13 14:10 millert
11565 * check.c: when using tty tickets make it user:tty not user.tty as
11566 a username could have a '.' in it
11568 1998-11-09 19:15 millert
11570 * sudo.c: add "ignoring foo found in ." for auth successful case
11572 1998-11-09 17:57 millert
11574 * sudo.c: add missing printf param
11576 1998-11-08 15:56 millert
11578 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
11579 go back to printing "command not found" unless
11580 --disable-path-info specified. Also, tell user when we ignore
11581 '.' in their path and it would have been used but for
11584 1998-11-08 13:51 millert
11586 * check.c, sudo.c: Only one space after a colon, not two, in
11589 1998-11-05 12:59 millert
11591 * sudo.pod: document setting $USER
11593 1998-11-04 22:24 millert
11595 * check.c: fix bugs with prompt expansion
11597 1998-11-04 21:21 millert
11599 * sudo.c: set $USER for root too
11601 1998-11-04 17:13 millert
11603 * getspwuid.c: typo
11605 1998-11-04 17:07 millert
11607 * configure.in: HP-UX's iscomsec is in -lsec, not libc
11609 1998-11-03 22:24 millert
11611 * configure.in: remove some entries in the OS case statement that
11614 1998-11-03 22:19 millert
11616 * TROUBLESHOOTING: add "cd" section and flush out syslog section
11618 1998-11-03 20:51 millert
11620 * Makefile.in: no more sudo-lex.yy.c
11622 1998-11-03 20:50 millert
11624 * check_sia.c: add custom prompt support
11626 1998-11-03 20:40 millert
11628 * sudo.c: kill perror("malloc") since we already have a good error
11629 messages pw_ent -> pw for brevity set $USER if -u specified
11631 1998-11-03 20:39 millert
11633 * parse.c: kill perror("malloc") since we already have a good error
11634 messages pw_ent -> pw for brevity when checking if %group
11635 matches, look up user in password file so that %groups works in a
11638 1998-11-03 20:39 millert
11640 * logging.c, parse.yacc: kill perror("malloc") since we already
11641 have a good error messages
11643 1998-11-03 20:38 millert
11645 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
11646 perror("malloc") since we already have a good error messages
11647 pw_ent -> pw for brevity
11649 1998-11-03 15:03 millert
11651 * tgetpass.c: the prompt is expanded before tgetpass is called
11653 1998-11-03 15:03 millert
11655 * sudo.h: tgetpass now has the same args as getpass again
11657 1998-11-03 15:02 millert
11659 * getspwuid.c: add iscomsec, issecure support
11661 1998-11-03 15:02 millert
11663 * check.c: we now expand any %h or %u in the prompt before passing
11666 1998-11-03 14:58 millert
11668 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
11670 1998-11-03 14:56 millert
11672 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
11674 1998-11-03 14:55 millert
11676 * configure.in: add check for iscomsec in HP-UX
11678 1998-11-03 14:51 millert
11680 * configure.in: check for issecure if we have getpwanam on SunOS
11681 some options are incompatible with DUNIX SIA check for dispcrypt
11684 1998-10-25 15:21 millert
11686 * config.h.in: add HAVE_DISPCRYPT
11688 1998-10-25 15:21 millert
11690 * secureware.c: add back support for non-dispcrypt based checking
11693 1998-10-25 00:51 millert
11695 * INSTALL: sia changes
11697 1998-10-25 00:48 millert
11699 * configure.in: SIA becomes the default on Digital UNIX now havbe
11700 --disable-sia to turn it off...
11702 1998-10-24 23:52 millert
11704 * check.c: move local includes after system ones
11706 1998-10-24 19:28 millert
11708 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
11709 INCORRECT_PASSWORD or an insult to stderr
11711 1998-10-24 19:07 millert
11713 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
11714 password. Only the first iteration was working.
11716 1998-10-21 21:00 millert
11718 * aclocal.m4: don't trust UID_MAX or MAXUID
11720 1998-10-21 20:35 millert
11722 * configure.in: fix two pastos
11724 1998-10-21 20:30 millert
11726 * configure.in: fix typo
11728 1998-10-21 20:19 millert
11730 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
11731 legal to be negative in DUNX 5.0
11733 1998-10-21 20:15 millert
11735 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
11736 -lm but check for -ldb since DUNX < 4.0 lacks it
11738 1998-10-21 19:50 millert
11740 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
11741 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
11742 10.20 at least (it sleeps for 2 minutes if the shadow files don't
11745 1998-10-20 17:22 millert
11747 * INSTALL: updated --with-editor blurb
11749 1998-10-20 17:21 millert
11751 * TROUBLESHOOTING: tell how to put sudoers in a different dir
11753 1998-10-20 16:22 millert
11755 * configure.in: add missing quotes around $with_editor
11757 1998-10-20 14:00 millert
11759 * configure.in: typo in --with-editor bits
11761 1998-10-20 01:24 millert
11763 * INSTALL: I don't expect it to work on Solaris
11765 1998-10-20 01:24 millert
11767 * check.c: add back security/pam_misc.h
11769 1998-10-19 17:13 millert
11771 * INSTALL: remove dunix note since configure checks for this now
11773 1998-10-19 16:30 millert
11775 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
11778 1998-10-19 14:32 millert
11780 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
11783 1998-10-19 14:32 millert
11785 * config.h.in: add HAVE_INITPRIVS
11787 1998-10-19 14:31 millert
11789 * sudo.c: call initprivs() if we have it for getprpwuid later on
11791 1998-10-19 14:30 millert
11793 * Makefile.in: clean pathnames.h too
11795 1998-10-19 14:28 millert
11797 * configure.in: quote "Sorry, try again." with [] since it has a
11798 comma in it set LIBS when we add stuff to SUDO_LIBS set
11799 SECUREWARE when we find getprpwuid() so we can check for
11800 bigcrypt, set_auth_parameters, and initprivs later.
11802 1998-10-19 13:48 millert
11804 * INSTALL: update Digital UNIX note about acl.h
11806 1998-10-18 20:26 millert
11808 * INSTALL: add --with-sia --without-root-sudo ->
11809 --disable-root-sudo some reordering
11811 1998-10-18 20:22 millert
11813 * secureware.c: add whitespace
11815 1998-10-18 20:22 millert
11817 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
11818 sudo.h: add SIA support
11820 1998-10-18 20:21 millert
11822 * check_sia.c: Initial revision
11824 1998-10-18 19:42 millert
11826 * configure.in: when checking for -lsocket, -lnsl, and -linet,
11827 check for the specific functions we need from them.
11829 1998-10-18 19:10 millert
11831 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
11833 1998-10-18 18:15 millert
11835 * sudo.h, Makefile.in: added check_secureware
11837 1998-10-18 18:12 millert
11839 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
11842 1998-10-18 18:00 millert
11844 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
11845 other sets defined. configure now does that for us
11847 1998-10-18 17:45 millert
11849 * configure.in: move some --with options around change a bunch of
11850 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
11852 1998-10-18 01:09 millert
11854 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
11855 that caused a syntax error add some echo verbage
11857 1998-10-17 18:08 millert
11859 * check.c: moved SecureWare stuff into secureware.c
11861 1998-10-17 18:07 millert
11863 * secureware.c: Initial revision
11865 1998-10-17 17:02 millert
11867 * INSTALL: update url to solaris gcc bins
11869 1998-10-17 16:39 millert
11871 * INSTALL: change option formatter and flesh out someentries
11873 1998-10-17 16:18 millert
11875 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
11876 environment variable
11878 1998-10-17 16:01 millert
11880 * BUGS: everything is now done via configure
11882 1998-10-17 16:00 millert
11884 * README: prev rev was 1.5.6
11886 1998-10-17 00:33 millert
11888 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
11891 1998-10-17 00:32 millert
11893 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
11896 1998-10-17 00:31 millert
11898 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
11899 sudoers_gid, sudoers_mode from configure
11901 1998-10-17 00:30 millert
11903 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
11904 substituted into the Makefile, not config.h
11906 1998-10-17 00:30 millert
11908 * INSTALL: document all --with/--enable options
11910 1998-10-15 02:25 millert
11912 * insults.h: options.h is no more
11914 1998-10-15 02:25 millert
11916 * config.h.in: assimilated options.h
11918 1998-10-15 02:24 millert
11920 * configure.in: moved options from options.h to configure
11922 1998-10-15 01:41 millert
11924 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
11925 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
11926 sudo_setenv.c, visudo.c: no more options.h
11928 1998-10-15 01:39 millert
11930 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
11933 1998-10-15 01:32 millert
11935 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
11937 1998-10-15 00:10 millert
11939 * tgetpass.c: if select return < -1 still prompt for pw
11941 1998-10-15 00:03 millert
11943 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
11944 IGNORE_DOT_PATH into configure options
11946 1998-10-14 23:57 millert
11948 * parse.c: FAST_MATCH is no longer an optino
11950 1998-10-14 23:52 millert
11952 * check.c: remove_timestamp() if timestamp is preposterous
11954 1998-10-14 23:36 millert
11956 * options.h: convert more options to --with/--enable
11958 1998-10-14 23:36 millert
11960 * INSTALL, aclocal.m4: logfile -> logpath
11962 1998-10-14 23:31 millert
11964 * configure.in: convert more options into --with and --enable
11966 1998-10-14 23:28 millert
11968 * tgetpass.c: catch EINTR in select and restart
11970 1998-10-14 23:15 millert
11972 * logging.c: sys/errno -> errno
11974 1998-09-24 11:40 millert
11976 * sudo.c: UMASK -> SUDO_UMASK.
11978 1998-09-24 11:36 millert
11980 * check.c, logging.c: time.h, not sys/time.h
11982 1998-09-21 19:52 millert
11984 * logging.c: MAILER -> _PATH_SENDMAIL
11986 1998-09-21 00:06 millert
11988 * INSTALL, configure.in: no more --with-C2, now it is
11991 1998-09-21 00:00 millert
11993 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
11994 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
11995 Always include shadow support if the platform supports it and the
11996 user did not disable it via configure
11998 1998-09-20 19:48 millert
12000 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12002 1998-09-20 19:16 millert
12004 * Makefile.in: pathnames.h -> pathnames.h.in
12006 1998-09-20 19:14 millert
12008 * check.c: fix version string
12010 1998-09-20 19:12 millert
12012 * check.c: move pam_conv to be static to auth function remove
12013 pam_misc.h (solaris doesn't have one)
12015 1998-09-20 19:10 millert
12017 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12020 1998-09-20 19:10 millert
12022 * configure.in: munge pathnames.h.in -> pathnames.h kill
12025 1998-09-20 19:10 millert
12027 * pathnames.h.in: convert to pathnames.h.in
12029 1998-09-18 20:20 millert
12031 * configure.in: fix typo in sysv4 matching case /.
12033 1998-09-18 01:29 millert
12035 * check.c: pam stuff needs to run as root, not user, for shadow
12038 1998-09-17 12:26 millert
12040 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12041 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12042 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12043 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12044 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12045 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12046 BUGS, INSTALL, README, configure.in: updated version
12048 1998-09-17 12:13 millert
12050 * check.c: user version.h for long message
12052 1998-09-17 11:53 millert
12054 * check.c: this is version 1.5.6
12056 1998-09-16 13:42 millert
12058 * Makefile.in: remove errant backslash
12060 1998-09-14 22:25 millert
12062 * options.h, parse.yacc, pathnames.h.in: fix version string
12064 1998-09-14 22:02 millert
12066 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12068 1998-09-14 22:02 millert
12070 * RUNSON: updated for 1.5.6
12072 1998-09-14 11:48 millert
12074 * interfaces.c: kill unused localhost_mask var copy if name to
12075 ifr_tmp after we zero it
12077 1998-09-13 15:50 millert
12079 * INSTALL: Better description of new vs. old sudoers modes fix some
12080 typos better description of /usr/ucb/cc gotchas on slowaris
12082 1998-09-13 15:49 millert
12084 * Makefile.in: add sample.pam
12086 1998-09-13 15:32 millert
12088 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12090 1998-09-12 11:10 millert
12092 * README: mention TROUBLESHOOTING more fix some typos
12094 1998-09-11 20:30 millert
12096 * configure.in: move --enable/--disable to be after --with
12098 1998-09-11 20:30 millert
12100 * INSTALL: document --enable/--disable
12102 1998-09-11 20:26 millert
12104 * INSTALL: document --with-pam
12106 1998-09-11 19:47 millert
12108 * configure.in: Add message for pam users
12110 1998-09-11 19:27 millert
12112 * sample.pam: Initial revision
12114 1998-09-11 19:23 millert
12116 * config.h.in: fix HAVE_PAM
12118 1998-09-11 19:19 millert
12120 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12121 <GCalvin@kenwoodusa.com>
12123 1998-09-10 18:51 millert
12125 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12127 1998-09-10 18:51 millert
12129 * logging.c: add WRAP_LOG and HOST_IN_LOG
12131 1998-09-10 18:37 millert
12133 * configure.in: add --enable-log-host and --enable-log-wrap
12135 1998-09-10 18:32 millert
12137 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12140 1998-09-08 20:45 millert
12142 * compat.h: add howmany macro
12144 1998-09-08 20:43 millert
12146 * tgetpass.c: include sys/param.h to get howmany macro
12148 1998-09-07 20:42 millert
12150 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12153 1998-09-07 12:51 millert
12155 * fnmatch.c: bring in stdio.h for NULL
12157 1998-09-07 12:50 millert
12159 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12161 1998-09-07 12:43 millert
12163 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12165 1998-09-07 12:42 millert
12167 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12169 1998-09-07 12:41 millert
12171 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12174 1998-09-07 12:39 millert
12176 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12178 1998-09-07 12:06 millert
12180 * interfaces.c: initialize previfname
12182 1998-09-07 11:51 millert
12184 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12185 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12186 IFF_LOOPBACK instead of kludging it
12188 1998-09-07 11:49 millert
12190 * configure.in: typo
12192 1998-09-07 00:01 millert
12194 * Makefile.in: don't need special build line for sudo.tab.o
12196 1998-09-06 23:58 millert
12198 * Makefile.in: don't clean sudo.tab.[ch]
12200 1998-09-06 23:48 millert
12202 * sudo.c: Sudo should prompt for a password before telling the user
12203 that a command could not be found.
12205 1998-09-06 23:47 millert
12209 1998-09-06 23:25 millert
12211 * INSTALL, README: no longer require yacc
12213 1998-09-06 23:19 millert
12215 * Makefile.in: typo
12217 1998-09-06 23:18 millert
12219 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12221 1998-09-06 23:09 millert
12223 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12224 command args if you get a '='
12226 1998-09-06 22:59 millert
12228 * insults.h: fix version ,
12230 1998-09-06 22:57 millert
12232 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12235 1998-09-06 22:55 millert
12237 * getcwd.c: getcwd(3) from OpenBSD for those without it.
12239 1998-09-06 22:51 millert
12241 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12243 1998-09-06 22:49 millert
12245 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12248 1998-09-06 22:41 millert
12250 * parse.c: use NAMLEN() macro
12252 1998-09-06 22:34 millert
12254 * fnmatch.c: remove duplicate include of string.h
12256 1998-09-06 22:28 millert
12258 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12260 1998-09-06 22:28 millert
12262 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12264 1998-09-06 22:28 millert
12266 * config.h.in: add dev_t and ino_t
12268 1998-07-28 12:44 millert
12270 * check.c: fix OTP_ONLY for opie
12272 1998-06-24 12:22 millert
12274 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12276 1998-05-19 00:10 millert
12278 * Makefile.in: make update_version saner
12280 1998-05-18 23:32 millert
12282 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12284 1998-05-18 23:32 millert
12286 * configure.in: check for waitpid and wait3 or no waitpid
12288 1998-05-18 23:31 millert
12290 * logging.c: used waitpid or wait3 if we have 'em
12292 1998-05-02 14:16 millert
12294 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12297 1998-04-27 20:09 millert
12299 * configure.in: don't need to explicately mention -lsocket -lnsl
12302 1998-04-25 01:56 millert
12304 * configure.in: dynix should not link with -linet
12306 1998-04-10 15:32 millert
12308 * INSTALL: mention that HP-UX doesn't ship with yacc
12310 1998-04-06 22:35 millert
12312 * check.c: ignore kerberos if we can't get the local realm
12314 1998-04-05 23:37 millert
12316 * configure.in, BUGS, INSTALL, README: ++version
12318 1998-04-05 23:36 millert
12322 1998-04-05 23:35 millert
12324 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12325 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12326 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12327 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12328 visudo.c: updated version
12330 1998-04-05 23:34 millert
12332 * check.c, sudo.h: fix version
12334 1998-04-05 23:33 millert
12336 * getcwd.c: don't use popen/pclose. Do it inline.
12338 1998-04-05 23:25 millert
12340 * lsearch.c: add rcsid
12342 1998-04-05 23:21 millert
12346 1998-04-05 23:17 millert
12348 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12349 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12350 check.c: updated version
12352 1998-04-05 23:15 millert
12354 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12357 1998-04-05 23:14 millert
12359 * Makefile.in: getwd.c -> getcwd.c
12361 1998-04-05 22:49 millert
12363 * config.h.in: kill HAVE_GETWD
12365 1998-04-05 22:49 millert
12367 * configure.in: getcwd, not getwd
12369 1998-04-05 22:48 millert
12371 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12372 defeats the purpose
12374 1998-03-31 00:15 millert
12376 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12378 1998-03-31 00:05 millert
12380 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12381 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12382 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12383 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12384 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12385 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12388 1998-03-30 23:54 millert
12390 * configure.in: support *-ccur-sysv4 and fix two typos
12392 1998-03-27 19:52 millert
12394 * configure.in: don't echo about with_logfile and with_timedir
12396 1998-03-27 19:49 millert
12398 * INSTALL: document --with-logfile and --with-timedir
12400 1998-03-27 19:46 millert
12402 * aclocal.m4: support --with-logfile and --with-timedir
12404 1998-03-27 19:46 millert
12406 * configure.in: Add --with-logfile and --with-timedir
12408 1998-03-27 19:27 millert
12410 * sudo.c: change size computation of NewArgv for UNICOS
12412 1998-02-18 20:10 millert
12414 * configure.in: treate -*-sysv4* like *-*-svr4
12416 1998-02-18 18:19 millert
12418 * configure.in: fix spacing for --with-authenticate help
12420 1998-02-18 16:39 millert
12422 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12423 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12424 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12425 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12426 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12427 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12430 1998-02-18 16:23 millert
12432 * parse.yacc: fix off by one error in push macro
12434 1998-02-17 01:15 millert
12436 * configure.in: removed bogus alloca hack
12438 1998-02-17 01:15 millert
12440 * check.c: added AIX 4.x authenticate() support
12442 1998-02-17 01:11 millert
12444 * parse.yacc: include alloca.h if using bison and not gcc and it
12445 exists. fixes an alloca problem on hpux 10.x
12447 1998-02-17 00:39 millert
12449 * INSTALL: mention --with-authenticate
12451 1998-02-17 00:37 millert
12453 * configure.in: added AIX authenticate() support
12455 1998-02-17 00:22 millert
12457 * config.h.in: add HAVE_AUTHENTICATE
12459 1998-02-16 23:58 millert
12461 * interfaces.c: dynamically size ifconf buffer
12463 1998-02-16 23:56 millert
12465 * configure.in: quote '[' and ']'
12467 1998-02-16 21:42 millert
12469 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12470 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12471 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12472 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12473 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12474 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12477 1998-02-16 19:06 millert
12479 * visudo.pod: add ERRORS section
12481 1998-02-16 18:57 millert
12483 * TROUBLESHOOTING: add busy stmp file explanation
12485 1998-02-15 18:49 millert
12487 * configure.in: the name of the cached var that signals whether or
12488 not you are cross compiling changed. It is now
12489 ac_cv_prog_cc_cross
12491 1998-02-11 16:26 millert
12493 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
12495 1998-02-06 21:55 millert
12497 * sample.sudoers, sudoers.pod: better example of su but not root su
12499 1998-02-06 15:49 millert
12501 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12502 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12503 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12504 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12505 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12506 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12509 1998-02-06 15:48 millert
12511 * Makefile.in: correct regexp for updating version
12513 1998-02-06 14:05 millert
12515 * tgetpass.c: remove bogus flush of stderr spew prompt before
12516 turning off echo. Seems to fix a weird problem where if sudo
12517 complained about a bogus stamp file the user would sometimes not
12518 have a chance to enter a password
12520 1998-02-06 14:05 millert
12522 * check.c: fix bogus flush of stderr
12524 1998-02-05 19:19 millert
12526 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
12528 1998-02-05 19:18 millert
12530 * configure.in: support hpux1[0-9] not just hpux10
12532 1998-01-30 14:59 millert
12534 * parse.c: set sudoers_fp to nil after closing
12536 1998-01-24 01:05 millert
12538 * config.guess, config.sub: updated from autoconf 2.12
12540 1998-01-24 00:50 millert
12542 * configure.in: add *-*-svr4 rule
12544 1998-01-22 22:53 millert
12546 * tgetpass.c: fix select usage for high fd's (dynamically allocate
12549 1998-01-22 22:49 millert
12551 * check.c: kill extra whitespace
12553 1998-01-22 19:28 millert
12555 * sudo.c: do an initgroups() before running a command, unless the
12556 target user is root.
12558 1998-01-22 12:22 millert
12560 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
12563 1998-01-21 01:56 millert
12565 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
12566 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
12569 1998-01-21 01:32 millert
12571 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
12574 1998-01-21 01:29 millert
12576 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
12577 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12578 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
12581 1998-01-21 01:20 millert
12583 * Makefile.in: more tweaks to update_version
12585 1998-01-21 01:19 millert
12587 * Makefile.in: fixed up update_version rule
12589 1998-01-21 00:55 millert
12591 * configure.in: ++version
12593 1998-01-21 00:53 millert
12595 * Makefile.in: removed supe of check.c
12597 1998-01-21 00:51 millert
12599 * INSTALL: ++version I missed
12601 1998-01-21 00:51 millert
12605 1998-01-21 00:48 millert
12607 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
12608 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
12609 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12610 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12611 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12612 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
12613 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
12615 1998-01-21 00:47 millert
12617 * CHANGES: updated for 1.5.5
12619 1998-01-21 00:35 millert
12621 * Makefile.in: add rules to update version stuff in files so I
12622 don't need to do it by hand
12624 1998-01-21 00:04 millert
12626 * sudo.h: sudoers_fp is now extern
12628 1998-01-21 00:03 millert
12630 * sudo.c: in check_sudoers, cache the sudoers file handle in
12631 sudoers_fp so we don't have to open it again in the parse. This
12632 may help with weird solaris problems where EAGAIN sometime
12635 1998-01-21 00:02 millert
12637 * parse.c: sudoers file open is now done only in check_sudoers() so
12638 we just do a rewind() instead of an open. May help people on
12639 solaris who were getting EAGAIN.
12641 1998-01-16 11:43 millert
12643 * INSTALL: mention that newer glibc is fixed
12645 1998-01-13 12:58 millert
12647 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
12648 so ignore _RLD* instead of _RLD_*
12650 1998-01-13 10:32 millert
12654 1998-01-13 10:19 millert
12656 * parse.c: fix that bug for real
12658 1998-01-13 02:39 millert
12660 * INSTALL: document Linux's libc6 brokenness.
12662 1998-01-13 02:00 millert
12664 * parse.yacc: -Wall
12666 1998-01-13 01:22 millert
12670 1998-01-13 00:50 millert
12672 * TROUBLESHOOTING: remind people to HUP syslogd
12674 1998-01-13 00:05 millert
12676 * Makefile.in: add -O flag to tar
12678 1998-01-13 00:00 millert
12680 * TODO, RUNSON: updated
12682 1998-01-12 23:59 millert
12684 * sudo.pod: remove author's email addr. people should mail
12687 1998-01-12 23:49 millert
12689 * INSTALL: fix version
12691 1998-01-12 23:48 millert
12693 * README, check.c, compat.h, config.h.in, configure.in,
12694 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12695 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12696 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12697 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12698 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
12699 visudo.c: ++version
12701 1998-01-12 23:44 millert
12705 1998-01-12 23:42 millert
12707 * INSTALL, Makefile.in: ++version
12709 1998-01-12 23:41 millert
12711 * CHANGES: updated fort 1.5.4
12713 1998-01-12 23:41 millert
12715 * check.c: exit(1) if user enters no passwd
12717 1998-01-12 23:37 millert
12721 1998-01-12 23:10 millert
12723 * parse.c: commands can start with ./* not just /* -- fixes a
12724 serious security hole.
12726 1997-12-21 18:17 millert
12728 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
12729 leave it as "unknown".
12731 1997-11-23 13:29 millert
12733 * sample.sudoers: fix usage of (username) in conjunction with , and
12736 1997-11-23 13:28 millert
12738 * visudo.c: catch the case where the user is not in the passwd file
12740 1997-11-23 13:24 millert
12742 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
12743 the nfds arg to select(2)
12745 1997-11-23 01:53 millert
12747 * sudo.c: define tty global to an initial value to avoid dumping
12748 core in logging functions when passwd file is unavailable.
12750 1997-11-23 01:51 millert
12752 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
12753 gotten the passwd entry
12755 1997-11-23 00:21 millert
12757 * sudo.pod: talk about problem of ALL
12759 1997-10-10 00:54 millert
12761 * README: new web location
12763 1997-10-10 00:54 millert
12765 * INSTALL: fdesc bug is fixed in Open/Net BSD
12767 1997-10-10 00:52 millert
12769 * HISTORY: updates from Nieusma
12771 1997-10-09 18:37 millert
12773 * dce_pwent.c: move compat.h after the system includes
12775 1997-08-06 14:58 millert
12777 * logging.c: save errno from being clobbered by wait(). From Theo
12779 1997-05-21 11:57 millert
12781 * compat.h: fix an occurence of setresuid -> setreuid (typo)
12783 1997-03-19 17:45 millert
12785 * install-sh: check for path to strip
12787 1997-01-15 19:05 millert
12789 * logging.c: deal with maxfilelen < 0 case
12791 1997-01-15 19:05 millert
12793 * OPTIONS: fixed descriptin
12795 1996-12-11 23:10 millert
12797 * sudo.c: correct error message if mode/owner wrong and not
12798 statable by owner but is statable by root.
12800 1996-11-23 02:18 millert
12802 * config.guess, config.sub: autoconf 2.11
12804 1996-11-16 14:42 millert
12806 * CHANGES, RUNSON, TODO: sudo 1.5.3.
12808 1996-11-14 15:08 millert
12810 * sudo.h, parse.yacc: command_alias -> generic_alias
12812 1996-11-13 22:50 millert
12814 * sample.sudoers: added Runas_Alias example and fixed syntax errors
12816 1996-11-13 22:50 millert
12818 * OPTIONS, options.h: updated MAILSUBJECT
12820 1996-11-13 22:49 millert
12822 * logging.c: added %h expansion
12824 1996-11-13 21:37 millert
12826 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
12827 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
12828 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12829 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12830 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12831 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
12832 visudo.c, INSTALL, README, configure.in: ++version
12834 1996-11-13 20:01 millert
12836 * emul/utime.h, BUGS: ++version
12838 1996-11-13 19:45 millert
12840 * sudoers.pod: document Runas_Alias
12842 1996-11-13 19:22 millert
12844 * visudo.pod: q (uid) -> Q
12846 1996-11-13 19:21 millert
12848 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
12851 1996-11-13 19:05 millert
12853 * parse.yacc: add size params to sprintf
12855 1996-11-13 19:04 millert
12857 * parse.lex: allow trailing space after '\\' but before '\n'
12859 1996-11-13 19:04 millert
12861 * find_path.c: off by one error in path size check
12863 1996-11-13 19:03 millert
12865 * check.c: sprintf paranoia
12867 1996-11-12 11:59 millert
12869 * parse.yacc: fixed more_aliases
12871 1996-11-12 11:58 millert
12873 * visudo.c: now warns if killed by signal ./
12875 1996-11-11 10:49 millert
12877 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
12878 expanded (but it is gross)
12880 1996-11-10 20:32 millert
12882 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
12885 1996-11-10 20:08 millert
12887 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
12890 1996-11-10 20:02 millert
12892 * parse.lex: Add Runas_Alias and simplify a rule.
12894 1996-11-10 19:15 millert
12896 * parse.yacc: always store User_Alias's since they can be used
12897 inside of a runas list. Sigh. Really need a Runas_Alias
12900 1996-10-30 18:04 millert
12902 * visudo.c: deal with case where there is no sudoers file
12904 1996-10-11 23:01 millert
12906 * TROUBLESHOOTING: added one
12908 1996-10-10 22:11 millert
12910 * HISTORY, testsudoers.c: developement -> development
12912 1996-10-10 22:08 millert
12914 * INSTALL: added a note
12916 1996-10-10 20:36 millert
12918 * RUNSON: for 1.5.2
12920 1996-10-10 20:36 millert
12924 1996-10-10 00:56 millert
12926 * PORTING: removed seteuid() notes
12928 1996-10-09 13:37 millert
12930 * compat.h: better seteuid() emulatino
12932 1996-10-09 13:36 millert
12934 * configure.in: added check for seteuid
12936 1996-10-09 13:36 millert
12938 * config.h.in: added HAVE_SETEUID
12940 1996-10-08 19:22 millert
12942 * configure.in: first stab at sequent support
12944 1996-10-08 19:21 millert
12946 * config.h.in: added HAVE_SYS_SELECT_H
12948 1996-10-08 19:21 millert
12950 * compat.h: sequent -> _SEQUENT_
12952 1996-10-08 19:11 millert
12954 * compat.h: added seteuid() macro for DYNIX
12956 1996-10-08 18:54 millert
12958 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
12960 1996-10-07 01:05 millert
12962 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
12963 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
12964 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
12965 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
12966 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
12967 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
12968 visudo.c, tgetpass.c: ++version
12970 1996-10-07 00:59 millert
12972 * sudo.pod: added -H and SUDO_PS1
12974 1996-10-07 00:55 millert
12976 * configure.in: use SUDO_FUNC_FNMATCH
12978 1996-10-07 00:54 millert
12980 * aclocal.m4: added SUDO_FUNC_FNMATCH
12982 1996-10-07 00:53 millert
12984 * sudo.c: added -H flag
12986 1996-10-07 00:53 millert
12988 * sudo.h: added MODE_RESET_HOME /
12990 1996-10-05 00:00 millert
12992 * INSTALL: mention OPIE
12994 1996-10-04 23:59 millert
12996 * configure.in: added opie support
12998 1996-10-04 23:59 millert
13000 * check.c: added HAVE_OPIE and changed to *_OTP_*
13002 1996-10-04 23:58 millert
13004 * compat.h, config.h.in: added HAVE_OPIE
13006 1996-10-04 23:58 millert
13008 * OPTIONS, options.h: SKEY -> OTP
13010 1996-10-03 23:27 millert
13012 * check.c: moved fclose() in skey stuff.
13014 1996-10-03 19:53 millert
13016 * putenv.c: index -> strchr remove unnecesary stuff
13018 1996-10-03 19:43 millert
13020 * check.c: now call skeychallenge() to get challenge instead of
13021 making one up ourselves. this way, we get extra goodies in the
13024 1996-09-10 00:32 millert
13026 * CHANGES: added one
13028 1996-09-10 00:18 millert
13030 * parse.lex: allow logins to start with a number (YUCK!)
13032 1996-09-08 15:18 millert
13034 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13036 1996-09-08 15:15 millert
13038 * configure.in: DUNIX doesn't need -lnsl
13040 1996-09-07 20:22 millert
13042 * CHANGES: [no log message]
13044 1996-09-07 20:21 millert
13046 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13047 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13048 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13049 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13050 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13051 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13053 1996-09-07 20:13 millert
13055 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13058 1996-09-07 20:12 millert
13060 * visudo.pod: [no log message]
13062 1996-09-07 20:00 millert
13064 * sudo.pod, visudo.pod: courtesan
13066 1996-09-07 19:45 millert
13068 * HISTORY: added courtesan ./
13070 1996-09-06 00:12 millert
13072 * sudo.c: added $SUDO_PROMPT support
13074 1996-09-04 17:19 millert
13076 * check.c: print long skey challemged to stderr, not stdout
13078 1996-08-31 23:10 millert
13080 * CHANGES: updated for 1.5.1
13082 1996-08-31 23:07 millert
13084 * emul/utime.h: ++version
13086 1996-08-31 12:34 millert
13088 * RUNSON: updated for 1.5.1
13090 1996-08-30 10:49 millert
13092 * check.c: use shost, not host for tgetpass
13094 1996-08-30 00:21 millert
13096 * OPTIONS, sudo.pod: documented %u and %h
13098 1996-08-29 20:40 millert
13100 * configure.in: fixed typo
13102 1996-08-29 20:37 millert
13104 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13105 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13106 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13107 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13108 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13109 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13110 visudo.c: ++version
13112 1996-08-29 20:30 millert
13116 1996-08-29 18:32 millert
13118 * configure.in, Makefile.in, version.h: ++version
13120 1996-08-29 17:58 millert
13122 * sudo.h: new tgetpass() params
13124 1996-08-29 17:58 millert
13126 * check.c: pass use and host to tgetpass
13128 1996-08-29 17:57 millert
13130 * tgetpass.c: added %u and %h escapes
13132 1996-08-29 16:56 millert
13134 * OPTIONS, options.h, check.c: added NO_MESSAGE
13136 1996-08-29 16:23 millert
13138 * configure.in: added cray (unicos) support
13140 1996-08-27 11:36 millert
13142 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13144 1996-08-25 17:56 millert
13146 * INSTALL: added note about "make install"
13148 1996-08-25 17:50 millert
13150 * parse.yacc: changed length/size params from int to size_t
13152 1996-08-25 13:35 millert
13154 * OPTIONS: now get CSOPS insults as well by default
13156 1996-08-25 13:33 millert
13158 * insults.h: use csops insults too by default
13160 1996-08-25 13:31 millert
13162 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13163 version.h: version = 1.5
13165 1996-08-25 13:27 millert
13167 * sudo.c: added runas_homedir
13169 1996-08-25 13:27 millert
13171 * TODO: updated for 1.5
13173 1996-08-25 13:23 millert
13175 * RUNSON: updated for 1.5
13177 1996-08-25 13:19 millert
13179 * CHANGES: 1.5 release
13181 1996-08-25 13:17 millert
13183 * INSTALL: added "upgrading" notes
13185 1996-08-22 14:00 millert
13187 * visudo.c: now do chmod and chown after edit of temp file and
13190 1996-08-18 12:52 millert
13192 * Makefile.in: ++version added INSTALL.configure
13194 1996-08-18 12:52 millert
13196 * version.h, configure.in: ++version
13198 1996-08-18 12:51 millert
13200 * TROUBLESHOOTING: [no log message]
13202 1996-08-18 12:50 millert
13204 * parse.yacc: added missing cast
13206 1996-08-17 20:37 millert
13208 * sudo.c: sets $HOME to pw_dir of runas user
13210 1996-08-17 20:02 millert
13212 * sudo.pod: document $HOME change
13214 1996-08-17 19:43 millert
13216 * sudo.pod: fixed up some wording
13218 1996-08-17 19:25 millert
13220 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13221 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13222 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13223 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13225 1996-08-17 19:19 millert
13227 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13228 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13231 1996-08-17 19:18 millert
13233 * sudo.h: name nad type changes
13235 1996-08-17 19:17 millert
13237 * testsudoers.c: now works with new sudo
13239 1996-08-17 19:07 millert
13241 * parse.yacc: fixed some XXX
13243 1996-08-17 18:52 millert
13245 * parse.yacc: some variable name changes + comment headers for
13248 1996-08-17 18:41 millert
13250 * tgetpass.c: added extra paren's to make compilers happy
13252 1996-08-17 18:34 millert
13254 * sudo.c: [no log message]
13256 1996-08-17 18:30 millert
13258 * parse.c: now uses init_parser() if not in sudoers and tries
13259 "list" or "validate" scold but don't be nasty.
13261 1996-08-17 18:29 millert
13263 * TROUBLESHOOTING: now can use upper case login names
13265 1996-08-17 18:29 millert
13267 * visudo.c: now uses init_parser()
13269 1996-08-17 18:28 millert
13271 * PORTING: added info about PASSWORD_TIMEOUT
13273 1996-08-17 18:28 millert
13275 * INSTALL, README: updated
13277 1996-08-17 18:28 millert
13279 * INSTALL.configure: Initial revision
13281 1996-08-17 18:27 millert
13283 * BUGS: fixed a bug ,
13285 1996-08-17 18:27 millert
13287 * parse.yacc: now dynamically allocates memory for the stacks -- no
13290 1996-08-17 18:26 millert
13292 * sudo.pod: -l now explands command aliases
13294 1996-08-17 13:22 millert
13296 * parse.yacc: hacks to expand command aliases for `sudo -l'
13298 1996-08-17 13:22 millert
13300 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13303 1996-08-17 13:22 millert
13305 * sudo.h: added struct command_alias
13307 1996-08-17 13:20 millert
13309 * sudo.pod: fixed a bug
13311 1996-08-17 13:15 millert
13313 * lsearch.c: in compar() key should be first arg
13315 1996-08-15 15:48 millert
13317 * BUGS: fixed some bugs
13319 1996-08-15 15:47 millert
13321 * parse.yacc: can now deal with upcase HOST and USER names
13323 1996-08-15 15:47 millert
13325 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13327 1996-08-15 15:46 millert
13329 * sudo.pod: fixed thinko
13331 1996-08-15 15:46 millert
13333 * parse.c: fix comment
13335 1996-08-09 18:07 millert
13337 * parse.c, parse.yacc: added support for new `sudo -l' stuff
13339 1996-08-09 18:06 millert
13341 * sudo.c: now uses list_matches()
13343 1996-08-09 18:06 millert
13345 * sudo.h: added struct sudo_match
13347 1996-08-09 17:37 millert
13349 * configure.in: now more -lgnumalloc
13351 1996-08-01 13:12 millert
13353 * install-sh: added more paths for chown and whoami
13355 1996-07-31 10:41 millert
13359 1996-07-30 13:45 millert
13361 * aclocal.m4: fixed DUNIX check for shadow pw
13363 1996-07-30 13:41 millert
13365 * tgetpass.c: now only turn off echo if it is already on. this
13366 fixes a race when you use sudo in a pipelin
13368 1996-07-30 12:53 millert
13372 1996-07-29 22:29 millert
13374 * configure.in: changed "test -z $foo && do_this" to if; then
13377 1996-07-28 22:47 millert
13379 * configure.in: added missing defines of SHADOW_TYPE
13381 1996-07-26 14:10 millert
13383 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13384 they are only in dunix 4.x
13386 1996-07-26 14:09 millert
13388 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13390 1996-07-26 13:23 millert
13392 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13393 that didn't match. Now we can have runas stuff on more than one
13396 1996-07-25 23:45 millert
13398 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13399 defined to something
13401 1996-07-25 23:45 millert
13403 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13405 1996-07-25 23:44 millert
13407 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13408 instead of HAVE_C2_SECURITY
13410 1996-07-25 23:44 millert
13412 * check.c: SHADOW_TYPE is always defined so just against its value
13414 1996-07-25 23:44 millert
13416 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
13418 1996-07-25 18:47 millert
13420 * sudoers.pod: * -> ?* in one example added another instance of
13421 (runas) and one of NOPASSWD:
13423 1996-07-24 13:02 millert
13425 * configure.in: added back check for config.cache from other host
13428 1996-07-24 12:49 millert
13430 * parse.lex: removed an instance of \"
13432 1996-07-24 12:49 millert
13434 * sample.sudoers: added an example
13436 1996-07-24 12:44 millert
13438 * sudoers.pod: updated wrt new wildcard matching
13440 1996-07-24 10:28 millert
13442 * configure.in: new check for shadow passwords if we don't know
13445 1996-07-24 10:28 millert
13447 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
13449 1996-07-24 02:19 millert
13451 * configure.in: added back check for -lsocket (oops)
13453 1996-07-24 02:16 millert
13455 * configure.in: better (working) check for shadow passwd type if we
13458 1996-07-24 01:59 millert
13460 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
13462 1996-07-24 01:59 millert
13464 * Makefile.in: added config.{guess,sub}
13466 1996-07-24 01:58 millert
13468 * aclocal.m4: removed unused stuff to figure out os type
13470 1996-07-23 22:58 millert
13472 * config.sub: added openbsd
13474 1996-07-23 22:54 millert
13476 * config.sub: Initial revision
13478 1996-07-23 22:40 millert
13480 * config.guess: Initial revision
13482 1996-07-23 21:18 millert
13484 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
13485 it can only be a pathname. need to check against sudoers_args
13486 even if user_args is nil
13488 1996-07-23 21:18 millert
13490 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
13491 can only be a pathname need to check against sudoers_args even if
13494 1996-07-23 18:52 millert
13496 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
13498 1996-07-23 01:18 millert
13500 * testsudoers.c: now takes command line args and uses cmnd_args
13502 1996-07-23 01:10 millert
13504 * parse.lex: fill_args was adding an extra leading space
13506 1996-07-22 15:50 millert
13508 * visudo.c: fixed dummy command_matches()
13510 1996-07-22 15:50 millert
13512 * parse.yacc: fixed prototype
13514 1996-07-22 15:31 millert
13516 * sudo.h: added cmnd_args
13518 1996-07-22 15:31 millert
13520 * parse.yacc: now uses flat args string
13522 1996-07-22 15:30 millert
13524 * parse.c, parse.lex: now uses flat arg string
13526 1996-07-22 15:29 millert
13528 * visudo.c: added cmnd_args def
13530 1996-07-22 14:30 millert
13532 * sudo.c: now sets cmnd_args global
13534 1996-07-22 14:30 millert
13536 * logging.c: cmnd_args is now exported from sudo.[ch]
13538 1996-07-21 18:41 millert
13540 * parse.yacc: can't rely on cmnd_matches as much as I thought --
13541 added some $$ stuff back in to prevent namespace pollution
13544 1996-07-21 18:01 millert
13546 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
13549 1996-07-20 00:45 millert
13551 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
13552 starts a 'runas' if in the initial state to avoid collision with
13555 1996-07-20 00:23 millert
13557 * configure.in: added checks for specific shadow passwd schemes
13559 1996-07-20 00:18 millert
13561 * aclocal.m4: added routines to check for specific shadow passwd
13564 1996-07-18 18:27 millert
13566 * configure.in: added support for ncr boxen
13568 1996-07-18 18:26 millert
13570 * aclocal.m4: added support for detecting ncr boxen
13572 1996-07-16 14:57 millert
13574 * configure.in: added sinix support
13576 1996-07-13 22:29 millert
13578 * TROUBLESHOOTING: added info about "config.cache from other other"
13581 1996-07-13 22:22 millert
13583 * aclocal.m4: now makes sure you don't have a config.cache file
13586 1996-07-13 21:36 millert
13588 * configure.in: now sets $LIBS when needed to configure links with
13589 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
13590 check for bigcrypt(3) if SPW_SECUREWARE
13592 1996-07-13 21:30 millert
13594 * getspwuid.c: fixed typo
13596 1996-07-13 21:05 millert
13598 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
13599 AUTH_MAX_PASSWD_LENGTH
13601 1996-07-13 21:05 millert
13603 * getspwuid.c: no more SPW_HPUX10
13605 1996-07-13 21:04 millert
13607 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
13609 1996-07-13 21:04 millert
13611 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
13613 1996-07-13 21:04 millert
13615 * check.c: SPW_SECUREWARE now uses bigcrypt
13617 1996-07-13 18:24 millert
13619 * sample.sudoers: fixed 2 syntax errors
13621 1996-07-13 18:24 millert
13623 * sudoers: root may now run ALL as ALL
13625 1996-07-11 20:59 millert
13627 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
13629 1996-07-08 16:08 millert
13631 * check.c, configure.in: updated AFS support
13633 1996-07-08 16:07 millert
13635 * TROUBLESHOOTING: added entry about /usr/ucb/cc
13637 1996-07-08 16:06 millert
13639 * INSTALL: prep no longer holds gcc binaries
13641 1996-07-08 15:48 millert
13643 * INSTALL: updated AFS note
13645 1996-07-08 15:43 millert
13647 * Makefile.in: added @AFS_LIBS@
13649 1996-07-08 15:33 millert
13651 * compat.h: AFS allows long passwords
13653 1996-07-08 14:16 millert
13655 * testsudoers.c: fixed -u user support
13657 1996-07-08 14:16 millert
13659 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
13661 1996-07-08 13:30 millert
13663 * parse.yacc: fixed no_passwd vs. runas_matched
13665 1996-07-08 10:30 millert
13667 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
13670 1996-07-08 10:30 millert
13672 * INSTALL: added --with-libraries > --with-libpath --with-incpath
13674 1996-07-08 10:21 millert
13676 * parse.yacc: was setting runas_matches to -1 in wrong place
13678 1996-07-08 09:58 millert
13680 * check.c: removed usersec.h which is not present in new AFS
13683 1996-07-08 09:55 millert
13685 * tgetpass.c: now deals with timeout <= 0
13687 1996-07-08 09:51 millert
13691 1996-07-08 00:04 millert
13693 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
13695 1996-07-07 22:30 millert
13697 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
13698 for root readable/writable filesystems
13700 1996-07-07 20:49 millert
13702 * Makefile.in: now gives INSTALL -c flag
13704 1996-07-07 20:34 millert
13706 * parse.yacc: slightly simpler initialization of no_passwd and
13709 1996-07-07 20:33 millert
13711 * testsudoers.c: added -u username support
13713 1996-07-07 20:32 millert
13715 * configure.in: improved --with-libraries support
13717 1996-07-07 16:27 millert
13719 * configure.in: added --with-incpath, --with-libpath,
13722 1996-07-07 16:01 millert
13724 * parse.yacc: now initializes some fields that weren't getting set
13725 to -1 pretty gross -- need a rewrite.
13727 1996-06-25 23:19 millert
13729 * alloca.c: removed emacs'isms
13731 1996-06-25 22:29 millert
13733 * configure.in: no longer add -lPW to *_LIBS since we include
13736 1996-06-25 22:29 millert
13738 * config.h.in: added HAVE_ALLOCA_H
13740 1996-06-25 22:28 millert
13742 * Makefile.in: added alloca.c
13744 1996-06-25 22:18 millert
13746 * alloca.c: Initial revision
13748 1996-06-25 21:58 millert
13750 * configure.in: ++version
13752 1996-06-25 19:32 millert
13754 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
13755 nobody is not always set to a valid uid.
13757 1996-06-25 19:31 millert
13759 * OPTIONS: fixed entry for SUDO_MODE
13761 1996-06-25 18:02 millert
13763 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
13764 *and* gid were being set to -2. Now beat NFS to the punch and
13765 set uid to "nobody" ourselves, preserving group 0 to read
13768 1996-06-25 18:02 millert
13770 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
13772 1996-06-25 18:00 millert
13774 * logging.c: fixed a typo
13776 1996-06-25 18:00 millert
13778 * configure.in: no longer need AC_PROG_INSTALL
13780 1996-06-25 17:59 millert
13782 * Makefile.in: always use install-sh to avoid install(1)'s that use
13785 1996-06-25 16:07 millert
13787 * INSTALL: make clean -> make distclean
13789 1996-06-20 01:17 millert
13791 * parse.yacc: removed some unnecsary if's
13793 1996-06-20 01:16 millert
13795 * Makefile.in, version.h: ++version
13797 1996-06-20 01:16 millert
13799 * parse.c, testsudoers.c: now includes netgroup.h
13801 1996-06-20 00:45 millert
13803 * interfaces.c: removed cats of ioctl to int since they didn't shut
13806 1996-06-20 00:43 millert
13808 * interfaces.c: explicately cast ioctl() to int since it it not
13811 1996-06-20 00:41 millert
13813 * sudo.h: added declarations for yyparse() and yylex()
13815 1996-06-20 00:27 millert
13817 * parse.yacc: fixed an occurence of '==' -> '='
13819 1996-06-20 00:22 millert
13821 * config.h.in, configure.in: added check for netgroup.h
13823 1996-06-20 00:20 millert
13825 * sudo.c: fixed 2 compiler warnings
13827 1996-06-20 00:08 millert
13829 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
13830 weren't being initialized
13832 1996-06-19 13:53 millert
13834 * sudo.pod: fixed a typo
13836 1996-06-17 12:19 millert
13838 * parse.yacc: fixed a formatting thingie
13840 1996-06-17 12:16 millert
13842 * parse.c, parse.yacc: fixed -u support with multiple user lists on
13845 1996-06-17 10:23 millert
13847 * configure.in: unixware needs -lgen
13849 1996-06-17 10:23 millert
13851 * README: updated ftp location
13853 1996-06-17 00:08 millert
13855 * sudoers.pod: add net_addr/netmask support
13857 1996-06-17 00:07 millert
13859 * sample.sudoers: added net_addr/mask example
13861 1996-06-17 00:02 millert
13863 * parse.lex, parse.c: added support for net_addr/netmask
13865 1996-06-15 20:13 millert
13867 * sudoers.pod: ^ -> !
13869 1996-06-15 18:12 millert
13871 * RUNSON: updated for 1.4.3
13873 1996-06-15 18:12 millert
13875 * CHANGES: udpated for 1.4.3
13877 1996-06-15 18:11 millert
13879 * TROUBLESHOOTING, TODO, BUGS: updated
13881 1996-06-15 18:11 millert
13883 * sample.sudoers: updated with examples of new stuff
13885 1996-06-15 18:10 millert
13887 * INSTALL, README: ++version
13889 1996-06-15 18:01 millert
13891 * sudoers.pod: updated wrt -u and NOPASSWD
13893 1996-06-15 17:58 millert
13895 * sudo.pod: updated wrt -u and CAVEATS
13897 1996-06-08 23:15 millert
13899 * sudo.c: fixed usage()
13901 1996-06-08 22:57 millert
13903 * parse.lex: now use :foo: character classes (makes no diff for
13906 1996-06-07 14:33 millert
13908 * check.c: fixed LONG_SKEY_PROMPT stuff
13910 1996-06-06 15:35 millert
13912 * visudo.c: fixed a comment
13914 1996-06-06 15:03 millert
13916 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
13918 1996-06-06 15:02 millert
13920 * emul/search.h: fixed decls of lsearch()
13922 1996-06-05 22:20 millert
13924 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
13926 1996-06-05 22:20 millert
13928 * check.c: hpux 10 uses bigcrypt() if C2
13930 1996-06-04 19:57 millert
13932 * parse.c: now always uses fnmatch to match args
13934 1996-06-04 19:40 millert
13936 * tgetpass.c: back to using stdio instead of raw i/o since that
13937 caused some problems
13939 1996-05-28 22:14 millert
13941 * sudo.c: now give usage warning if use -l,-v,-k with args
13943 1996-05-28 18:22 millert
13945 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
13947 1996-05-28 12:50 millert
13949 * sudo.c: now sets sudoers to correct group if mode is 0400
13951 1996-05-28 12:02 millert
13953 * install-sh: updated to version used by inn and bind
13955 1996-05-28 00:08 millert
13957 * configure.in: now uses -lgnumalloc if it exists
13959 1996-05-28 00:02 millert
13961 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
13964 1996-05-28 00:01 millert
13966 * sudo.c: rmeoved debugging statements
13968 1996-05-28 00:00 millert
13970 * parse.yacc: added a missing free()
13972 1996-05-27 23:58 millert
13974 * sudo.c: now uses user_gid instead of getegid (which was wrong
13975 anyway) to set SUDO_GID Now sets command line args in
13976 SUDO_COMMAND envariabled (logging.c depends on args being in the
13979 1996-05-27 23:57 millert
13981 * logging.c: now uses SUDO_COMMAND envariable to get command args
13982 rather than building it up again.
13984 1996-05-27 22:42 millert
13986 * parse.c: now uses user_gid
13988 1996-05-27 20:02 millert
13990 * sudo.c: fixed off by one error in allocation NewArgv
13992 1996-05-27 20:01 millert
13994 * parse.c: in sudoers, 'command ""' now means command with no args
13996 1996-05-27 20:01 millert
13998 * configure.in: added check for fnmatch(3) and fnmatch.h
14000 1996-05-27 20:01 millert
14002 * config.h.in: added HAVE_FNMATCH
14004 1996-05-27 20:00 millert
14006 * Makefile.in: replaced wildcat.* with fnmatch.*
14008 1996-05-27 20:00 millert
14010 * testsudoers.c: now uses fnmatch()
14012 1996-05-27 19:38 millert
14014 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14015 (*) by itself now matches multiple args added support for
14016 wildcards in the pathname in sudoers
14018 1996-05-25 19:23 millert
14020 * fnmatch.c: now includes compat.h and config.h
14022 1996-05-25 18:09 millert
14024 * config.h.in: added HAVE_FNMATCH_H
14026 1996-05-25 18:07 millert
14028 * configure.in: now checks for alloca() (if needed by bison or dce)
14029 and links with -lPW if it contains alloca() and libv and compiler
14032 1996-05-25 18:03 millert
14034 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14036 1996-04-28 22:38 millert
14038 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14041 1996-04-28 17:44 millert
14043 * Makefile.in: fixed pod2man usage
14045 1996-04-28 17:40 millert
14047 * configure.in, Makefile.in, version.h: ++version
14049 1996-04-28 17:20 millert
14051 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14053 1996-04-28 17:20 millert
14055 * sudo.h: removed PERM_FULL_ROOT
14057 1996-04-28 17:18 millert
14059 * sudo.c: runas_user defaults to "root" so no more need to
14062 1996-04-28 17:16 millert
14064 * parse.c: will now only running commands as root if there was no
14065 runas list (or if root is in the runas list)
14067 1996-04-28 17:15 millert
14069 * logging.c: now logs "USER=%s"
14071 1996-04-28 17:12 millert
14073 * parse.yacc: runas_matches is now set to false if we get a
14076 1996-04-28 15:01 millert
14078 * parse.lex: make #uid work + some minor cleanup
14080 1996-04-27 21:04 millert
14082 * sample.sudoers: added support for NOPASSWD and "runas" from
14085 1996-04-27 21:03 millert
14087 * visudo.c: added support for "runas" from garp@opustel.com
14088 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14089 support for SUDOERS_MODE
14091 1996-04-27 21:03 millert
14093 * testsudoers.c: added support for "runas" from garp@opustel.com
14095 1996-04-27 21:02 millert
14097 * sudo.h: added support for NO_PASSWD and runas from
14098 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14099 SUDOERS_GID and added support fro SUDOERS_MODE
14101 1996-04-27 21:00 millert
14103 * sudo.c: added support for NO_PASSWD and runas from
14104 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14105 SUDOERS_GID and added support fro SUDOERS_MODE
14107 1996-04-27 21:00 millert
14109 * parse.yacc: added support for NO_PASSWD and runas from
14112 1996-04-27 20:58 millert
14114 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14117 1996-04-27 20:56 millert
14119 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14121 1996-04-27 20:40 millert
14123 * configure.in: added --with-CC only link with -lshadow on linux
14124 (with shadow pw) if libc lacks getspnam()
14126 1996-04-27 20:39 millert
14128 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14129 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14130 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14132 1996-04-27 20:26 millert
14134 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14136 1996-04-27 11:20 millert
14138 * INSTALL: added --with-CC
14140 1996-04-06 16:31 millert
14142 * parse.lex: added double quote support
14144 1996-04-06 16:29 millert
14146 * sudoers.pod: documented double quoting
14148 1996-04-05 16:53 millert
14150 * mkinstalldirs: Initial revision
14152 1996-04-05 16:53 millert
14154 * check.c: fixed some indentation
14156 1996-04-05 16:48 millert
14158 * Makefile.in: fixed a typo
14160 1996-04-04 19:39 millert
14162 * Makefile.in: added install-dirs .
14164 1996-04-04 14:16 millert
14166 * dce_pwent.c: new version from "Jeff A. Earickson"
14167 <jaearick@colby.edu>
14169 1996-04-03 13:40 millert
14171 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14173 1996-04-03 13:40 millert
14177 1996-04-03 13:36 millert
14179 * parse.lex: FQHOST now has same constraints as non-FQHOST
14181 1996-04-02 19:00 millert
14183 * INSTALL: added note about OS's w/ shadow passwords turned on by
14186 1996-04-02 18:58 millert
14188 * configure.in: fixed a typo
14190 1996-04-02 18:48 millert
14192 * configure.in: added support for --without-THING sanitized shadow
14193 pw situtation by adding support for --without-C2
14195 1996-04-02 16:42 millert
14197 * tgetpass.c: fixed a typo wrt placement of an end paren
14199 1996-04-02 14:57 millert
14201 * check.c: was closing an fd that may not have been opened
14203 1996-03-21 19:55 millert
14205 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14207 1996-03-19 19:40 millert
14209 * configure.in: now always use shadow pw on some arches
14211 1996-03-19 17:07 millert
14213 * configure.in: added pyramid support
14215 1996-03-19 17:04 millert
14217 * configure.in: no longer check for C2 if alternate passwd method
14218 is used no longer check for some libs twice
14220 1996-03-19 17:00 millert
14222 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14224 1996-03-19 17:00 millert
14226 * parse.lex: added FQHOST rules
14228 1996-03-18 20:57 millert
14230 * tgetpass.c: now define TCSASOFT in necesary
14232 1996-03-18 20:31 millert
14234 * tgetpass.c: now uses read/write instead of stdio string goop to
14235 avoid problems with select(2)
14237 1996-03-18 19:37 millert
14239 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14242 1996-03-17 16:18 millert
14244 * INSTALL: added note about no shadow auto-detect if using
14245 alternate auth schemes
14247 1996-03-17 15:33 millert
14249 * configure.in: don't check for C2 if AFS or DCE (unless they said
14252 1996-03-17 15:08 millert
14254 * testsudoers.c: now groks shost
14256 1996-03-17 15:01 millert
14258 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14260 1996-03-16 14:43 millert
14262 * find_path.c: checkdot now works correctly
14264 1996-03-12 18:01 millert
14266 * configure.in: can't have DCE and C2 passwords both...
14268 1996-03-11 14:05 millert
14270 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14273 1996-03-11 14:04 millert
14275 * configure.in: now looks for skey in /usr/lib and doesn't require
14276 libskey to be in /usr/local/lib just because skey.h is (for my
14279 1996-03-11 02:00 millert
14281 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14284 1996-03-10 21:01 millert
14286 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14288 1996-03-10 20:59 millert
14290 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14292 1996-03-10 20:59 millert
14294 * OPTIONS: udpated FQDN
14296 1996-03-10 20:58 millert
14298 * config.h.in: added _SUDO_PATH_TIMEDIR
14300 1996-03-10 20:58 millert
14302 * aclocal.m4, configure.in: added SUDO_TIMEDIR
14304 1996-03-10 20:58 millert
14306 * sudo.pod: updated wrt /var/run/sudo
14308 1996-03-10 20:16 millert
14310 * sudo.c, sudo.h: added support for shost if FQDN
14312 1996-03-10 20:14 millert
14314 * parse.yacc, visudo.c: now uses shost if FQDN
14316 1996-03-10 20:12 millert
14318 * check.c: Now use skeylookup() instead off skeychallenge()
14320 1996-02-27 20:41 millert
14322 * logging.c: mail_argv should not contain ALERTMAIL as it includes
14325 1996-02-22 17:06 millert
14327 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14329 1996-02-22 16:27 millert
14331 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14333 1996-02-22 16:27 millert
14335 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14337 1996-02-05 19:20 millert
14339 * README, INSTALL: ++version
14341 1996-02-05 19:20 millert
14343 * Makefile.in: ++versoin
14345 1996-02-05 19:16 millert
14347 * Makefile.in: fixed a typo
14349 1996-02-05 19:16 millert
14351 * configure.in: ++version
14353 1996-02-05 18:53 millert
14357 1996-02-05 18:47 millert
14359 * CHANGES: done for 1.4.1 (I hope)
14361 1996-02-05 18:45 millert
14363 * sudoers.pod: added info on wildcards
14365 1996-02-05 18:39 millert
14367 * sample.sudoers: added wildcard example
14369 1996-02-05 17:03 millert
14371 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14373 1996-02-05 17:03 millert
14375 * configure.in: addedSUDO_PROG_BSHELL !ll
14377 1996-02-05 16:10 millert
14379 * visudo.pod: fixed up some formatting
14381 1996-02-05 16:10 millert
14383 * sudoers.pod: redid section describing sample sudoers stuff
14385 1996-02-05 16:10 millert
14387 * sudo.pod: fixed some formatting
14389 1996-02-04 22:50 millert
14391 * getspwuid.c: now treats "" as bourne shell
14393 1996-02-04 22:49 millert
14395 * Makefile.in: TESTOBJS nwo includes wildmat.o
14397 1996-02-04 22:48 millert
14399 * testsudoers.c: now works with NewArg[cv]
14401 1996-02-04 21:59 millert
14403 * sudo.c: removed an XXX (fixed it in getspwuid.c)
14405 1996-02-04 21:58 millert
14407 * aclocal.m4: added check for bourne shell
14409 1996-02-04 21:58 millert
14411 * pathnames.h.in: added _PATH_BSHELL
14413 1996-02-04 21:58 millert
14415 * config.h.in: added _SUDO_PATH_BSHELL
14417 1996-02-04 16:36 millert
14419 * visudo.c: unixware vi returns 256 instead of 0
14421 1996-02-04 16:24 millert
14423 * INSTALL: added Linux note
14425 1996-02-04 16:13 millert
14427 * logging.c: fixed up some XXX's. file log format now looks a
14428 little more like real syslog(3) format.
14430 1996-02-04 16:13 millert
14432 * README, TROUBLESHOOTING: updated wrt lex/flex
14434 1996-02-04 16:11 millert
14436 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
14437 since we ship with a pre-flex'd parser
14439 1996-02-04 16:09 millert
14441 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
14443 1996-02-04 02:28 millert
14445 * logging.c: eliminated some strcat()'s
14447 1996-02-04 02:10 millert
14449 * configure.in: no longer checks for lex/flex (now assumes flex)
14451 1996-02-04 02:08 millert
14453 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
14454 just kerb_dir_candidate
14456 1996-02-02 20:48 millert
14458 * parse.yacc: now use a 'hook' expression instead of an iffy one
14461 1996-02-02 01:14 millert
14463 * visudo.c: now works with new sudo arg stuff
14465 1996-02-02 01:14 millert
14467 * parse.yacc: fixed dereferencing deadbeef
14469 1996-02-01 23:53 millert
14471 * sudo.c: changed an occurrence of Argv to NewArgv
14473 1996-02-01 23:53 millert
14475 * parse.lex: took out support for quoted commands since there is no
14478 1996-02-01 23:52 millert
14480 * parse.c: fixed a typo in a for() loop
14482 1996-02-01 23:52 millert
14484 * logging.c: protected against dereferencing rogue pointers
14486 1996-02-01 22:34 millert
14488 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
14489 needed this also allows us to eliminate some kludges in
14490 parse_args() and eliminate superfluous code.
14492 1996-02-01 22:34 millert
14494 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
14496 1996-02-01 22:32 millert
14498 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
14499 cmnd_args (no longer used)
14501 1996-02-01 22:31 millert
14503 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
14505 1996-02-01 22:30 millert
14507 * parse.yacc: COMMAND is now a struct containing the path and args
14509 1996-02-01 22:30 millert
14511 * parse.lex: replaced append() with fill_cmnd() and fill_args.
14512 command args from a sudoers entry are now stored in an arrary for
14515 1996-02-01 22:28 millert
14517 * parse.c: command line args from sudoers file are now in an array
14518 like ones passed in from the command line
14520 1996-01-31 20:59 millert
14522 * parse.c: wildwat stuff now works
14524 1996-01-29 00:44 millert
14526 * version.h: ++version
14528 1996-01-29 00:44 millert
14530 * Makefile.in: ++version added wildmat.*
14532 1996-01-28 17:55 millert
14534 * parse.lex: added support for quoted commands (w/ or w/o args)
14536 1996-01-22 01:55 millert
14538 * sudo.pod, visudo.pod: cleaned up formatting
14540 1996-01-21 20:53 millert
14542 * sudo.pod, visudo.pod: Initial revision
14544 1996-01-21 02:07 millert
14546 * sudoers.pod: looks reasonable, could be mroe readable
14548 1996-01-20 23:47 millert
14550 * sudoers.pod: Initial revision
14552 1996-01-16 14:38 millert
14556 1996-01-16 14:37 millert
14558 * OPTIONS: updated NO_ROOT_SUDO entry
14560 1996-01-15 11:37 millert
14562 * RUNSON: [no log message]
14564 1996-01-15 11:34 millert
14566 * sudo.c: fixed SECURE_PATH
14568 1996-01-14 20:55 millert
14570 * RUNSON: udpa`ted for 1.4
14572 1996-01-14 20:52 millert
14574 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
14576 1996-01-14 20:32 millert
14578 * TROUBLESHOOTING: added entry for anal ansi compilers
14580 1996-01-14 16:13 millert
14582 * INSTALL: added info on libcrypt_i for SCO
14584 1996-01-14 16:05 millert
14586 * TODO: [no log message]
14588 1996-01-14 15:39 millert
14590 * sample.sudoers: added comments
14592 1996-01-14 15:25 millert
14594 * TODO: 1.4 release
14596 1996-01-14 15:22 millert
14598 * README, config.h.in, configure.in, CHANGES: ++version
14600 1996-01-14 15:21 millert
14602 * BUGS: ++version and fixed ISC
14604 1996-01-14 15:19 millert
14606 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
14607 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
14608 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
14609 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14610 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
14613 1996-01-14 15:16 millert
14615 * interfaces.c: added STUB_LOAD_INTERFACES ++version
14617 1996-01-14 15:14 millert
14619 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
14620 emul/utime.h: ++version
14622 1996-01-14 15:13 millert
14624 * PORTING: added info about fd_set in tgetpass added info on
14627 1996-01-11 13:22 millert
14629 * dce_pwent.c: added sudo header
14631 1996-01-11 13:04 millert
14633 * tgetpass.c: fixed a typo
14635 1996-01-11 13:01 millert
14637 * Makefile.in: tgetpass.o is now only linked in with sudo (not
14640 1996-01-09 12:56 millert
14642 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
14643 configure.in: ++version
14645 1996-01-09 12:54 millert
14647 * emul/utime.h: added copyright notice
14649 1996-01-09 12:52 millert
14651 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
14652 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
14653 interfaces.c, logging.c, options.h, parse.c, parse.lex,
14654 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
14655 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
14656 visudo.c: ++version
14658 1996-01-09 12:46 millert
14660 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
14663 1996-01-09 12:42 millert
14665 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
14667 1996-01-09 12:41 millert
14669 * config.h.in: added check for sys/bsdtypes.h
14671 1996-01-07 16:00 millert
14673 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
14675 1996-01-07 15:55 millert
14677 * TROUBLESHOOTING: added 2 entries
14679 1996-01-07 15:55 millert
14681 * Makefile.in: added FAQ
14683 1996-01-07 14:26 millert
14685 * TROUBLESHOOTING: added section on syslog
14687 1996-01-07 14:25 millert
14689 * configure.in: added AC_ISC_POSIX for better ISC support
14691 1996-01-07 14:25 millert
14693 * config.h.in: fixed typo
14695 1996-01-07 14:25 millert
14697 * config.h.in: added define for _POSIX_SOURCE
14699 1996-01-04 00:41 millert
14701 * configure.in: fixed check for lsearch()
14703 1995-12-21 21:53 millert
14705 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
14706 (should not happen)
14708 1995-12-20 17:02 millert
14710 * configure.in: now only define HAVE_LSEARCH if there is a
14711 corresponding search.h
14713 1995-12-20 15:52 millert
14715 * interfaces.c: works on ISC again
14717 1995-12-18 17:36 millert
14719 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
14722 1995-12-18 17:32 millert
14724 * lsearch.c: char * -> const char *
14726 1995-12-18 17:29 millert
14728 * configure.in: now looks in -lcompat for lsearch()
14730 1995-12-18 17:23 millert
14732 * Makefile.in: remove sudo.core visudo.core for clan target
14734 1995-12-17 22:53 millert
14736 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
14738 1995-12-17 22:36 millert
14740 * Makefile.in: fixed another occurence of sudo_getpwuid.*
14742 1995-12-17 22:30 millert
14744 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
14746 1995-12-17 22:22 millert
14748 * configure.in: moved the "echo"
14750 1995-12-17 22:09 millert
14752 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
14753 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
14754 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
14755 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
14756 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
14757 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
14758 tgetpass.c, utime.c, version.h, visudo.c: ++version
14760 1995-12-17 22:04 millert
14762 * testsudoers.c: added group support
14764 1995-12-17 22:00 millert
14766 * sample.sudoers: added group entry
14768 1995-12-17 21:59 millert
14770 * sudoers.man: documented group support
14772 1995-12-17 21:50 millert
14774 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
14776 1995-12-15 17:45 millert
14778 * check.c: tkfile was too short and overflowed the kerberos realm
14780 1995-12-11 17:09 millert
14782 * sudo.c: now copy command args directly from Argv
14784 1995-12-11 15:55 millert
14786 * sudo.c: replaced code to copy cmnd_args so that is does not use
14787 realloc since most realloc()'s really stink
14789 1995-12-08 14:11 millert
14791 * configure.in: syslog() fixed in hpux 10.01
14793 1995-12-06 17:45 millert
14795 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
14798 1995-12-06 17:30 millert
14800 * configure.in: better error if cannot find skey incs or libs
14802 1995-12-06 17:26 millert
14804 * aclocal.m4: now use a temp file for determining max len of uid_t
14805 in string form. the old hacky way broke on netbsd
14807 1995-12-05 19:02 millert
14809 * sudo.c: added set of parens and a space
14811 1995-12-05 18:58 millert
14813 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
14815 1995-12-05 18:58 millert
14817 * check.c: modified a comment
14819 1995-12-05 18:57 millert
14821 * Makefile.in: fixed up testsudoers target
14823 1995-12-05 18:56 millert
14825 * configure.in: DCE changes from Jeff Earickson
14826 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
14827 SUDO_FDFLAGS and VISUDO_LDFLAGS
14829 1995-12-05 18:17 millert
14831 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
14832 SUDO_LDFLAGS, VISUDO_LDFLAGS
14834 1995-11-27 23:32 millert
14836 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
14838 1995-11-27 23:17 millert
14840 * check.c: LONG_SKEY_PROMPT is less of a klusge /
14842 1995-11-27 23:17 millert
14844 * configure.in: fixed typos w/ dce stuff
14846 1995-11-27 23:14 millert
14848 * Makefile.in: added dce_pwent.c
14850 1995-11-26 13:48 millert
14852 * INSTALL: amended section on combining authentication mechanisms
14854 1995-11-26 13:48 millert
14856 * PORTING: minor updates for 1.3.6
14858 1995-11-26 13:47 millert
14860 * TROUBLESHOOTING: added 2 more entries
14862 1995-11-26 13:39 millert
14864 * BUGS: updated for 1.3.6
14866 1995-11-26 13:39 millert
14868 * README: overhauled
14870 1995-11-25 21:23 millert
14872 * INSTALL: rewrote for sudo 1.3.6
14874 1995-11-25 21:23 millert
14876 * TROUBLESHOOTING: added 3 entries
14878 1995-11-25 13:53 millert
14880 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
14881 since many includes don't prototype it. gag me.
14883 1995-11-25 13:23 millert
14885 * sudo.h: removed prototype for sudo_getpwuid() since convex C
14886 compiler choked on it.
14888 1995-11-25 13:23 millert
14890 * sudo.c: added prototype for sudo_getpwuid()
14892 1995-11-25 13:23 millert
14894 * lsearch.c: now compiles on strict ANSI compilers
14896 1995-11-24 23:56 millert
14898 * check.c: added LONG_SKEY_PROMPT support
14900 1995-11-24 23:55 millert
14902 * Makefile.in: added extra $'s for make to eat up, yum.
14904 1995-11-24 23:38 millert
14906 * OPTIONS, options.h: added LONG_SKEY_PROMPT
14908 1995-11-24 18:48 millert
14910 * check.c: s/key support now works with normal s/key as well as
14913 1995-11-24 18:46 millert
14915 * options.h, OPTIONS: added SKEY_ONLY
14917 1995-11-24 18:46 millert
14919 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
14921 1995-11-24 00:42 millert
14923 * INSTALL: added DCE note added more AIX notes
14925 1995-11-24 00:39 millert
14927 * sudo.c: now include pthread.h for DCE support
14929 1995-11-23 22:22 millert
14931 * check.c: dce_pwent() is ok after all .,
14933 1995-11-23 22:21 millert
14935 * logging.c: now uses SYSLOG() macro that equates to either
14936 syslog() or syslog_wrapper
14938 1995-11-23 21:44 millert
14940 * dce_pwent.c: minor formatting changes. renamed check() to
14941 somthing less generic
14943 1995-11-23 21:27 millert
14945 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
14946 visudo.c: now uses user_pw_ent and simple macros to get at the
14949 1995-11-22 20:35 millert
14951 * check.c: simpler dec unix C2 support
14953 1995-11-22 20:35 millert
14955 * getspwuid.c: now sets crypt_type for DEC unix C2
14957 1995-11-21 18:00 millert
14959 * configure.in: added csops paths for skey
14961 1995-11-21 16:27 millert
14963 * getspwuid.c: now includes string.h for strdup() prototype
14965 1995-11-21 01:47 millert
14967 * getspwuid.c: fixed a few typos
14969 1995-11-20 22:59 millert
14971 * check.c: now includes skey.h
14973 1995-11-20 22:10 millert
14975 * getspwuid.c: fixed up comments
14977 1995-11-20 22:04 millert
14979 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
14981 1995-11-20 22:01 millert
14983 * sudo.c: now uses sudo_pw_ent
14985 1995-11-20 21:50 millert
14987 * testsudoers.c: now uses sudo_pw_ent
14989 1995-11-20 21:40 millert
14991 * visudo.c: now sets sudo_pw_ent
14993 1995-11-20 21:28 millert
14995 * getspwuid.c: Initial revision
14997 1995-11-20 21:28 millert
14999 * tgetpass.c: moved dce stuff into compat.h
15001 1995-11-20 21:27 millert
15003 * sudo.h, logging.c: now uses sudo_pw_ent
15005 1995-11-20 21:27 millert
15007 * Makefile.in: added sudo_getpwuid.c
15009 1995-11-20 21:25 millert
15011 * compat.h: added dce support
15013 1995-11-20 21:13 millert
15015 * parse.yacc: now uses sudo_pw_ent
15017 1995-11-20 14:40 millert
15019 * check.c: fixed exempt_group stuff for OS's that don't put base
15020 gid in group vector
15022 1995-11-20 01:39 millert
15024 * check.c: S/Key support now works with sunos4 shadow passwords
15026 1995-11-19 22:31 millert
15028 * Makefile.in: fixed clean rule
15030 1995-11-19 22:31 millert
15032 * config.h.in, configure.in: added DCE support
15034 1995-11-19 22:30 millert
15036 * tgetpass.c: DCE & KERB support
15038 1995-11-19 22:30 millert
15040 * check.c: first stab at dce support
15042 1995-11-19 22:24 millert
15044 * dce_pwent.c: now smells like sudo
15046 1995-11-19 22:11 millert
15048 * dce_pwent.c: Initial revision
15050 1995-11-19 21:36 millert
15052 * check.c: skey'd sudo now works w/ normal password as well
15054 1995-11-19 18:37 millert
15056 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15057 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15058 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15059 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15060 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15061 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15063 1995-11-19 18:32 millert
15065 * README: updated to reflect version change
15067 1995-11-19 18:27 millert
15069 * configure.in: --with options now line up ++version
15071 1995-11-19 18:26 millert
15073 * sudo.h: removed unecesary S/Key stuff
15075 1995-11-19 18:25 millert
15077 * configure.in: fixed S/Key support
15079 1995-11-19 18:24 millert
15081 * Makefile.in: -I stuff now goes in CPPFLAGS
15083 1995-11-19 18:23 millert
15085 * check.c: fixed SKey support
15087 1995-11-19 15:23 millert
15089 * README: updated version
15091 1995-11-19 13:59 millert
15093 * OPTIONS: fixed description of EXEMPTGROUP
15095 1995-11-19 10:47 millert
15097 * sudo.c: more people use _RLD_ than just alphas...
15099 1995-11-18 21:35 millert
15101 * Makefile.in: replaced $man_prefix with $mandir
15103 1995-11-18 21:30 millert
15105 * configure.in: fixed a typo
15107 1995-11-18 21:28 millert
15109 * Makefile.in: now use more GNU'ish dir names
15111 1995-11-18 21:27 millert
15113 * configure.in: now set *dir correctly (can override from command
15116 1995-11-18 19:17 millert
15118 * sudo.c: now deal with situations where we getwd() fails
15120 1995-11-17 00:37 millert
15122 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15124 1995-11-17 00:37 millert
15126 * configure.in: added sbin_dir
15128 1995-11-16 21:28 millert
15130 * Makefile.in: now ship a flex-generated lex.yy.c
15132 1995-11-16 21:09 millert
15134 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15137 1995-11-16 21:06 millert
15139 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15140 overridden via Makefile
15142 1995-11-16 21:05 millert
15144 * options.h: no more error for redefining SUDOERS_OWNER
15146 1995-11-16 21:05 millert
15148 * OPTIONS: expanded SUDOERS_OWNER section
15150 1995-11-16 03:05 millert
15152 * visudo.c: now warn if chown(2) failed
15154 1995-11-16 02:55 millert
15156 * logging.c: better default warning for NO_SUDOERS_FILE
15158 1995-11-16 02:54 millert
15160 * sudo.c: added missing set_perms() no more cryptic message if the
15161 sudoers file is zero length, now just give a parse error
15163 1995-11-16 02:42 millert
15165 * logging.c: better diagnostics if NO_SUDOERS_FILE
15167 1995-11-16 02:41 millert
15169 * sudo.c: check_sudoers() now catches sudoers files that are not
15170 readable (but are stat'able).
15172 1995-11-13 01:12 millert
15174 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15176 1995-11-13 00:52 millert
15178 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15181 1995-11-13 00:52 millert
15183 * Makefile.in: now uses exec_prefix & prefix from configure
15185 1995-11-13 00:16 millert
15187 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15188 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15189 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15190 so shadow build trees can have a custom copy of options.h
15192 1995-11-13 00:15 millert
15194 * check.c: user_is_exempt() is no longer a hack, it now uses
15197 1995-11-12 23:56 millert
15199 * options.h: EXEMPTGROUP is now "sudo"
15201 1995-11-12 22:25 millert
15203 * configure.in: MAN_POSTINSTALL now contains a leading space
15205 1995-11-12 22:25 millert
15207 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15208 now removes testsudoers in clean:
15210 1995-11-12 22:24 millert
15212 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15214 1995-10-30 15:51 millert
15216 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15217 don't get spoofed into using a bogus server
15219 1995-09-29 17:50 millert
15221 * parse.yacc: now explicately initialize match[] tp be FALSE
15223 1995-09-23 16:48 millert
15225 * sudo.c: removed unused variable now passes -Wall
15227 1995-09-23 16:48 millert
15229 * parse.yacc: yyerror and dumpaliases are now void's now passes
15232 1995-09-23 16:48 millert
15234 * parse.lex: added prototype for yyerror
15236 1995-09-23 16:47 millert
15238 * interfaces.c: rmeoved unused cruft now passes -Wall
15240 1995-09-23 16:47 millert
15242 * check.c, logging.c, parse.c: now passes -Wall
15244 1995-09-23 16:46 millert
15246 * Makefile.in: fixed headers that moved to emul dir
15248 1995-09-23 12:05 millert
15250 * logging.c: fixed deref of nil pointer if no args
15252 1995-09-15 19:18 millert
15254 * OPTIONS: added a caveat to FQDN section
15256 1995-09-13 19:48 millert
15258 * Makefile.in: more $srcdir support for install targets
15260 1995-09-13 17:17 millert
15262 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15263 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15264 visudo.c: don't include malloc.h if we include stdlib.h
15266 1995-09-12 21:44 millert
15268 * parse.yacc: local search.h now lives in emul
15270 1995-09-12 21:41 millert
15272 * lsearch.c: local search.h now lives in emul
15274 1995-09-12 21:41 millert
15276 * check.c, utime.c: local utime.h now lives in emul dir
15278 1995-09-12 21:38 millert
15280 * Makefile.in: added support for building in other than the
15283 1995-09-10 14:01 millert
15285 * OPTIONS: annotated CSOPS_INSULTS option
15287 1995-09-10 13:56 millert
15289 * TROUBLESHOOTING: updated shadow passwords blurb
15291 1995-09-09 21:00 millert
15293 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15294 shell and passes along foo as the arguments
15296 1995-09-09 18:52 millert
15298 * parse.lex: collapsed pathname and dir sections into one -- its
15301 1995-09-09 18:34 millert
15303 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15304 append() and fill() now take args to make the above work
15306 1995-09-08 20:51 millert
15308 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15309 a tty on fd 1 to erroneously have "none" as their tty
15311 1995-09-04 15:35 millert
15313 * check.c: timestampfile is now a global static removed decl of
15314 timestampfile in remove_timestamp since we can just use the
15317 1995-09-04 15:28 millert
15319 * check.c: created touch() to update timestamps added
15320 USE_TTY_TICKETS support (bit of a kludge)
15322 1995-09-04 15:28 millert
15324 * compat.h: added _S_IFDIR and S_ISDIR
15326 1995-09-04 15:22 millert
15328 * OPTIONS, options.h: added USE_TTY_TICKETS
15330 1995-09-04 00:38 millert
15332 * parse.yacc: removed const from casts for lsearch() & lfind() to
15333 placate irix 4.x C compiler
15335 1995-09-03 14:12 millert
15337 * sudo.c: now only strip '/dev/' off of a tty if it starts with
15340 1995-09-03 14:12 millert
15342 * pathnames.h.in: added _PATH_DEV
15344 1995-09-03 14:11 millert
15346 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15347 tcgetattr only if have termios.h
15349 1995-09-03 14:09 millert
15351 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15352 not int for c_?flag
15354 1995-09-03 13:19 millert
15356 * parse.lex, parse.yacc: fixed a spelling error
15358 1995-09-03 13:17 millert
15360 * Makefile.in: fixed typo
15362 1995-09-02 12:55 millert
15364 * Makefile.in: fixed a comment
15366 1995-09-02 12:54 millert
15368 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15369 now that we dynamically allocate strings they need to be free()'d
15371 1995-09-02 12:46 millert
15373 * parse.lex: dynamically allocates space for strings
15375 1995-09-02 12:34 millert
15377 * sudo.h: no more MAXCOMMANDLENGTH
15379 1995-09-01 22:25 millert
15381 * sudo.h: added decl of tty
15383 1995-09-01 22:25 millert
15385 * logging.c, sudo.c: moved tty stuff into sudo.c
15387 1995-09-01 14:18 millert
15389 * parse.c: fixed a logic bug. Was denying a command if user gave
15390 command line args but there were none in the sudoers file which
15393 1995-09-01 01:18 millert
15395 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15397 1995-09-01 01:13 millert
15399 * parse.lex: return foo; -> return(foo);
15401 1995-09-01 01:03 millert
15403 * parse.yacc: fixed netgr_matches() prototype
15405 1995-09-01 01:02 millert
15407 * parse.lex: added support for escaping "termination" characters
15409 1995-09-01 00:55 millert
15411 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15414 1995-09-01 00:50 millert
15416 * sudo.c: fixed comments
15418 1995-09-01 00:49 millert
15420 * goodpath.c: fixed negation problem (doh!)
15422 1995-09-01 00:25 millert
15424 * parse.yacc: fixed 2nd parameter to lfind()
15426 1995-09-01 00:24 millert
15428 * parse.lex: now do bounds checking in fill() and append()
15430 1995-09-01 00:23 millert
15432 * sudo.c: include netdb.h as we should added a missing void cast
15433 added SHELL_IF_NO_ARGS support now use realloc() properly. would
15434 fail if realloc actually moved the string instead of shrinking it
15436 1995-09-01 00:17 millert
15438 * sample.sudoers: updated with examples of new features
15440 1995-09-01 00:05 millert
15442 * goodpath.c: now set errno to EACCES if not a regular file or not
15445 1995-09-01 00:04 millert
15447 * find_path.c: if given a fully-qualified or relative path we now
15448 check it with sudo_goodpath() and error out with the appropriate
15449 error message if the file does not exist or is not executable
15451 1995-09-01 00:03 millert
15453 * lsearch.c, emul/search.h: now use correct args for lfind
15455 1995-09-01 00:03 millert
15457 * logging.c: added a comment
15459 1995-08-31 23:52 millert
15461 * insults.h: added in CSOps insults
15463 1995-08-31 23:51 millert
15465 * ins_csops.h: Initial revision
15467 1995-08-31 23:35 millert
15469 * tgetpass.c: added RCS id
15471 1995-08-31 22:56 millert
15473 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
15476 1995-08-31 22:55 millert
15478 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
15480 1995-08-31 22:54 millert
15482 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
15483 -p now works with -s
15485 1995-08-31 22:54 millert
15487 * parse.c: don't try to stat() "pseudo commands" like "validate"
15489 1995-08-31 22:53 millert
15491 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
15494 1995-08-31 22:53 millert
15496 * configure.in: added SecurID support added other insults to
15499 1995-08-31 22:52 millert
15501 * config.h.in: added HAVE_SECURID
15503 1995-08-31 22:52 millert
15505 * Makefile.in: added clobber target added ins_csops.h now gets
15506 CFLAGS from configure
15508 1995-08-31 22:46 millert
15510 * aclocal.m4: relaxed SUDO_FULL_VOID
15512 1995-08-31 22:44 millert
15514 * visudo.c: function comment blocks are now in same style as rest
15517 1995-08-31 22:44 millert
15519 * testsudoers.c: added support for command line args in
15522 1995-08-31 22:43 millert
15524 * sudoers.man: updated to have command args in the sudoers file
15526 1995-08-31 22:42 millert
15528 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
15531 1995-08-19 19:32 millert
15533 * parse.yacc: PATH renamed to COMMAND
15535 1995-08-19 19:31 millert
15537 * parse.lex: it is now a parse error for directories to have args
15540 1995-08-19 19:30 millert
15542 * logging.c: now say command args if telling user to buzz off
15544 1995-08-19 19:30 millert
15546 * sudo.c: -s no longer indicates end of args sped up loading on
15547 cmnd_args in load_cmnd()
15549 1995-08-19 19:29 millert
15551 * parse.c: removed an unreachable statement
15553 1995-08-19 17:53 millert
15555 * parse.lex: made more efficient by pulling out the terminators
15556 when in GOTCMND state and making them their own rule
15558 1995-08-14 00:07 millert
15560 * sudo.h: removed MAXLOGLEN since it is no longer used
15562 1995-08-14 00:07 millert
15564 * parse.lex: now allows command args
15566 1995-08-14 00:06 millert
15568 * parse.c: now groks command arguments
15570 1995-08-13 23:39 millert
15572 * logging.c: now sets tty correctly when piped input
15574 1995-08-13 23:35 millert
15576 * sudo.c: fixed loading of cmnd_args (was including command name
15579 1995-08-13 23:34 millert
15581 * logging.c: fixed a core dump due to incorrect if construct
15583 1995-08-13 00:33 millert
15585 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
15588 1995-08-13 00:33 millert
15590 * aclocal.m4: fixed check for ISC
15592 1995-08-13 00:32 millert
15594 * sudo.c: now sets cmnd_args used by log_error() and that will be
15595 used by the parse to check against command args
15597 1995-08-13 00:32 millert
15599 * sudo.h: added cmnd_args
15601 1995-08-13 00:31 millert
15603 * logging.c: now dynamically allocate logline since we can guess at
15606 1995-08-05 13:52 millert
15608 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
15609 buffer remove "register" since the compiler knows more than I do
15610 now do a "basename" of the tty
15612 1995-07-31 18:20 millert
15614 * configure.in: ++version
15616 1995-07-30 22:37 millert
15618 * sudo.h: added shell extern changed MODE_* to be bit masks to
15619 allow for several options together
15621 1995-07-30 22:36 millert
15623 * sudo.c: added -s (shell) option made MODE_* masks so we can do
15624 bitwise & and | to see if multiple flags are set.
15626 1995-07-30 22:01 millert
15628 * check.c: added securid support
15630 1995-07-30 14:38 millert
15632 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
15635 1995-07-29 17:17 millert
15637 * Makefile.in, version.h: ++version
15639 1995-07-27 06:52 millert
15641 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
15643 1995-07-26 22:00 millert
15645 * testsudoers.c: added netgr_matches
15647 1995-07-26 21:29 millert
15649 * parse.c: cleaned up netgr_matches
15651 1995-07-26 00:26 millert
15653 * RUNSON: updated for 1.3.4
15655 1995-07-24 21:51 millert
15657 * Makefile.in: now installs sudoers.man -- really should clean this
15660 1995-07-24 21:18 millert
15662 * Makefile.in: added sudoers.cat and sudoers.man
15664 1995-07-24 21:15 millert
15666 * sudo.man: pulled out stuff on the sudoers file format into a
15669 1995-07-24 21:14 millert
15671 * sudoers.man: Initial revision
15673 1995-07-24 21:04 millert
15675 * HISTORY: fixed up my email address
15677 1995-07-24 20:03 millert
15679 * configure.in: added checks for innetgr and getdomainname
15681 1995-07-24 20:02 millert
15683 * visudo.c: added dummy netgr_matches function
15685 1995-07-24 20:01 millert
15687 * parse.c: added netgr_matches
15689 1995-07-24 20:01 millert
15691 * parse.lex, parse.yacc: added NETGROUP support
15693 1995-07-24 20:01 millert
15695 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
15697 1995-07-24 18:07 millert
15699 * sudo.c: rewrote clean_env() that has rm_env() builtin
15701 1995-07-23 19:58 millert
15703 * check.c: now cast uid to long in sprintf
15705 1995-07-23 19:58 millert
15707 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
15709 1995-07-23 19:57 millert
15711 * options.h: added _INSULTS suffix to HAL & GOONS
15713 1995-07-23 19:35 millert
15715 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
15716 new scheme of insult "unions" end
15718 1995-07-23 17:48 millert
15720 * sudo.c: now uses MAX_UID_T_LEN
15722 1995-07-23 17:48 millert
15724 * configure.in: added SUDO_UID_T_LEN !l
15726 1995-07-23 17:48 millert
15728 * config.h.in: added MAX_UID_T_LEN
15730 1995-07-23 17:47 millert
15732 * check.c: now use MAX_UID_T_LEN
15734 1995-07-23 17:47 millert
15736 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
15739 1995-07-19 19:05 millert
15741 * configure.in: corrected version
15743 1995-07-19 17:29 millert
15745 * configure.in: added sco support
15747 1995-07-19 17:29 millert
15749 * aclocal.m4: hack to check for sco
15751 1995-07-18 21:27 millert
15753 * interfaces.c: removed #include <net/route.h> since it was hosing
15756 1995-07-18 13:35 millert
15758 * find_path.c: fixed prreadlink() prototype
15760 1995-07-17 23:54 millert
15762 * check.c: added parens in #if's
15764 1995-07-17 23:53 millert
15766 * configure.in: added SPW_ prefix
15768 1995-07-17 23:20 millert
15770 * sudo.h: moved SPW_* to config.h.in
15772 1995-07-17 23:19 millert
15774 * sudo.c: added a set of parens
15776 1995-07-17 23:19 millert
15778 * config.h.in: added SPW_*
15780 1995-07-17 22:50 millert
15782 * sudo.h: added SPW_* reordered error codes
15784 1995-07-17 22:49 millert
15786 * check.c: moved SPW_* to sudo.h
15788 1995-07-17 14:29 millert
15790 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
15792 1995-07-17 14:29 millert
15794 * configure.in: AUTH -> SECUREWARE
15796 1995-07-17 14:29 millert
15798 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
15800 1995-07-17 00:22 millert
15802 * check.c: now uses SHADOW_TYPE to make shadow pw support more
15803 readable and modular. It's a start...
15805 1995-07-17 00:21 millert
15807 * configure.in: added autodetection of shadow passwords
15809 1995-07-17 00:20 millert
15811 * sudo.c: now uses SHADOW_TYPE define
15813 1995-07-17 00:19 millert
15815 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
15818 1995-07-17 00:19 millert
15820 * aclocal.m4: added SUDO_CHECK_SHADOW
15822 1995-07-12 17:09 millert
15824 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
15825 took out test for memmove() since we dno longer use it...
15827 1995-07-12 17:08 millert
15831 1995-07-12 17:05 millert
15833 * logging.c: added BROKEN_SYSLOG support
15835 1995-07-12 17:05 millert
15837 * config.h.in: added BROKEN_SYSLOG
15839 1995-07-12 17:04 millert
15841 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
15842 allow for a machine udpating its time from a server
15844 1995-07-12 17:04 millert
15846 * sudo.man: added 2 security notes updated Nieusma's email addr
15848 1995-07-12 14:18 millert
15850 * lsearch.c: changed a memmove() to memcpy() since we don't have to
15851 worry about overlapping segments.
15853 1995-07-11 15:41 millert
15855 * interfaces.c: cleanup up the loop when interfaces are groped in
15856 so that it is readable
15858 1995-07-11 14:52 millert
15860 * Makefile.in, version.h: ++version
15862 1995-07-09 18:17 millert
15864 * CHANGES: annotated 124-126
15866 1995-07-07 16:06 millert
15868 * check.c: fixed permissions check on /tmp/.odus
15870 1995-07-06 19:35 millert
15872 * check.c: fixed some comments
15874 1995-07-06 14:49 millert
15876 * check.c: now checks owner & mode of timedir also checks for bogus
15877 dates on timestamp file
15879 1995-07-06 14:49 millert
15881 * OPTIONS: updated TIMEOUT info
15883 1995-07-06 14:48 millert
15885 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
15887 1995-07-06 14:47 millert
15889 * compat.h: added definition of S_IRWXU
15891 1995-07-06 14:47 millert
15895 1995-07-03 14:16 millert
15897 * interfaces.c: added #ifdef to make it compile on strange arches
15899 1995-07-02 18:13 millert
15901 * aclocal.m4: fixed check for fulkl void impl.
15903 1995-07-02 09:56 millert
15905 * check.c: added mssing "static"
15907 1995-07-01 20:41 millert
15909 * insults.h: replaced #elif with #else #if constructs for ancient C
15912 1995-07-01 20:18 millert
15914 * INSTALL: updated irix c2 & kerb5 info
15916 1995-07-01 20:15 millert
15918 * configure.in: added shadow pw support for irix
15920 1995-07-01 16:07 millert
15922 * CHANGES: last changes for sudo 1.3.3
15924 1995-07-01 16:07 millert
15926 * TODO, BUGS: updated
15928 1995-07-01 16:04 millert
15930 * configure.in: now calls SUDO_SOCK_SA_LEN
15932 1995-07-01 16:04 millert
15934 * config.h.in: added HAVE_SA_LEN
15936 1995-07-01 16:04 millert
15938 * aclocal.m4: added SUDO_SOCK_SA_LEN
15940 1995-07-01 15:49 millert
15942 * interfaces.c: now works with ip implementations that use sa_len
15945 1995-07-01 14:26 millert
15947 * INSTALL: added note about buggy AIX compiler
15949 1995-07-01 14:24 millert
15951 * interfaces.c: now include sys/time.h for AIX
15953 1995-06-27 22:35 millert
15955 * Makefile.in: getcwd -> getwd
15957 1995-06-27 21:28 millert
15959 * interfaces.c: now works for ISC and others. yay.
15961 1995-06-26 14:24 millert
15963 * Makefile.in, version.h: version++
15965 1995-06-22 20:26 millert
15967 * aclocal.m4: fixed test for full void impl
15969 1995-06-22 20:25 millert
15971 * sudo.c: now check to see that st_dev is non-zero before assuming
15972 that we are being spoofed
15974 1995-06-20 16:56 millert
15976 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
15979 1995-06-19 16:32 millert
15981 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
15983 1995-06-19 16:10 millert
15985 * logging.c: added cast for ttyname()
15987 1995-06-19 15:23 millert
15989 * configure.in: fixed typo
15991 1995-06-19 15:19 millert
15993 * check.c: now deal correctly with all known variation of utime()
15996 1995-06-19 15:19 millert
15998 * configure.in: added SUDO_FUNC_UTIME_POSIX
16000 1995-06-19 15:19 millert
16002 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16004 1995-06-19 15:14 millert
16006 * config.h.in: added HAVE_UTIME_POSIX
16008 1995-06-19 13:38 millert
16010 * check.c: fixed a typo
16012 1995-06-19 13:29 millert
16014 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16016 1995-06-19 13:20 millert
16018 * check.c: fixed fascist C compiler warning
16020 1995-06-18 23:14 millert
16022 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16023 initialize num_interfaces to 0 (just to be anal)
16025 1995-06-18 18:06 millert
16027 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16029 1995-06-18 18:05 millert
16031 * logging.c: added tty logging
16033 1995-06-18 16:04 millert
16035 * interfaces.c: reworked the ISC code
16037 1995-06-18 15:27 millert
16039 * Makefile.in, version.h: updated version
16041 1995-06-18 15:24 millert
16043 * check.c: now expect old-style utime(3) if utime() can't take NULL
16046 1995-06-18 15:08 millert
16048 * configure.in: added check for utime.h
16050 1995-06-18 15:08 millert
16052 * config.h.in: added HAVE_UTIME_H
16054 1995-06-18 14:48 millert
16056 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16058 1995-06-18 13:58 millert
16060 * configure.in: now search for kerb libs and includes
16062 1995-06-18 13:03 millert
16064 * check.c: added support for utime(2)'s that can't take a NULL
16067 1995-06-18 13:03 millert
16069 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16072 1995-06-17 20:46 millert
16074 * configure.in: added utime(s) stuff
16076 1995-06-17 20:46 millert
16078 * check.c: now use utime()
16080 1995-06-17 20:46 millert
16082 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16084 1995-06-17 19:12 millert
16086 * utime.c: now use HAVE_UTIME_NULL
16088 1995-06-17 19:02 millert
16090 * utime.c, emul/utime.h: Initial revision
16092 1995-06-17 18:24 millert
16094 * check.c: need to setuid(0) to make kerb4 stuff work.
16096 1995-06-17 18:14 millert
16098 * tgetpass.c: no more special case for kerberos
16100 1995-06-17 18:13 millert
16102 * config.h.in: took out setreuid and setresuid stuff added kerb5
16103 stuff (use kerb4 emulation)
16105 1995-06-17 18:13 millert
16107 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16110 1995-06-17 18:12 millert
16112 * check.c: now use private ticket file for kerberos support to
16113 avoid trouncing on system one
16115 1995-06-15 00:48 millert
16117 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16119 1995-06-15 00:47 millert
16121 * sudo.c: added anti-spoofing support
16123 1995-06-15 00:47 millert
16125 * parse.c: now use global cmnd_st
16127 1995-06-15 00:47 millert
16129 * logging.c: added SPOOF_ATTEMPT suypport
16131 1995-06-14 23:41 millert
16133 * testsudoers.c, visudo.c: added void casts where appropriate
16135 1995-06-14 23:40 millert
16137 * parse.yacc: fixed up spacing and added void casts where
16140 1995-06-14 23:27 millert
16142 * sudo.c: fixed problem with "-p prompt" but no args
16144 1995-06-14 04:43 millert
16146 * sudo.man: added BUGS and annotated -l description
16148 1995-06-14 04:43 millert
16150 * sudo.h: validate() now takes a flag
16152 1995-06-14 04:43 millert
16154 * sudo.c: validate() now takes a flag added -l
16156 1995-06-14 04:42 millert
16158 * parse.yacc: added support for -l
16160 1995-06-14 04:41 millert
16162 * parse.c: validate() now takes a flag that says whether or not to
16165 1995-06-07 21:36 millert
16167 * logging.c: now deals with Argv == 1
16169 1995-06-07 21:34 millert
16171 * sudo.man: added -p option
16173 1995-06-07 21:27 millert
16175 * sudo.c: added prompt support reworked parse_args()
16177 1995-06-07 20:49 millert
16179 * sudo.h: added prompt
16181 1995-06-07 20:49 millert
16183 * options.h: added PASSPROMPT
16185 1995-06-07 20:48 millert
16187 * check.c: now use BUFSIZ as length of kerb password added kpass so
16188 pass is always a char * now use prompt global when asking for a
16191 1995-06-07 20:47 millert
16193 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16195 1995-06-07 20:43 millert
16197 * OPTIONS: added PASSPROMPT
16199 1995-06-07 01:44 millert
16201 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16204 1995-06-07 01:43 millert
16206 * check.c: don't exit on kerb error, just warn if k_errno ==
16207 KDC_PR_UNKNOWN (unknown user) silently fail
16209 1995-06-06 22:44 millert
16211 * INSTALL: added kerb4 note
16213 1995-06-06 22:43 millert
16215 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16217 1995-06-06 22:41 millert
16219 * check.c: removed debugging printf
16221 1995-06-06 22:33 millert
16223 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16226 1995-06-06 22:32 millert
16228 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16231 1995-06-06 22:32 millert
16233 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16234 setreuid emulation with setresuid if applic
16236 1995-06-06 22:31 millert
16238 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16239 chown() hack if no setreuid() or a broken one
16241 1995-06-05 23:44 millert
16243 * config.h.in: added HAVE_KERBEROS
16245 1995-06-05 23:43 millert
16247 * tgetpass.c: added KERBEROS support (long passwords)
16249 1995-06-05 23:42 millert
16251 * check.c, configure.in: added kerberos support
16253 1995-06-03 19:36 millert
16255 * sudo.h: added MODE_BACKGROUND
16257 1995-06-03 19:36 millert
16259 * sudo.man: escaped dashes added -b option
16261 1995-06-03 19:34 millert
16263 * sudo.c: added -b option
16265 1995-06-03 18:52 millert
16267 * check.c: added crypt() for osf/1 3.x enhanced secuiry
16269 1995-06-03 18:18 millert
16271 * configure.in: now check for -lcrypt
16273 1995-06-03 18:00 millert
16275 * interfaces.c: added ENXIO like EADDRNOTAVAIL
16277 1995-05-07 23:14 millert
16279 * configure.in: now emulate getwd(), not getcwd()
16281 1995-05-07 23:13 millert
16283 * sudo.c: getcwd() -> getwd()
16285 1995-05-07 23:12 millert
16287 * getwd.c: getcwd -> getwd
16289 1995-05-02 01:34 millert
16291 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16293 1995-05-02 01:34 millert
16295 * insults.h: broke out insults into separate include files
16297 1995-05-02 01:32 millert
16299 * options.h, OPTIONS: added GOONS
16301 1995-05-02 01:32 millert
16303 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16305 1995-05-01 23:34 millert
16307 * Makefile.in, version.h: ++version
16309 1995-05-01 23:34 millert
16311 * visudo.c: moved signal handler setup to setup_signals()
16313 1995-05-01 23:33 millert
16315 * sudo.h: added load_interfaces()
16317 1995-05-01 23:33 millert
16319 * sudo.c: moved load_interfaces to interfaces.c
16321 1995-05-01 23:33 millert
16323 * parse.yacc: added clearaliases
16325 1995-05-01 23:33 millert
16327 * OPTIONS, options.h: added FAST_MATCH
16329 1995-05-01 23:32 millert
16331 * parse.lex: now uses clearaliases variable
16333 1995-05-01 23:31 millert
16335 * interfaces.c: Initial revision
16337 1995-05-01 23:31 millert
16339 * Makefile.in: added interfaces.[co]
16341 1995-05-01 23:30 millert
16343 * testsudoers.c: now uses ip addrs and netmasks via
16346 1995-05-01 22:47 millert
16348 * sudo.c: now remove IFS instead of setting to "sane" value
16350 1995-05-01 16:30 millert
16352 * parse.c: added FAST_MATCH
16354 1995-04-29 20:19 millert
16356 * Makefile.in: sudo_goodpath.c-> goodpath.c
16358 1995-04-29 20:15 millert
16360 * sudo.c: added Andy's new ISC changes
16362 1995-04-14 14:06 millert
16364 * OPTIONS: added a sentence to SECURE_PATH info
16366 1995-04-14 13:57 millert
16370 1995-04-14 13:54 millert
16372 * RUNSON, CHANGES: updated
16374 1995-04-13 17:04 millert
16376 * RUNSON: updated for beta3
16378 1995-04-13 14:32 millert
16380 * Makefile.in, version.h: ++version
16382 1995-04-13 13:56 millert
16384 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
16386 1995-04-13 13:54 millert
16388 * sudo.c: fixed indentation
16390 1995-04-13 13:35 millert
16392 * aclocal.m4: fixed a typo
16394 1995-04-13 13:19 millert
16396 * sudo.c: updated ISC mods
16398 1995-04-13 13:19 millert
16400 * configure.in: added unixware case
16402 1995-04-13 13:19 millert
16404 * check.c: user_is_exempt is no longer hidden
16406 1995-04-13 13:19 millert
16410 1995-04-13 13:19 millert
16412 * aclocal.m4: isc and riscos changes
16414 1995-04-13 13:18 millert
16416 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
16419 1995-04-13 13:18 millert
16421 * Makefile.in: fixed a typo and added testsudoers stuff
16423 1995-04-13 12:34 millert
16425 * testsudoers.c: Initial revision
16427 1995-04-12 19:31 millert
16429 * parse.yacc: applied fixed patch from Chris
16431 1995-04-11 14:30 millert
16433 * Makefile.in: fixed a typo
16435 1995-04-11 14:14 millert
16437 * parse.yacc: added a set of braces for bison
16439 1995-04-11 14:01 millert
16441 * parse.yacc: merged in Chris' changes to dekludge the parser.
16443 1995-04-11 00:38 millert
16445 * logging.c: send_mail() was calling find_path() which is wrong
16446 since find_path() stores cmnd in a static var. Anyhow, it
16447 doesn't make much sense since MAILER should always be fully
16450 1995-04-10 19:51 millert
16452 * sample.sudoers: added User_Alias stuff
16454 1995-04-10 19:50 millert
16456 * aclocal.m4: SUDO_NEXT now looks for
16457 /usr/lib/NextStep/software_version
16459 1995-04-10 19:50 millert
16461 * RUNSON: added DEC UNIX 3.0 w/ gcc
16463 1995-04-10 19:49 millert
16465 * visudo.c: Exit was being used in places where exit should be used
16467 1995-04-10 19:44 millert
16469 * sudoers: added "User alias specification"
16471 1995-04-10 18:04 millert
16473 * parse.yacc: fixed probs caused by making nslots and naliases a
16476 1995-04-10 15:09 millert
16478 * RUNSON: added KSR, upped rev to 1.3.1b2
16480 1995-04-10 15:07 millert
16482 * logging.c, parse.yacc: 1024 -> BUFSIZ
16484 1995-04-10 15:05 millert
16486 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
16487 to appease lsearch on 64-bit machines
16489 1995-04-09 19:30 millert
16491 * TODO: did a bunch of things and added a bunch :-)
16493 1995-04-09 19:30 millert
16497 1995-04-09 19:24 millert
16499 * visudo.man: closer to BSD manpage style
16501 1995-04-09 19:15 millert
16503 * sudo.man: closer to standard BSD man format
16505 1995-04-09 18:58 millert
16507 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
16508 sudo.h, version.h, emul/search.h: added RCS id
16510 1995-04-09 17:35 millert
16512 * sudo.h: removed crufty #defines that are no longer used
16514 1995-04-09 17:13 millert
16516 * BUGS: fixed a bug
16518 1995-04-09 17:12 millert
16520 * sudo.man: updated based on sudo changes
16522 1995-04-09 17:11 millert
16524 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
16525 keyword as well as a NAME or ALIAS
16527 1995-04-09 17:11 millert
16531 1995-04-09 17:04 millert
16533 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
16535 1995-04-09 15:24 millert
16537 * aclocal.m4: fixed bug with full void impl check
16539 1995-04-08 23:11 millert
16541 * parse.yacc: fixed User_Alias supoprt
16543 1995-04-08 22:27 millert
16545 * parse.yacc: added stubs for User_Alias support
16547 1995-04-08 22:27 millert
16549 * sudo.c: now sets removes # bogus interfaces from num_interfaces
16551 1995-04-08 22:26 millert
16553 * parse.lex: added User_Alias support
16555 1995-04-07 21:10 millert
16557 * Makefile.in: removed extraneous TODO
16559 1995-04-07 19:48 millert
16561 * visudo.c: ntwk_matches -> addr_matches
16563 1995-04-07 15:38 millert
16565 * parse.yacc: ntwk_matches -> addr_matches
16567 1995-04-07 15:37 millert
16569 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
16570 inet_network() (which expects octet boundaries) fixes for OSF
16571 (sizeof(int) != sizeof(long))
16573 1995-04-07 15:08 millert
16575 * sudo.c: took out debugging info
16577 1995-04-06 23:45 millert
16579 * aclocal.m4: OS was being set to unknown before non-uname based
16580 host checks. This caused no checks to happen since $OS was not
16583 1995-04-06 23:30 millert
16585 * sudo.c: fixed loading of interfaces struct still has debugging
16588 1995-04-06 22:23 millert
16590 * parse.c: fixed typo
16592 1995-04-06 16:17 millert
16594 * Makefile.in: ++version
16596 1995-04-06 16:16 millert
16600 1995-04-06 16:16 millert
16602 * visudo.c: removed extraneous extern decl of "top
16604 1995-04-06 16:14 millert
16606 * visudo.c: now zeros "top"
16608 1995-04-06 16:13 millert
16610 * parse.yacc: removed parser_cleanup (no need for it now)
16612 1995-04-06 16:13 millert
16614 * parse.lex: now calls reset_aliases() directly
16616 1995-04-04 18:21 millert
16618 * OPTIONS: added a sentence to SECURE_PATH description
16620 1995-04-04 18:17 millert
16622 * parse.c: fixed my stupid bug where I used NAMLEN on something I
16623 wanted to just get the name from. argh.
16625 1995-04-03 16:58 millert
16627 * lsearch.c: fixed argument order of memmove() that i hosed when
16628 converting from bcopy(). arghh.
16630 1995-04-03 15:33 millert
16632 * Makefile.in: finally fixed DISTFILES line
16634 1995-04-03 15:21 millert
16636 * Makefile.in: tabs -> spaces
16638 1995-04-03 15:15 millert
16640 * Makefile.in: added missing files to DISTFILES
16642 1995-04-03 14:50 millert
16644 * Makefile.in: SUPPORTED -> RUNSON
16646 1995-04-01 03:12 millert
16650 1995-04-01 01:54 millert
16652 * RUNSON: updated for pl5b1 release
16654 1995-04-01 01:53 millert
16656 * BUGS, TODO: updated
16658 1995-04-01 01:52 millert
16660 * check.c: fixed bug where if you hit return at first sudo prompt
16661 it would still log as a failure
16663 1995-04-01 01:29 millert
16667 1995-04-01 01:25 millert
16669 * aclocal.m4: better test for bogus void * implementation
16671 1995-03-31 20:33 millert
16673 * logging.c: added PASSWORDS_NOT_CORRECT
16675 1995-03-31 20:32 millert
16677 * check.c: added PASSWORDS_NOT_CORRECT stuff]
16679 1995-03-31 20:30 millert
16681 * sudo.h: added PASSWORDS_NOT_CORRECT
16683 1995-03-31 19:16 millert
16685 * tgetpass.c: moved pathnames.h
16687 1995-03-31 19:16 millert
16689 * sudo.c: removed some unused vars and fixed up uid2str
16691 1995-03-31 19:15 millert
16693 * putenv.c: moved compat.h
16695 1995-03-31 19:14 millert
16697 * getcwd.c, getwd.c: added pathnames.h
16699 1995-03-31 18:18 millert
16701 * parse.yacc: fixed a typo I introduced in the last checkin :-(
16703 1995-03-31 18:11 millert
16705 * parse.lex: can't have #ifdef's where N is defined so just do this
16706 the broken way for AIX
16708 1995-03-31 18:08 millert
16710 * parse.yacc: better hack from Chris (but still a hack)
16712 1995-03-31 18:05 millert
16714 * parse.lex: stupid hack for broken aix lex
16716 1995-03-31 17:47 millert
16718 * tgetpass.c: now includes compat.h
\ 6
16720 1995-03-31 17:27 millert
16722 * visudo.c: now includes fcntl.h
16724 1995-03-31 17:27 millert
16726 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
16728 1995-03-31 16:12 millert
16730 * parse.yacc: dirty hack to fix parser bug. i don't really like
16731 this but it works for now...
16733 1995-03-31 16:12 millert
16735 * sudo.c: uid2str is now static like the prototype says
16737 1995-03-29 23:48 millert
16739 * RUNSON: Initial revision
16741 1995-03-29 23:47 millert
16743 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
16745 1995-03-29 23:46 millert
16747 * sudo.c: check_sudoers now returns an error code and sudo calls
16748 inform_user and log_error based on the return value.
16750 1995-03-29 23:45 millert
16752 * logging.c, sudo.h: added entries for new errors
16754 1995-03-29 23:03 millert
16756 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
16759 1995-03-29 22:52 millert
16761 * Makefile.in: took out testsudoers
\ 6
16763 1995-03-29 22:36 millert
16765 * sudo.c: now explicately checks that it is setuid root
16767 1995-03-29 22:28 millert
16769 * sudo.c: If a user has no passwd entry sudo would segv (writing to
16770 a garbage pointer). Now allocate space before writing :-)
16772 1995-03-29 22:06 millert
16774 * configure.in: reordered AC_CHECK_FUNCS
16776 1995-03-29 22:06 millert
16778 * config.h.in: fixed memset macro
16780 1995-03-29 21:47 millert
16782 * logging.c: bzero -> memset when a parse error is logged the line
16783 number of the error is now logged too
16785 1995-03-29 21:46 millert
16787 * tgetpass.c, visudo.c: bzero -> memset
16789 1995-03-29 21:46 millert
16791 * INSTALL: added Sunos to blurb about c2 security
16793 1995-03-29 21:45 millert
16795 * configure.in: added a SUN4 define for C2 security
16797 1995-03-29 21:44 millert
16799 * config.h.in: bcopy -> memmove bzero -> memset
16801 1995-03-29 21:43 millert
16803 * lsearch.c: bcopy -> memmove char * -> VOID *
16805 1995-03-29 21:30 millert
16807 * check.c: added support for sunos with C2 security
16809 1995-03-29 21:12 millert
16811 * OPTIONS, options.h: reordered
16813 1995-03-29 21:12 millert
16815 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
16817 1995-03-29 21:12 millert
16819 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
16821 1995-03-29 21:12 millert
16823 * config.h.in: added _SUDO_PATH_LOGFILE
16825 1995-03-29 21:11 millert
16827 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
16828 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
16829 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
16831 1995-03-29 18:17 millert
16833 * TROUBLESHOOTING: Initial revision
16835 1995-03-29 17:59 millert
16837 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
16838 load_global() to work around a problem is trusted hpux shadow
16841 1995-03-29 17:41 millert
16843 * parse.yacc: backed out a change in malloc/realloc
16845 1995-03-29 17:38 millert
16847 * parse.yacc: now include stdlib.h
16849 1995-03-29 17:22 millert
16851 * visudo.c: now do an freopen() of the stmp file so that yyin will
16852 always point to the same thing. This is important for flex since
16853 we are doing a YY_NEWFILE
16855 1995-03-29 17:20 millert
16857 * parse.yacc: replaced yywrap() with parser_cleanup() since
16858 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
16861 1995-03-29 17:18 millert
16863 * parse.lex: now have a rule that matches anything that doesn't
16864 match an explicite rule. well, you know what i mean (. matches
16865 anything not yet matched). However, this means that there is
16866 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
16867 So, yywrap has moved into parse.lex and it calls parser_cleanup()
16868 which is most of the old yywrap() sigh.
16870 1995-03-29 17:17 millert
16872 * SUPPORTED: no longer used
16874 1995-03-29 16:13 millert
16876 * getcwd.c, getwd.c: moved compat.h to be the last include file
16878 1995-03-29 16:11 millert
16880 * parse.yacc: fixed type of aliascmp() args
16882 1995-03-29 15:58 millert
16884 * find_path.c: NULL -> '\0'
16886 1995-03-29 15:42 millert
16888 * parse.yacc: added casts to lfind and lsearch args for irix
16890 1995-03-29 08:20 millert
16892 * Makefile.in: bsdinstall -> install-sh
16894 1995-03-29 08:20 millert
16896 * INSTALL: added info about make realclean
16898 1995-03-29 08:17 millert
16900 * Makefile.in: updated VERSION added dependencies for visudo.cat
16902 1995-03-29 08:17 millert
16904 * version.h: -> pl5b1
16906 1995-03-29 08:16 millert
16908 * sudo.c: took out -l
16910 1995-03-29 00:03 millert
16912 * Makefile.in: now there is a real visudo.man and visudo.cat
16914 1995-03-28 23:54 millert
16916 * sudo.man: took out visudo stuff
16918 1995-03-28 23:54 millert
16920 * visudo.man: Initial revision
16922 1995-03-28 23:12 millert
16924 * parse.c, parse.lex, parse.yacc: updated copyright
16926 1995-03-28 23:05 millert
16928 * README: updated for pl5
16930 1995-03-28 20:02 millert
16932 * sudo.man: updated Nieusma & Hieb email addresses
16934 1995-03-28 19:57 millert
16936 * INSTALL: updated to include options.h and OPTIONS
16938 1995-03-28 19:35 millert
16940 * CHANGES, TODO: updated
16942 1995-03-28 19:35 millert
16944 * BUGS: eliminated bug #1 (yay)
16946 1995-03-28 19:31 millert
16948 * configure.in: sunos no longer gets linked statically
16950 1995-03-28 18:58 millert
16952 * parse.lex: prototype now uses __P()
16954 1995-03-28 18:49 millert
16956 * parse.lex: make fill() non-ansi
16958 1995-03-28 15:26 millert
16960 * parse.c: made -v (validate) work
16962 1995-03-28 15:26 millert
16964 * logging.c: now gives host
16966 1995-03-28 10:34 millert
16968 * find_path.c: don't check for execute/statable if fq or relative
16971 1995-03-28 01:07 millert
16973 * parse.c: added a cast
16975 1995-03-28 00:49 millert
16977 * visudo.c: now include ctype.h for islower and tolower macros
16979 1995-03-28 00:48 millert
16981 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
16983 1995-03-28 00:48 millert
16985 * sudo.c: moved a set of parens
16987 1995-03-28 00:48 millert
16989 * strdup.c: now include compat.h
16991 1995-03-28 00:47 millert
16993 * parse.yacc: now cast malloc & realloc return vals added search
16994 for HAVE_LSEARCH now use strcmp if no strcasecmp available
16996 1995-03-28 00:46 millert
16998 * lsearch.c, emul/search.h: void * -> VOID *
17000 1995-03-28 00:45 millert
17002 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17003 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17005 1995-03-28 00:44 millert
17007 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17009 1995-03-28 00:44 millert
17011 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17012 echo and results to most SUDO_* macros
17014 1995-03-28 00:43 millert
17016 * Makefile.in: no more -I.
17018 1995-03-28 00:22 millert
17020 * configure.in: various 1.x ro 2.x autoconf changes now check for
17021 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17022 check for fully woorking void implementation
17024 1995-03-28 00:02 millert
17026 * Makefile.in: added lsearch & search.h visudo links into
17029 1995-03-27 23:43 millert
17031 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17033 1995-03-27 23:40 millert
17035 * visudo.c: whatnow_help was prototyped to be static be was not
17038 1995-03-27 21:15 millert
17040 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17041 used) added check for dirent/dir/ndir.h
17043 1995-03-27 21:09 millert
17045 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17047 1995-03-27 20:38 millert
17049 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17051 1995-03-27 20:23 millert
17053 * emul/search.h, lsearch.c: Initial revision
17055 1995-03-27 18:26 millert
17057 * parse.yacc: eliminated bison warnings
17059 1995-03-27 17:10 millert
17061 * parse.lex: added missing case
17063 1995-03-27 17:04 millert
17065 * visudo.c: now iincludes signal.h
17067 1995-03-27 15:16 millert
17069 * parse.yacc: only clear data structures on a parse error
17071 1995-03-27 15:01 millert
17073 * visudo.c: whatnow() now gives help on invalid input
17075 1995-03-27 14:54 millert
17077 * visudo.c: added a whatnow() function (sort of like mh)
17079 1995-03-27 14:53 millert
17081 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17082 by calling reset_aliases() and clearing top took reset stuff out
17083 of yyerror() since it doesn't beling there (and doesn't work
17084 anyway). errorlineno is now initially set to -1 so we can set it
17085 to the first error that occurrs (it was getting set to the last)
17087 1995-03-27 14:53 millert
17089 * parse.lex: added a void cast
17091 1995-03-27 13:26 millert
17093 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17095 1995-03-26 01:33 millert
17097 * sudo.c, sudo.h: removed ocmnd
17099 1995-03-26 01:19 millert
17101 * sudo.h: no more sudo_realpath() and find_path() changed params
17103 1995-03-26 01:19 millert
17105 * sudo.c: find_path() changed since no more realpath()
17107 1995-03-26 01:18 millert
17109 * parse.yacc: on error, errorlineno is set to the line where the
17110 error occurred added kill_aliases() to free the aliases struct
17111 now clean up in yyerror() so we can reparse cleanly
17113 1995-03-26 01:17 millert
17115 * logging.c: changed to use new find_path()
17117 1995-03-26 01:17 millert
17119 * options.h, parse.c: no more USE_REALPATH
17121 1995-03-26 01:16 millert
17123 * find_path.c: removed all the realpath() stuff
17125 1995-03-26 01:16 millert
17127 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17129 1995-03-26 01:12 millert
17131 * visudo.c: now works correctly with utk parser
17133 1995-03-26 00:04 millert
17135 * goodpath.c: Initial revision
17137 1995-03-25 23:23 millert
17139 * sudo_realpath.c: eliminated a compiler warning
17141 1995-03-25 21:56 millert
17143 * sudo.c: elinated compiler warning
17145 1995-03-25 20:40 millert
17147 * sudo_realpath.c: added sudo_goodpath()
17149 1995-03-25 20:40 millert
17151 * sudo.h: added prototype for sudo_goodpath
17153 1995-03-25 20:39 millert
17155 * parse.c: added support for /sys/dir.h
17157 1995-03-25 20:39 millert
17159 * options.h: USE_REALPATH turned off
17161 1995-03-25 20:39 millert
17163 * find_path.c: added calls to sudo_goodpath()
17165 1995-03-25 20:39 millert
17167 * configure.in: added check for dirent.h
17169 1995-03-25 20:38 millert
17171 * config.h.in: added HAVE_DIRENT_H
17173 1995-03-25 19:27 millert
17175 * configure.in: added in linux shadow pass stuff
\ 6
17177 1995-03-24 14:43 millert
17179 * visudo.c: added back host, user, cmnd, parse_error
17181 1995-03-24 14:19 millert
17183 * visudo.c: added in utk changes plus some minor cosmetic changes
17185 1995-03-24 14:17 millert
17187 * sudo.c, sudo_realpath.c: added void casts for printf's
17189 1995-03-24 14:17 millert
17191 * options.h: added a define of USE_REALPATH
17193 1995-03-24 14:17 millert
17195 * configure.in: there is no more visudoers/Makefile
17197 1995-03-24 14:16 millert
17199 * Makefile.in: added in utk changes (visudo is now built from the
17202 1995-03-24 14:15 millert
17204 * find_path.c: added (void) casts to printf's
17206 1995-03-23 22:32 millert
17208 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17211 1995-03-22 23:13 millert
17213 * find_path.c: now check to see that what we are trying to run is a
17214 file (or a link to a file, we do a stat(2) so there is no diff)
17216 1995-03-13 15:56 millert
17220 1995-03-13 15:56 millert
17222 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17225 1995-03-13 15:11 millert
17227 * sudo.man: added myself as maintainer
17229 1995-02-16 23:31 millert
17231 * sudo.c: changed setegid -> setgid
17233 1995-02-06 17:43 millert
17235 * configure.in: fixed the test for irix 5.x to skip bad libs
17237 1995-02-06 17:43 millert
17239 * aclocal.m4: now initialize OS and OSREV
17241 1995-01-26 20:52 millert
17243 * configure.in: irix5 changes
17245 1995-01-26 20:28 millert
17247 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17248 for autoconf 2.1 compatibility
17250 1995-01-18 19:49 millert
17252 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17253 do the righ thing wrt yyrestart (grrrr)
17255 1995-01-16 18:44 millert
17257 * Makefile.in: added visudoers/compat.h to DISTFILES
17259 1995-01-16 17:01 millert
17261 * configure.in: fixed an echo
17263 1995-01-16 16:36 millert
17265 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17268 1995-01-16 16:35 millert
17270 * sudo.h: added ocmnd extern adjusted find_path() prototype
17272 1995-01-16 16:34 millert
17274 * parse.c: cmndcmp() now takes 3 arguments and checks against the
17275 qualified as well as the unqualified pathname. more code that
17276 should use cmndcmp() but did not, now does
17278 1995-01-16 16:34 millert
17280 * options.h: added to a comment
17282 1995-01-16 16:33 millert
17284 * logging.c: changed to use new find_path() parameter passing
17286 1995-01-16 16:32 millert
17288 * find_path.c: find_path() now takes 2 copyout parameters (one for
17289 the qualified pathname and one for the unqualified pathname).
17290 The third parameter may be NULL.
17292 1995-01-16 16:31 millert
17294 * configure.in: no longer munge pathnames.h
17296 1995-01-16 16:30 millert
17298 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17299 defined in config.h) as a result, pathnames.h does not need to be
17300 run through configure and the user can override the configured
17303 1995-01-16 16:30 millert
17305 * config.h.in: added _SUDO_PATH_* entries
17307 1995-01-16 16:30 millert
17309 * aclocal.m4: _PATH* -> _SUDO_PATH_*
17311 1995-01-16 16:28 millert
17313 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17316 1995-01-13 12:52 millert
17318 * compat.h: removed extraneous #endif
17320 1995-01-13 12:48 millert
17322 * aclocal.m4: added SUDO_PROG_MV
17324 1995-01-13 12:47 millert
17326 * configure.in: added SUDO_PROG_MV added riscos and isc os types
17327 took out -DSHORT_MESSAGE from --with-csops since it is now the
17330 1995-01-13 12:46 millert
17332 * sudo.c: move the include of id.h to compat.h now includes
17335 1995-01-13 12:45 millert
17337 * sudo.h: moved compatibility #defines to compat.h
17339 1995-01-13 12:45 millert
17341 * pathnames.h.in: added _PATH_MV
17343 1995-01-13 12:43 millert
17345 * config.h.in: move __P to compat.h
17347 1995-01-13 12:39 millert
17349 * getcwd.c, getwd.c, putenv.c: now includes compat.h
17351 1995-01-13 12:39 millert
17353 * compat.h: Initial revision
17355 1995-01-11 19:11 millert
17357 * sudo.h: pull user-configurable stuff out and put in options.h
17359 1995-01-11 18:43 millert
17361 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17362 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17365 1995-01-11 18:41 millert
17367 * Makefile.in: added visudoers/options.h
17369 1995-01-11 18:40 millert
17371 * options.h, OPTIONS: Initial revision
17373 1995-01-11 18:39 millert
17375 * Makefile.in: added OPTIONS and options.h
17377 1995-01-11 18:36 millert
17379 * logging.c: changed #ifdef's to use LOGGING and
17380 SLOG_SYSLOG/SLOG_FILE
17382 1995-01-11 11:02 millert
17384 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17386 1994-12-17 18:18 millert
17388 * visudo.c: now only do Editor +line_num if line_num != 0
17390 1994-12-15 21:06 millert
17392 * visudo.c: now use mv if rename(2) fails
17394 1994-12-15 20:32 millert
17396 * BUGS: added a visudo bug
17398 1994-12-15 19:46 millert
17400 * check.c: expanded comment
17402 1994-11-12 18:33 millert
17404 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17407 1994-11-09 19:49 millert
17409 * sudo.c: added mips & isc support
17411 1994-11-09 19:49 millert
17413 * parse.c: added support for non-root owned sudoers file
17415 1994-11-09 19:48 millert
17417 * check.c: added exempt group support
17419 1994-11-09 19:47 millert
17421 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
17422 non-root own sudoers file added exempt group support added isc
17425 1994-11-09 19:46 millert
17427 * visudo.c: now copy sudoers to temp file via read/write (not
17428 stdio) now chown new sudoers file to SUDOERS_OWNER
17430 1994-11-07 20:40 millert
17432 * configure.in: added skey support
17434 1994-11-07 20:39 millert
17436 * sudo.h: fixed typo added set_perms support added skey support
17437 added seteuid()/setegid() emulation for AIX
17439 1994-11-07 20:38 millert
17441 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
17442 owned by root nread/write by only root
17444 1994-11-07 20:38 millert
17446 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
17448 1994-11-07 20:38 millert
17450 * check.c: be_* -> set_perms() added skey support
17452 1994-11-06 18:59 millert
17454 * Makefile.in: ++version
17456 1994-11-06 18:59 millert
17460 1994-10-21 13:16 millert
17462 * sudo.c: now sets IFS
17464 1994-10-21 12:02 millert
17466 * insults.h: fixed typo
17468 1994-10-15 15:48 millert
17470 * config.h.in: added HAVE_SKEY
17472 1994-10-04 13:00 millert
17476 1994-10-04 12:57 millert
17478 * Makefile.in: ++version
17480 1994-10-04 12:57 millert
17484 1994-10-04 12:56 millert
17486 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
17488 1994-10-04 12:56 millert
17490 * configure.in: added function check for tcgetattr(3)
17492 1994-10-04 12:55 millert
17494 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
17496 1994-10-04 12:53 millert
17498 * config.h.in: added check for tcgetattr
17500 1994-09-26 17:38 millert
17504 1994-09-22 13:30 millert
17506 * parse.lex: now only include unistd.h for linux
17508 1994-09-21 14:29 millert
17510 * Makefile.in: added visudo.8 generation
17512 1994-09-21 14:07 millert
17514 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
17516 1994-09-20 19:39 millert
17520 1994-09-20 19:39 millert
17524 1994-09-20 19:38 millert
17526 * README: added mailing list info
17528 1994-09-20 19:37 millert
17530 * parse.yacc: now use sudolineno instead of yylineno fixed bison
17533 1994-09-20 19:37 millert
17535 * configure.in: now use -no_library_replacement for osf don't make
17536 a static binary for hpux >= 9.0
17538 1994-09-20 19:21 millert
17540 * tgetpass.c: added string.h/strings.h inclusion
17542 1994-09-20 19:21 millert
17544 * config.h.in: added ssize_t def
17546 1994-09-20 19:18 millert
17548 * parse.lex: added inclusion of string.h/strings.h
17550 1994-09-20 18:48 millert
17552 * aclocal.m4: fixed uname | sed (needed to quote the '[')
17554 1994-09-20 18:42 millert
17556 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
17559 1994-09-20 18:13 millert
17561 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
17564 1994-09-20 18:10 millert
17568 1994-09-20 17:52 millert
17570 * parse.c: added code to support command listings
17572 1994-09-20 17:36 millert
17574 * sudo.c: added code for -l flag
17576 1994-09-20 17:35 millert
17578 * sudo.man: fixed typo added info for -l flag
17580 1994-09-20 14:45 millert
17582 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
17584 1994-09-20 14:45 millert
17586 * aclocal.m4: added SUDO_SSIZE_T
17588 1994-09-20 14:44 millert
17590 * sudo.h: added MODE_LIST
17592 1994-09-20 14:43 millert
17594 * configure.in: added AC_SSIZE_T
17596 1994-09-19 20:53 millert
17598 * find_path.c, sudo_realpath.c: readlink() is now declared as
17601 1994-09-19 20:44 millert
17603 * configure.in: added -laud for OSF c2
17605 1994-09-02 15:55 millert
17607 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
17608 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
17609 sudo-bugs@cs.colorado.edu
17611 1994-09-02 15:54 millert
17613 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
17614 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
17615 sudo_setenv.c, tgetpass.c, version.h: changed
17616 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
17618 1994-09-01 15:56 millert
17620 * Makefile.in: ++version
17622 1994-09-01 15:55 millert
17626 1994-09-01 15:55 millert
17628 * logging.c: added host to alertmail messages
17630 1994-09-01 15:55 millert
17632 * CHANGES, TODO: udpated
17634 1994-09-01 15:26 millert
17636 * logging.c: fixed logging problem where mail would not say which
17639 1994-09-01 13:45 millert
17641 * configure.in: added -laud for gcc if osf & c2
17643 1994-09-01 13:39 millert
17645 * check.c: moved set_auth_parameters to sudo.c
17647 1994-09-01 13:38 millert
17649 * sudo.c: added set_auth_parameters for osf
17651 1994-09-01 13:22 millert
17653 * configure.in: cleaned up -static stuff
17655 1994-09-01 13:15 millert
17657 * Makefile.in: ++version
17659 1994-09-01 13:15 millert
17663 1994-09-01 13:15 millert
17665 * sudo.c: changed setenv() to sudo_setenv()
17667 1994-09-01 13:12 millert
17669 * check.c: fixed osf problem
17671 1994-08-31 22:17 millert
17673 * configure.in: added OSF C2 stuff
17675 1994-08-31 22:00 millert
17679 1994-08-31 21:56 millert
17681 * check.c: added osf auth support & removed some extra spaces
17683 1994-08-31 21:52 millert
17685 * INSTALL, SUPPORTED: added osf C2 stuff
17687 1994-08-31 19:52 millert
17689 * TODO: added 2 suggestions
17691 1994-08-31 19:33 millert
17693 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
17695 1994-08-31 18:48 millert
17699 1994-08-30 18:31 millert
17701 * version.h: 1.3.1final
17703 1994-08-30 18:30 millert
17705 * Makefile.in: added HISTORY
17707 1994-08-30 18:30 millert
17709 * sudo.man: mention HISTPRY file
17711 1994-08-30 18:30 millert
17713 * sudo.c: use sizeof instead of a constant in 1 place
17715 1994-08-30 18:30 millert
17717 * parse.yacc: added unistd.h
17719 1994-08-30 18:29 millert
17721 * parse.lex: added unistd.h
17723 1994-08-30 18:27 millert
17727 1994-08-30 18:15 millert
17729 * HISTORY: Initial revision
17731 1994-08-17 12:45 millert
17735 1994-08-17 12:39 millert
17739 1994-08-17 12:36 millert
17741 * sudo_setenv.c: added unistd.h include
17743 1994-08-16 15:46 millert
17745 * sudo.c: added sys/time.h for AIX
17747 1994-08-14 21:22 millert
17749 * configure.in: added check for -lsocket and sys/sockio.h
17751 1994-08-14 21:21 millert
17753 * config.h.in: took out libshadow check and added in sys/sockio.h
17756 1994-08-14 21:21 millert
17758 * sudo.c: now include sockio.h instead of ioctl.h if it exists
17759 "sudo -" now gets a better error message
17761 1994-08-14 20:47 millert
17763 * sample.sudoers: now has a dir and subnet entry
17765 1994-08-13 18:15 millert
17767 * sudo.c: removed if_ether.h
17769 1994-08-13 17:16 millert
17771 * TODO: added an item
17773 1994-08-13 17:15 millert
17775 * sudo.man: added network and ip addresses to man page
17777 1994-08-13 17:09 millert
17779 * sudo.c: no error if can't get interfaces or netmask since
17780 networking may not be in the kernel.
17782 1994-08-13 17:08 millert
17784 * parse.c: nwo check for interfaces == NULL
17786 1994-08-12 21:22 millert
17788 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
17789 to fail if the last entry in the spec failed (ie: it was only
17790 looking at the last entry). CLeaned things up by adding the
17791 cmndcmp() function--all neat & tidy
17793 1994-08-12 21:21 millert
17795 * CHANGES: added one
17797 1994-08-11 23:42 millert
17799 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
17801 1994-08-11 21:58 millert
17803 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
17806 1994-08-11 21:58 millert
17808 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
17809 visudo.c: added include of netinet/in.h
17811 1994-08-11 21:57 millert
17815 1994-08-11 21:57 millert
17817 * sudo.h: added interfaces global
17819 1994-08-11 21:56 millert
17821 * parse.c: now uses new interfaces global
17823 1994-08-11 21:56 millert
17825 * sudo.c: now ip addresses are gleaned fw/o dns
17827 1994-08-10 19:21 millert
17829 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
17831 1994-08-10 19:21 millert
17833 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
17836 1994-08-10 19:20 millert
17838 * sudo.h: added ip_addrs def added load_ip_addrs prototype
17840 1994-08-08 16:03 millert
17844 1994-08-08 15:57 millert
17846 * Makefile.in: removed multiple entries in DISTFILES
17848 1994-08-08 13:05 millert
17850 * visudo.c: ansified the !STDC_HEADERS decls
17852 1994-08-08 13:05 millert
17854 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
17855 malloc decl if gnuc
17857 1994-08-08 13:04 millert
17859 * sudo.c: can't use getopt(3) since it munges args to the command
17860 to be run as root don't do malloc decl if gnuc
17862 1994-08-08 00:41 millert
17864 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
17865 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
17868 1994-08-08 00:27 millert
17870 * getcwd.c, getwd.c: added missing paren
17872 1994-08-08 00:23 millert
17874 * Makefile.in: added putenv.c to DISTFILES
17876 1994-08-08 00:08 millert
17878 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
17879 not defined now can count on putenv() being there
17881 1994-08-08 00:08 millert
17883 * sudo_realpath.c: took out errno decl since sudo.h does it for us
17884 fixed up a next cc warning added params to func decls when
17885 STDC_HEADERS is not defined
17887 1994-08-08 00:07 millert
17889 * sudo.h: took out environ extern added local declaratio of
17890 putenv() if local version is needed
17892 1994-08-08 00:05 millert
17894 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
17895 func decls when STDC_HEADERS is not defined
17897 1994-08-08 00:04 millert
17899 * config.h.in: added memcpy check check to see that ansi vs bsd
17900 macros are ntot already defiend before defining (ie: avoid
17903 1994-08-08 00:03 millert
17905 * configure.in: removed fluff setenv check plus check w/ replace
17906 for putenv if also no setenv
17908 1994-08-08 00:01 millert
17910 * putenv.c: Initial revision
17912 1994-08-06 19:19 millert
17914 * sudo_setenv.c: Initial revision
17916 1994-08-06 19:19 millert
17918 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
17920 1994-08-06 19:19 millert
17922 * sudo.c: now use sudo_setenvc
17924 1994-08-06 19:18 millert
17926 * configure.in: added puteenv and setenv, removed realpath
17928 1994-08-06 19:18 millert
17930 * config.h.in: added putenv & setenv
17932 1994-08-06 19:18 millert
17934 * Makefile.in: added sudo_setenv
17936 1994-08-06 19:16 millert
17940 1994-08-05 19:43 millert
17942 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
17945 1994-08-05 19:43 millert
17947 * Makefile.in: added MAN_POSTINSTALL
17949 1994-08-05 19:43 millert
17953 1994-08-05 19:10 millert
17955 * sudo.man: added SUDO_* plus new options
17957 1994-08-05 19:10 millert
17959 * CHANGES: added one
17961 1994-08-05 19:07 millert
17963 * configure.in: took out shadow lib
17965 1994-08-05 18:35 millert
17969 1994-08-05 17:52 millert
17971 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
17973 1994-08-05 17:49 millert
17975 * Makefile.in: support for installing a cat page instead of a man
17978 1994-08-05 17:48 millert
17980 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
17981 looks for nroff to determine whether or not to install a cat or
17984 1994-08-05 17:48 millert
17986 * config.h.in: added HAVE_FLEX
17988 1994-08-05 16:14 millert
17990 * sudo.c: not set ret to MODE_RUN initially
17992 1994-08-05 16:12 millert
17994 * find_path.c: made command (and therefor cmnd dynamically
17997 1994-08-04 20:25 millert
18001 1994-08-04 20:24 millert
18005 1994-08-04 20:24 millert
18007 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18009 1994-08-04 20:24 millert
18011 * sudo.h: added MODE_ removed validate_only and added
18014 1994-08-04 20:22 millert
18016 * sudo.c: usage() now takes an int (exit value) added parse_args()
18017 to parse command line arguments moved call to find_path() from
18018 load_globals to new function load_cmnd() removed validate_only
18019 global -- now use the concept of "modes" added -h and -k options
18021 1994-08-04 20:21 millert
18023 * parse.c: no longer use global validate_only now checks for
18024 command called "validate" removed check for non-fully qualified
18025 commands since that is done by find_path
18027 1994-08-04 20:20 millert
18029 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18031 1994-08-04 20:17 millert
18033 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18036 1994-08-04 20:17 millert
18038 * check.c: check_timestamp no longer runs reminder(), it is implied
18039 in the return val added remove_timestamp()
18041 1994-08-04 20:16 millert
18045 1994-08-04 16:38 millert
18049 1994-08-04 16:38 millert
18051 * sudo_realpath.c: took out old_errno
18053 1994-08-04 16:37 millert
18057 1994-08-03 12:08 millert
18059 * logging.c: moved send_mail to after syslog
18061 1994-08-02 22:41 millert
18063 * sudo.c: now set SUDO_ envariables
18065 1994-08-01 13:40 millert
18069 1994-08-01 13:39 millert
18071 * sudo_realpath.c: now print error if chdir fails
18073 1994-08-01 13:39 millert
18075 * find_path.c: removed an XXX
18077 1994-07-25 20:40 millert
18081 1994-07-25 20:36 millert
18083 * configure.in: no more static binaries for aix
18085 1994-07-25 18:37 millert
18087 * INSTALL: fixed typo
18089 1994-07-25 18:33 millert
18091 * sudo_realpath.c: took out stuff not needed for sudo now does
18092 be_root/be_user itself now uses cwd global
18094 1994-07-25 18:32 millert
18098 1994-07-25 18:31 millert
18100 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18102 1994-07-25 18:26 millert
18104 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18106 1994-07-25 18:25 millert
18108 * find_path.c: now use sudo_realpath()
18110 1994-07-25 18:25 millert
18112 * config.h.in: took out realpth() stuff since we now use
18115 1994-07-25 18:25 millert
18117 * configure.in: ultrix enhanced sec
18119 1994-07-25 18:25 millert
18121 * SUPPORTED: added ultrix enhanced sec.
18123 1994-07-25 18:24 millert
18127 1994-07-25 18:21 millert
18129 * check.c: ultrix enhanced security suport
18131 1994-07-25 18:20 millert
18133 * Makefile.in: added sudo_realpath.c
18135 1994-07-25 18:18 millert
18139 1994-07-25 14:28 millert
18141 * tgetpass.c: increased passwd len to 24 for c2 security
18143 1994-07-25 13:17 millert
18145 * BUGS: updated BUGS
18147 1994-07-15 11:49 millert
18149 * check.c: now use user global var
18151 1994-07-15 11:48 millert
18153 * configure.in: took out -ls
18155 1994-07-14 19:11 millert
18157 * configure.in: added AFS libs
18159 1994-07-14 17:45 millert
18161 * sudo.h: user is now a char * added epasswd
18163 1994-07-14 17:43 millert
18165 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18166 password) global made user dynamically allocated
18168 1994-07-14 17:43 millert
18170 * configure.in: added tzset test
18172 1994-07-14 17:43 millert
18174 * config.h.in: added HAVE_TZSET
18176 1994-07-14 17:42 millert
18178 * check.c: cleaned up encrypted passwd grab somewhat
18180 1994-07-14 12:34 millert
18182 * configure.in: fixed AFS typo
18184 1994-07-14 12:34 millert
18186 * INSTALL: added AFS not
18188 1994-07-14 12:34 millert
18192 1994-07-14 12:33 millert
18194 * logging.c: can now log to both syslog & a file
18196 1994-07-14 12:12 millert
18198 * sudo.h: added BOTH_LOGS
18200 1994-07-14 11:34 millert
18204 1994-07-14 11:32 millert
18206 * configure.in: --with-AFS
18208 1994-07-14 11:32 millert
18210 * config.h.in: added HAVE_AFS
18212 1994-07-14 11:31 millert
18214 * check.c: added afs changes
18216 1994-07-14 11:21 millert
18218 * sudo.h: removed AFS stuff :-)
18220 1994-07-14 11:19 millert
18222 * tgetpass.c: include sys/select for AIX
18224 1994-07-14 11:17 millert
18226 * sudo.h: added AFS
18228 1994-07-14 11:16 millert
18232 1994-07-07 14:45 millert
18234 * SUPPORTED, CHANGES: updated
18236 1994-07-07 14:44 millert
18238 * logging.c: can now have MAILER undefined
18240 1994-07-07 14:37 millert
18242 * INSTALL: new sub-note about MAILER
18244 1994-07-06 23:11 millert
18246 * sudo.man: added blurb about password timeout
18248 1994-07-06 20:52 millert
18250 * configure.in: convex c2 changes
18252 1994-07-06 20:52 millert
18254 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18256 1994-07-06 20:51 millert
18258 * Makefile.in: added OSDEFS
18260 1994-07-06 20:46 millert
18262 * config.h.in: added spaces
18264 1994-07-06 20:08 millert
18266 * tgetpass.c: added a goto if fgets fails
18268 1994-07-06 20:08 millert
18270 * sudo.h: use __hpux not hpux convex c2 stuff
18272 1994-07-06 20:08 millert
18274 * sudo.c: use __hpux not hpux
18276 1994-07-06 20:08 millert
18278 * logging.c: convex c2 stuff
18280 1994-07-06 20:07 millert
18282 * config.h.in: define ansi-ish cpp os defines if non-ansi are
18283 defined for hpux & convex
18285 1994-07-06 20:07 millert
18287 * INSTALL: updated to say we support sonvex C2
18289 1994-07-06 20:05 millert
18291 * check.c: added convex c2 support
18293 1994-07-01 12:06 millert
18295 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18296 select() to timeout
18298 1994-06-29 17:04 millert
18300 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18302 1994-06-29 16:39 millert
18304 * tgetpass.c: now works + uses fgets()
18306 1994-06-28 18:25 millert
18308 * tgetpass.c: select doesn't seem to recognize a single '\n' as
18309 input waiting so we can;t use it, sigh.
18311 1994-06-26 16:38 millert
18313 * PORTING: updated tgetpass() blurb
18315 1994-06-26 16:35 millert
18317 * configure.in: added --with-getpass
18319 1994-06-26 16:35 millert
18321 * Makefile.in: added tgetpass stuff
18323 1994-06-26 15:25 millert
18325 * tgetpass.c: now uses stdio
18327 1994-06-26 15:17 millert
18331 1994-06-24 19:48 millert
18333 * PORTING: updated ,.
18335 1994-06-24 19:46 millert
18337 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18339 1994-06-24 19:45 millert
18341 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18343 1994-06-24 19:45 millert
18345 * check.c: added hpux C2 shit
18347 1994-06-24 19:45 millert
18349 * Makefile.in: took out tgetpass.*
18351 1994-06-24 19:45 millert
18353 * INSTALL: added C2 blurb
18355 1994-06-13 15:54 millert
18357 * configure.in: no termio(s) for ultrix since it is broken
18359 1994-06-13 15:41 millert
18361 * check.c: added a space (yeah, anal)
18363 1994-06-13 15:17 millert
18365 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18367 1994-06-08 14:34 millert
18369 * config.h.in: took out bsd signal stuff for irix
18371 1994-06-08 14:26 millert
18373 * visudo.c: comments in #endif
18375 1994-06-08 14:09 millert
18377 * configure.in: don't define BSD signals for irix
18379 1994-06-08 12:57 millert
18381 * TODO: did some...
18383 1994-06-08 12:57 millert
18387 1994-06-08 12:56 millert
18389 * realpath.c, sudo_realpath.c: took out unneeded code by changing
18390 where a strings was terminated
18392 1994-06-07 19:21 millert
18394 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18397 1994-06-07 17:40 millert
18399 * sudo.h: move __P to config.h
18401 1994-06-07 17:40 millert
18403 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18406 1994-06-07 17:40 millert
18408 * config.h.in: added __P
18410 1994-06-07 17:21 millert
18412 * config.h.in: added HAVE_FCHDIR
18414 1994-06-07 17:18 millert
18416 * strdup.c: now include stdio
18418 1994-06-07 14:55 millert
18420 * realpath.c, sudo_realpath.c: now works if no fchdir
18422 1994-06-07 14:55 millert
18424 * visudo.c: define SA_RESETHAND to null if not defined
18426 1994-06-07 14:54 millert
18428 * configure.in: added check & replace
18430 1994-06-06 20:05 millert
18432 * configure.in: took out -static for nextstep -- it doesn't work
18434 1994-06-06 19:59 millert
18436 * logging.c: moved #endif to where it belongs
18438 1994-06-06 19:54 millert
18440 * SUPPORTED: correction
18442 1994-06-06 19:42 millert
18444 * configure.in: now checks for strdup realpath getcwd bzero
18446 1994-06-06 19:31 millert
18448 * config.h.in: emulate bzero
18450 1994-06-06 16:57 millert
18452 * visudo.c: added posic signals
18454 1994-06-06 16:57 millert
18456 * tgetpass.c: bzero cast
18458 1994-06-06 16:57 millert
18460 * logging.c: added posix signals
18462 1994-06-06 16:56 millert
18464 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
18467 1994-06-06 16:56 millert
18469 * config.h.in: added posix signal stuff
18471 1994-06-06 16:56 millert
18473 * Makefile.in: added new srcs
18475 1994-06-06 12:53 millert
18477 * visudo.c: updated useag
18479 1994-06-06 12:39 millert
18481 * tgetpass.c: now uses posix signals
18483 1994-06-05 20:17 millert
18485 * PORTING: updated sto reflect major changes
18487 1994-06-05 20:05 millert
18489 * TODO, CHANGES: updated
18491 1994-06-05 20:04 millert
18493 * tgetpass.c: uses sysconf() if available
18495 1994-06-05 20:04 millert
18497 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
18499 1994-06-05 20:04 millert
18501 * realpath.c, sudo_realpath.c: for those w/o this in libc
18503 1994-06-05 20:03 millert
18505 * getcwd.c, getwd.c: Initial revision
18507 1994-06-05 20:03 millert
18509 * find_path.c: rewrote to use realpath(3) - nis now all my code
18511 1994-06-05 20:02 millert
18513 * config.h.in: added HAVE_REALPATH
18515 1994-06-05 20:02 millert
18517 * check.c: now use tgetpass
18519 1994-06-05 20:02 millert
18521 * Makefile.in: added LIBOBJS use tgetpass.c
18523 1994-06-05 18:55 millert
18525 * tgetpass.c: works now :-)
18527 1994-06-05 18:27 millert
18529 * tgetpass.c: Initial revision
18531 1994-06-05 17:17 millert
18533 * pathnames.h.in: added /dev/tty
18535 1994-06-04 17:12 millert
18537 * version.h: incremented
18539 1994-06-04 15:29 millert
18541 * sudo.c: always use getcwd
18543 1994-06-04 14:49 millert
18545 * config.h.in: added check for getwd
18547 1994-06-04 14:48 millert
18549 * configure.in: replace strdup & realpath & getcwd if missing
18551 1994-06-04 14:47 millert
18553 * pathnames.h.in: added _PATH_PWD
18555 1994-06-04 14:46 millert
18557 * aclocal.m4: added SUDO_PROG_PWD
18559 1994-06-04 14:37 millert
18561 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
18563 1994-06-03 11:31 millert
18565 * configure.in: quoted quare brackets
18567 1994-06-02 17:49 millert
18569 * sudo.c: no need to strdup() a constant
18571 1994-06-02 15:45 millert
18575 1994-06-02 15:44 millert
18577 * sudo.man: added validate
18579 1994-06-02 15:42 millert
18581 * sudo.c: added -v to usage
18583 1994-06-02 15:41 millert
18585 * parse.c, sudo.c, sudo.h: added validate_only stuff
18587 1994-05-29 21:29 millert
18589 * configure.in: now finds sed
18591 1994-05-29 21:28 millert
18593 * aclocal.m4: $OSREV is now an int
18595 1994-05-29 19:13 millert
18597 * configure.in: added mtxinu to caser
18599 1994-05-29 18:37 millert
18601 * sudo.h: added EXEC macro
18603 1994-05-29 18:36 millert
18605 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
18608 1994-05-29 18:36 millert
18610 * logging.c: changed mail_argv[] def now use EXEC() macro
18612 1994-05-29 18:35 millert
18614 * check.c: took out crypt() definition
18616 1994-05-29 17:23 millert
18618 * version.h: upped the version
18620 1994-05-29 15:52 millert
18622 * configure.in: always look for -lnsl
18624 1994-05-29 15:29 millert
18626 * aclocal.m4: added an echo
18628 1994-05-29 15:25 millert
18630 * sudo.h: SHORT_MESSAGE is now the default
18632 1994-05-29 15:18 millert
18634 * config.h.in: fixed typo
18636 1994-05-29 01:29 millert
18638 * configure.in: added missing AC_DEFINE(SVR4) for solaris
18640 1994-05-28 20:42 millert
18642 * sudo.man: documented the -v flag
18644 1994-05-28 20:34 millert
18646 * SUPPORTED: updated
18648 1994-05-28 20:31 millert
18650 * check.c: proto-ized crypt()
18652 1994-05-28 20:28 millert
18654 * config.h.in: added LIBSHADOW undef
18656 1994-05-28 20:18 millert
18658 * configure.in: nwo set OS to be lowercase
18660 1994-05-28 19:36 millert
18662 * configure.in: now use SUDO_OSTYPE to set $OS
18664 1994-05-28 19:36 millert
18666 * aclocal.m4: now use uname to determine os
18668 1994-05-28 16:23 millert
18670 * visudo.c: added prototypes & moved sig handler around
18672 1994-05-28 15:13 millert
18674 * sudo.h: added prototyppes
18676 1994-05-28 15:13 millert
18678 * parse.c: added comment
18680 1994-05-28 15:12 millert
18682 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
18684 1994-05-28 15:11 millert
18686 * check.c, logging.c, sudo.c: added prototypes
18688 1994-05-28 15:11 millert
18690 * aixcrypt.exp: Initial revision
18692 1994-05-28 15:11 millert
18694 * Makefile.in: added aixcrypt.exp
18696 1994-05-28 13:21 millert
18698 * parse.lex, parse.yacc: moved config.h to top of includes
18700 1994-05-25 15:48 millert
18702 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
18704 1994-05-24 23:08 millert
18706 * visudo.c: added -v flag and usage()
18708 1994-05-24 23:08 millert
18710 * version.h: fixed a typo
18712 1994-05-24 23:08 millert
18714 * sudo.c: cast Argv to a const for exec added -v flag
18716 1994-05-24 23:07 millert
18718 * logging.c: mail_argv is now a const
18720 1994-05-24 23:07 millert
18722 * configure.in: only set RETSIGTYPE if it is not set already
18724 1994-05-24 23:07 millert
18726 * aclocal.m4: now defines & STDC_HEADERS for Irix
18728 1994-05-24 23:07 millert
18730 * Makefile.in: added version.h
18732 1994-05-24 21:25 millert
18734 * insults.h, sudo.h: prevent multiple inclusion
18736 1994-05-24 21:20 millert
18738 * version.h: Initial revision
18740 1994-05-24 21:09 millert
18742 * parse.lex, parse.yacc: now includes config.h
18744 1994-05-24 20:54 millert
18746 * aclocal.m4: now talks about sunos 4.x
18748 1994-05-24 20:23 millert
18750 * visudo.c: calls to Exit now pass an arg
18752 1994-05-24 18:00 millert
18754 * visudo.c: signal handler now takes an int argument
18756 1994-05-24 18:00 millert
18760 1994-05-24 17:44 millert
18762 * sudo.c: ok, the getcwd() is now *really* done as the user
18764 1994-05-24 17:44 millert
18766 * configure.in: changed AIX STATIC_FLAGS
18768 1994-05-24 16:27 millert
18770 * aclocal.m4: solaris now defines SVR4
18772 1994-05-24 16:18 millert
18774 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
18777 1994-05-24 16:18 millert
18779 * sudo.c: moved getcwd stuff into load_globals
18781 1994-05-24 16:18 millert
18783 * parse.c: took out externs that are in suod.h
18785 1994-05-24 16:18 millert
18787 * logging.c: moved cwd into load_globals
18789 1994-05-24 16:17 millert
18791 * find_path.c: moved cwd stuff
18793 1994-05-24 15:55 millert
18795 * Makefile.in: fixed make distclean & realclean
18797 1994-05-24 12:51 millert
18801 1994-05-24 12:51 millert
18803 * CHANGES: added solaris changes
18805 1994-05-24 12:51 millert
18807 * aclocal.m4: added solaris changes, need to rework
18809 1994-05-24 12:50 millert
18811 * configure.in: cleaned up for solaris
18813 1994-05-24 12:13 millert
18815 * logging.c: reinstall reapchild signal handler for non-bsd signals
18817 1994-05-24 12:03 millert
18819 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
18822 1994-05-24 12:03 millert
18824 * sudo.c: support for HAVE_SYSCONF
18826 1994-05-24 12:02 millert
18828 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
18829 minor prettying up /
18831 1994-05-23 20:26 millert
18833 * config.h.in: added HAVE_SYSCONF
18835 1994-05-16 18:57 millert
18837 * configure.in: now tells you what os you are running /.
18839 1994-05-16 18:56 millert
18841 * aclocal.m4: took out extra ','
18843 1994-05-14 17:56 millert
18845 * config.h.in: added _BSD_COMPAT
18847 1994-05-14 17:56 millert
18849 * aclocal.m4: fixed for irix5
18851 1994-05-14 17:55 millert
18855 1994-05-14 17:27 millert
18857 * sudo.c: uid seinitialized to -2
18859 1994-04-28 12:36 millert
18861 * sudo.c: now removes LIBPATH for AIX
18863 1994-03-12 20:41 millert
18865 * configure.in: now uses ufc if it finds it
18867 1994-03-12 17:42 millert
18869 * sudo.h: no longer define yyval & yylval since yacc does it
18871 1994-03-12 17:42 millert
18873 * parse.lex: now defines yylval as extenr
18875 1994-03-12 17:41 millert
18877 * configure.in: BROKEN_GETPASS is now an OPTION
18879 1994-03-12 17:41 millert
18881 * config.h.in: took out BROKEN_GETPASS
18883 1994-03-12 17:20 millert
18885 * Makefile.in: took out big comment
18887 1994-03-12 16:24 millert
18891 1994-03-12 16:20 millert
18893 * Makefile.in: took out README.beta
18895 1994-03-12 16:19 millert
18897 * SUPPORTED: Initial revision
18899 1994-03-12 16:19 millert
18901 * INSTALL: now reference SUPPORTED .,
18903 1994-03-12 16:17 millert
18905 * config.h.in: now check for convex OR __convex__
18907 1994-03-12 16:16 millert
18909 * aclocal.m4: now check for convex or __convex__
18911 1994-03-12 16:15 millert
18913 * Makefile.in: added dist target
18915 1994-03-12 15:19 millert
18917 * aclocal.m4: use __convex__
18919 1994-03-12 14:33 millert
18921 * find_path.c: now use _S_* stat stuff to be ansi-like
18923 1994-03-12 14:11 millert
18925 * INSTALL: updated for configure directions
18927 1994-03-12 14:05 millert
18929 * Makefile.in: distclean now removes config.h and pathnames.h
18931 1994-03-12 14:03 millert
18935 1994-03-12 14:00 millert
18937 * TODO: fixed typoe
18939 1994-03-12 13:57 millert
18941 * Makefile.in, visudo.c: updated version
18943 1994-03-12 13:57 millert
18945 * config.h.in, pathnames.h.in: added copyright header
18947 1994-03-12 13:55 millert
18949 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
18950 parse.yacc, sudo.c, sudo.h: udpated version
18952 1994-03-12 13:39 millert
18954 * visudo.c: udpated to use configure + pathnames.h
18956 1994-03-12 13:37 millert
18958 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
18960 1994-03-12 13:37 millert
18962 * sudo.h: now works with configure
18964 1994-03-12 13:36 millert
18966 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
18967 updated to work with configure + pathnames.h
18969 1994-03-12 10:40 millert
18971 * Makefile.in: added LEXLIB
18973 1994-03-10 03:18 millert
18975 * COPYING: updated gnu general licence to versio 2
18977 1994-03-10 02:44 millert
18979 * pathnames.h.in, config.h.in: Initial revision
18981 1994-03-10 01:43 millert
18983 * sudo.h: changed to work with configure
18985 1994-03-09 18:51 millert
18987 * Makefile.in, aclocal.m4, configure.in: Initial revision
18989 1994-03-09 17:36 millert
18991 * visudo.c: now uses defines used by configure
18993 1994-03-01 16:31 millert
18995 * find_path.c: sudo won't bitch about EPERM now, for real
18997 1994-02-28 00:36 millert
18999 * logging.c: renamed exec_argv to eliminate a libc name clash with
19002 1994-02-28 00:28 millert
19004 * CHANGES: corrected
19006 1994-02-28 00:27 millert
19008 * logging.c, sudo.c, sudo.h: execve -> execv
19010 1994-02-27 23:27 millert
19014 1994-02-27 23:19 millert
19016 * PORTING: added 2 mroe items
19018 1994-02-27 23:12 millert
19022 1994-02-27 23:11 millert
19024 * sudo.h: added UMASK and mode_t declaration
19026 1994-02-27 23:11 millert
19028 * sudo.c: added UMASK
19030 1994-02-27 20:55 millert
19032 * logging.c: now opens log file with mode 077
19034 1994-02-27 20:55 millert
19036 * check.c: saved current umask ans restores it
19038 1994-02-27 20:36 millert
19040 * sudo.h: added MAXLOGFILELEN
19042 1994-02-27 20:35 millert
19044 * logging.c: split long log lines. FOr syslog, split into multiple
19045 entries, for a log file, indent the extra for readability
19047 1994-02-27 17:22 millert
19049 * CHANGES: added changes
19051 1994-02-27 17:18 millert
19053 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19056 1994-02-25 16:04 millert
19058 * TODO: added input from Brett M Hogden <hogden@rge.com>
19060 1994-02-16 13:35 millert
19062 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19063 execvp() OR execve() becuase of this.
19065 1994-02-16 13:35 millert
19067 * logging.c: now uses execvp() OR execve()
19069 1994-02-16 13:31 millert
19071 * sudo.h: added USE_EXECVE
19073 1994-02-16 13:27 millert
19075 * sudo.h: added environ
19077 1994-02-16 12:53 millert
19079 * find_path.c: now ignore EPERM
19081 1994-02-15 23:52 millert
19083 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19086 1994-02-15 23:52 millert
19090 1994-02-15 23:40 millert
19092 * sudo.h: took out Envp
19094 1994-02-14 12:28 millert
19096 * BUGS: Initial revision
19098 1994-02-10 14:29 millert
19100 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19102 1994-02-10 14:05 millert
19104 * sudo.h: added SECURE_PATH
19106 1994-02-10 13:50 millert
19108 * INSTALL: added sample.sudoers note
19110 1994-02-10 13:47 millert
19112 * sudoers: Initial revision
19114 1994-02-09 14:54 millert
19116 * find_path.c: fixed typo
19118 1994-02-08 23:06 millert
19120 * PORTING: took out SAVED_UID garbage
19122 1994-02-08 22:55 millert
19124 * INSTALL: mentioned HAL
19126 1994-02-08 22:50 millert
19128 * sudo.h: added HAL line
19130 1994-02-08 22:48 millert
19132 * insults.h: added HAL insults
19134 1994-02-08 22:48 millert
19138 1994-02-08 22:02 millert
19140 * logging.c: more verbose error if mailer not found
19142 1994-02-08 22:02 millert
19144 * check.c: now do getpwent as root for soem shadow password systems
19147 1994-02-08 13:22 millert
19149 * sudo.h: took out SAVED_UID garbade
19151 1994-02-08 13:21 millert
19153 * sudo.c: took out SAVED_UID garbage since it don't work
19155 1994-02-06 17:43 millert
19159 1994-02-06 17:40 millert
19161 * insults.h: added a missing space :-)
19163 1994-02-05 19:48 millert
19165 * sudo.c, sudo.h: took out multimax cruft
19167 1994-02-05 19:30 millert
19169 * INSTALL: minor update
19171 1994-02-05 19:30 millert
19173 * PORTING: finished
19175 1994-02-05 19:19 millert
19177 * sudo.c: fixed a typo + indentation
19179 1994-02-05 18:43 millert
19181 * sudo.h: took outumoved some defines to the config file ,. ,.
19183 1994-02-05 15:17 millert
19185 * PORTING: Initial revision
19187 1994-02-05 15:17 millert
19191 1994-02-05 15:16 millert
19193 * sudo.h: added HAS_SAVED_UID
19195 1994-02-05 15:16 millert
19197 * sudo.c: put back AIX cruft
19199 1994-02-03 00:44 millert
19201 * sudo.c: aix changes
19203 1994-02-02 01:31 millert
19207 1994-02-02 01:30 millert
19209 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19212 1994-02-01 22:21 millert
19214 * check.c: added missing %s\n
19216 1994-01-31 02:06 millert
19218 * install-sh: Initial revision
19220 1994-01-31 01:58 millert
19222 * CHANGES, TODO: updated
19224 1994-01-31 01:56 millert
19226 * sudo.c: now removed _RLD_* for alphas
19228 1994-01-31 01:50 millert
19230 * INSTALL: updated for new config scheme
19232 1994-01-30 19:42 millert
19234 * find_path.c: more verbose eror messages
19236 1994-01-27 14:08 millert
19238 * TODO: now have solaris
19240 1994-01-27 14:07 millert
19242 * sudo.h: define __svr4__ for SOLARIS
19244 1994-01-27 14:07 millert
19246 * check.c: added svr4 junk for shadow pws for solaris 2.x
19248 1994-01-27 13:19 millert
19250 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19251 Its not needed since we start out setuid with the correct perms.
19253 1994-01-26 19:51 millert
19255 * check.c, sudo.c, sudo.h: now use setreuid()
19257 1994-01-26 18:58 millert
19259 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19262 1994-01-26 18:52 millert
19264 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19266 1994-01-26 18:52 millert
19268 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19271 1993-12-07 01:33 millert
19273 * README: minor update + spell fix
19275 1993-12-07 01:33 millert
19277 * INSTALL: rewrote most of this
19279 1993-12-07 01:13 millert
19281 * sudo.h: added all options that are in the Makefile
19283 1993-12-07 00:23 millert
19285 * getpass.c: now use USE_TERMIO #define for sgi & hpux
19287 1993-12-06 23:19 millert
19289 * TODO: todo: posix sigs
19291 1993-12-06 01:12 millert
19293 * check.c, find_path.c: always include strings.h
19295 1993-12-05 20:34 millert
19297 * visudo.c: added STATICEDITOR
19299 1993-12-05 20:30 millert
19301 * sudo.h: sgi has vi in /usr/bin too
19303 1993-12-05 20:23 millert
19305 * sudo.man: added VISUAL
19307 1993-12-02 22:20 millert
19309 * sudo.h: sue /usr/bin/vi on some systems
19311 1993-12-02 22:19 millert
19313 * sudo.c: fixed warning (include strings.h)
19315 1993-12-02 22:06 millert
19317 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19320 1993-12-02 21:38 millert
19322 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19324 1993-12-02 21:35 millert
19326 * visudo.c: added EDITOR envar
19328 1993-12-02 21:34 millert
19330 * check.c, find_path.c, parse.c, sudo.c: added patches from
19331 John_Rouillard directory spec uses EDITOR
19333 1993-12-01 19:32 millert
19335 * getpass.c: added flush for hpux
19337 1993-11-30 13:37 millert
19339 * sudo.c: no longer assume malloc returns a char *
19341 1993-11-29 20:35 millert
19343 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19344 stuff -- now gets removed correctly
19346 1993-11-29 19:31 millert
19348 * sudo.h: added STD_HEADERS macro
19350 1993-11-29 19:14 millert
19352 * sudo.c: now uses STD_HEADERS macor for ansi
19354 1993-11-29 19:14 millert
19356 * find_path.c: now uses STD_HEADERS macro
19358 1993-11-29 19:13 millert
19360 * check.c: niceties for C compiler bitches -- no real change
19362 1993-11-29 13:04 millert
19364 * visudo.c: now doesn't fclose a file never opened.
19366 1993-11-28 16:35 millert
19368 * sudo.man: added visudo line
19370 1993-11-28 16:31 millert
19372 * sudo.man: added error stuff added me in there...
19374 1993-11-28 03:12 millert
19376 * CHANGES: noted insults
19378 1993-11-28 03:01 millert
19380 * INSTALL: added blurb about reading stuff
19382 1993-11-28 03:00 millert
19384 * sudo.h: added insults
19386 1993-11-28 03:00 millert
19388 * insults.h: corrected somments and removed newlines
19390 1993-11-28 03:00 millert
19392 * check.c: now uses insults
19394 1993-11-28 02:45 millert
19396 * insults.h: Initial revision
19398 1993-11-27 19:46 millert
19400 * INSTALL: added dec syslog note
19402 1993-11-27 19:25 millert
19404 * sample.sudoers: added real stuff in there
19406 1993-11-27 19:24 millert
19408 * TODO: added a todo
19410 1993-11-27 19:10 millert
19414 1993-11-27 18:59 millert
19416 * sample.sudoers: Initial revision
19418 1993-11-27 18:59 millert
19420 * sudo.man: updated with changes
19422 1993-11-27 18:52 millert
19424 * sudo.man: Initial revision
19426 1993-11-27 18:48 millert
19428 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
19431 1993-11-27 18:46 millert
19433 * visudo.c: updated version number and took out jeff's old addr
19434 since it is no good
19436 1993-11-27 18:42 millert
19438 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
19439 parse.yacc, sudo.c: updated version number and took out jeff's
19440 email (since it is invalid)
19442 1993-10-28 09:36 millert
19444 * check.c: added fflush()
19446 1993-10-22 20:46 millert
19448 * find_path.c: now return NULL instead pf
\b\bof exiting for
19449 nopn
\b\bn-fatal errors
19451 1993-10-21 16:57 millert
19453 * check.c: new banner
19455 1993-10-21 16:42 millert
19457 * parse.lex: now sudo.h gets included first
19459 1993-10-17 20:31 millert
19461 * parse.lex: now can use flex
19463 1993-10-17 20:31 millert
19465 * sudo.h: linux patch
19467 1993-10-17 20:30 millert
19469 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
19471 1993-10-17 20:30 millert
19473 * check.c: linux diff
19475 1993-10-15 16:03 millert
19477 * find_path.c: stat now ignores EINVAL
19479 1993-10-05 21:48 millert
19481 * find_path.c, sudo.c: now declare strdup as extern
19483 1993-10-04 15:23 millert
19485 * visudo.c: reformatted with indent + by hand
19487 1993-10-04 15:10 millert
19489 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
19490 sudo.h: used indent to "fix" coding style
19492 1993-10-03 20:12 millert
19494 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
19495 LAST should maybe move the code that does this into the loop
19496 body. makes it messier tho. hmmm.
19498 1993-09-08 11:53 millert
19500 * find_path.c: redid the fix for non-executable files in an easier
19501 to read way plus some minor aethetic changes
19503 1993-09-08 11:39 millert
19505 * find_path.c: fixed bug with non-executable tings of same name in
19506 path introduced by checkig errno after stat(2).
19508 1993-09-05 10:02 millert
19510 * sudo.c: fixed off by one error
19512 1993-09-05 09:55 millert
19514 * find_path.c: now handles decending below '/' correctly
19516 1993-09-05 08:35 millert
19518 * sudo.c: now actually builds Envp instead of munging envp
19520 1993-09-04 15:42 millert
19522 * parse.yacc: now includes sys/param.h
19524 1993-09-04 15:41 millert
19526 * visudo.c: now includes sys/param.h
19528 1993-09-04 15:30 millert
19530 * sudo.h: fixed ifndef -> ifdef
19532 1993-09-04 15:19 millert
19534 * qualify.c: make more like find_path.c
19536 1993-09-04 15:18 millert
19538 * find_path.c: rewritten by millert
19540 1993-09-04 15:17 millert
19542 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
19543 added info about new defines in the comment
19545 1993-09-04 15:15 millert
19547 * logging.c: now uses USE_CWD
19549 1993-09-04 14:10 millert
19551 * sudo.h: added delc for clean_envp() and Envp
19553 1993-09-04 14:09 millert
19555 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
19558 1993-09-04 14:09 millert
19560 * logging.c: now uses execve()
19562 1993-09-04 14:08 millert
19564 * find_path.c: ENOTDIR is ok now too (in case part of the path is
19567 1993-09-04 08:17 millert
19569 * qualify.c: now works correctly (ttaltotal rewrite)
19571 1993-09-04 07:59 millert
19573 * parse.lex: now includes sys/param.h didn't match trailing / --
19574 fix from rouilj@cs.umb.edu
19576 1993-06-11 18:04 millert
19578 * sudo.c: moved around the #ifndef _AIX
19580 1993-06-11 18:03 millert
19582 * check.c, logging.c, parse.c: Initial revision
19584 1993-03-20 07:57 millert
19586 * qualify.c: Initial revision
19588 1993-03-13 15:09 millert
19590 * find_path.c: now works if you do sudo bin/test
19592 1993-03-13 14:20 millert
19594 * find_path.c: works
19596 1993-03-02 18:28 millert
19598 * sudo.h: Initial revision
19600 1993-03-02 11:35 millert
19602 * visudo.c: Initial revision
19604 1993-03-02 11:32 millert
19606 * parse.lex, parse.yacc: Initial revision
19608 1993-02-16 13:24 millert
19610 * sudo.c: took out errno.h
19612 1993-02-16 13:22 millert
19614 * sudo.c: now spews error if exec fails and exits with -1
19616 1993-02-16 12:07 millert
19618 * sudo.c: Initial revision
19620 1993-02-15 22:27 millert
19622 * find_path.c: now only execs files with (an) executable bit set.
19624 1993-02-15 22:01 millert
19626 * find_path.c: Initial revision
19628 1993-02-15 14:32 millert
19630 * getpass.c: added nice comment
19632 1993-02-15 14:19 millert
19634 * getpass.c: now works on sgi's
19636 1993-02-15 13:57 millert
19638 * getpass.c: Initial revision