summaryrefslogtreecommitdiff
path: root/usr.bin/doas
AgeCommit message (Expand)Author
2020-05-16list example files in FILES with a short description: generally, "ExampleJason McIntyre
2020-02-10briefly mention /etc/examples/ in the FILES section of all theIngo Schwarze
2019-10-18add some checks to avoid UID_MAX (-1) here. this is not problematic withTed Unangst
2019-09-14correct some unveil(2) violations due to "login.conf.db" access (the .db versionSebastien Marie
2019-07-07fix one last edge case regarding PATH, allows simpler config.Ted Unangst
2019-07-04note that authentication is required, unless otherwise configured.Ted Unangst
2019-07-03snprintf/vsnprintf return < 0 on error, rather than -1.Theo de Raadt
2019-06-29fix some more fallout from setting path in setusercontext. restoreTed Unangst
2019-06-24add an example hint that shows how original path can be retainedTed Unangst
2019-06-21tweak wording a bit. always talk about creating a new environment.Ted Unangst
2019-06-19more precisely describe what happens to the environment without keepenv;Ingo Schwarze
2019-06-19mention that doas(1) resets the umask(2);Ingo Schwarze
2019-06-17setusercontext resets PATH (which we want). but then it becomesTed Unangst
2019-06-17mention environment resetting here as well. ok millertTed Unangst
2019-06-17always reset the "su" variables, which is more consistent and predictable.Ted Unangst
2019-06-16redo the environment inheritance to not inherit. it was intended to makeTed Unangst
2019-06-12a few cleanups and simplifications possible now that static pw is gone.Ted Unangst
2019-06-10use getpwuid_r to avoid problems with hidden static storage.Ted Unangst
2019-01-17clear the password even after a mismatchTed Unangst
2018-08-08After authentication is complete, unveil login.conf "r" (to discoverTheo de Raadt
2018-07-11Do for most running out of memory err() what was done for most runningKenneth R Westerback
2018-02-07lowercase doas ee cummings styleTed Unangst
2018-02-07not necessarily the same name, but the indicated nameTed Unangst
2017-07-13man pages with pseudo synopses which list filenames end up creatingJason McIntyre
2017-07-03no need to generate y.tab.h if nothing uses it, set YFLAGS to nothingMarc Espie
2017-05-27for password failure, print Authorization failed instead of EPERM.Ted Unangst
2017-04-06a little const here and there to prevent rules from changingTed Unangst
2017-04-06prepenv can take a const ruleTed Unangst
2017-03-20simplify example. list of ports variables was non-exahustive, which meansTed Unangst
2017-03-09exit test for -L was reversed. spotted by Michael ForneyTed Unangst
2017-01-14add a geteuid check to make sure we're root before plowing into setauth.Ted Unangst
2017-01-02envlist and arglist are both string lists; simplifyTed Unangst
2016-12-29it has been six months and two days... remove keepenv { obsolete } syntaxTed Unangst
2016-12-05Be more explicit about the "args" syntax.Ingo Schwarze
2016-11-10missing semicolon at end of rule. yacc doesn't seem to mind, though.Ted Unangst
2016-10-05Add back the call to yyparse() that was accidentally dropped in theTheo Buehler
2016-10-05move yyparse decl next to yyfpTed Unangst
2016-10-05as a result of the env rework, arraylen() is only used in parse.y.Ted Unangst
2016-09-15use static in the right places to seperate modules betterTheo de Raadt
2016-09-04-L means no commandTed Unangst
2016-09-04don't allow combining nopass and persist in a single ruleTed Unangst
2016-09-03the sudo timeout was 5 minutes i believe, so we'll match that.Ted Unangst
2016-09-02clarify that -L will exit without running a command.Ted Unangst
2016-09-02add support for the verified auth ioctls using 'persist' rules.Ted Unangst
2016-09-01unconst these parameters; i won't be changing bsd auth today.Ted Unangst
2016-09-01move the authentication code to a functionTed Unangst
2016-07-18The string with path to shell could be taken directly from struct passwd.Vadim Zhukov
2016-07-12add "recvfd" to doas(1) for use with skey.Sebastien Marie
2016-07-10rename variable for consistencyTed Unangst
2016-06-27minor tweaks; ok teduJason McIntyre