summaryrefslogtreecommitdiff
path: root/usr.bin/doas
AgeCommit message (Expand)Author
2015-11-27after reading a too long line, restart at the beginning of the buffer soTed Unangst
2015-10-24setusercontext() may still need "getpw" pledge rights; unbreaks doas on ypMiod Vallat
2015-10-22copying of the environment can be done later, as the user runningTed Unangst
2015-10-22pledge in doas. startup pledge "stdio rpath getpw proc exec id". 4Theo de Raadt
2015-09-19doas doesn't need any files to be passed in. closefrom STDERR+1. ok bennoTed Unangst
2015-09-03replace permfail calls with errc. the permfail calls had been retained forTed Unangst
2015-09-01increment the line number after the line continuation; ok teduMike Belopuhov
2015-09-01only need to restrict exec path if the rule specifies a command.Ted Unangst
2015-08-28Document an example that lets root run unrestricted doas commands asReyk Floeter
2015-08-27add a type of "auth-doas" to the perm check to allow login.conf fiddlingTed Unangst
2015-08-22Add cwd context to syslog entry.Doug Hogan
2015-08-20Show program name for permission failure messages.Rafael Zalamena
2015-08-13and now we can unify the code. okay tedu@Marc Espie
2015-08-12more explicit warnings. Okay tedu@Marc Espie
2015-08-03remove an extra getuid call, reported by Martijn van DurenTed Unangst
2015-07-30make gid parsing look like uid parsing. from Martijn van DurenTed Unangst
2015-07-30Fix usage examples.Vadim Zhukov
2015-07-29refine a commentTed Unangst
2015-07-28wrap some exceedingly long linesTheo de Raadt
2015-07-28Rename some variables and add few comments in keepenv handling code.Vadim Zhukov
2015-07-28Fix keepenv handling. Initially reported by Ze Loff on misc@.Vadim Zhukov
2015-07-27default permitted target is all users, not root.Ted Unangst
2015-07-27some improvements from michael reed;Jason McIntyre
2015-07-27Add -n to usage. As noticed by Theo Buehler.Marc Espie
2015-07-26small clarificationsTed Unangst
2015-07-26checkconfig doesn't return anymore, noted by zhukTed Unangst
2015-07-26nflag (as in sudo, force non-interactive mode)Marc Espie
2015-07-26Oops, CVS mismerged changes, resulting in compilable and mostly working,Vadim Zhukov
2015-07-26tweak config checking slightlyTed Unangst
2015-07-26Stop exiting on cmdline overflow: it's used only for logging, so abortingVadim Zhukov
2015-07-26Implement command matching without execution. This just extendsVadim Zhukov
2015-07-24Further improve syntax error reporting in doas:Vadim Zhukov
2015-07-23tweak previous;Jason McIntyre
2015-07-22Implement quoting support in doas.conf. Now you can pass environmentVadim Zhukov
2015-07-22Small tweaks:Vadim Zhukov
2015-07-22tweak previous; ok zhukJason McIntyre
2015-07-22one whitespace out of placeTheo de Raadt
2015-07-21options w/o args go first in SYNOPSIS, and add -C to usage();Jason McIntyre
2015-07-21oops, previous commit regarding cases should have just been for parse.y.Ted Unangst
2015-07-21cases should line up with switch, from Dimitris PapastamosTed Unangst
2015-07-21Add argument matching support to doas.Vadim Zhukov
2015-07-20SHELL is out, from Michael ReedTed Unangst
2015-07-20whitespace;Jason McIntyre
2015-07-20sf points out sudo doesn't allow SHELL in childrenTed Unangst
2015-07-20check that badlisted env has = after the nameTed Unangst
2015-07-20rescope and rename some variables to reduce pressure on the alphabetTed Unangst
2015-07-20introduce a minimal badset ($ENV) for environment stripping so thatTed Unangst
2015-07-19wrap long lines and kill some whitespaceSebastian Benoit
2015-07-19In the config file allow line continuations with backslashes.Sebastian Benoit
2015-07-19whitespace;Jason McIntyre