summaryrefslogtreecommitdiff
path: root/usr.bin/doas
AgeCommit message (Collapse)Author
2015-08-03remove an extra getuid call, reported by Martijn van DurenTed Unangst
2015-07-30make gid parsing look like uid parsing. from Martijn van DurenTed Unangst
ack deraadt
2015-07-30Fix usage examples.Vadim Zhukov
From Theo Buehler on misc@, thanks! okay jmc@, deraadt@.
2015-07-29refine a commentTed Unangst
2015-07-28wrap some exceedingly long linesTheo de Raadt
2015-07-28Rename some variables and add few comments in keepenv handling code.Vadim Zhukov
Makes the code more readable. okay tedu@
2015-07-28Fix keepenv handling. Initially reported by Ze Loff on misc@.Vadim Zhukov
tedu@ agrees.
2015-07-27default permitted target is all users, not root.Ted Unangst
2015-07-27some improvements from michael reed;Jason McIntyre
2015-07-27Add -n to usage. As noticed by Theo Buehler.Marc Espie
2015-07-26small clarificationsTed Unangst
2015-07-26checkconfig doesn't return anymore, noted by zhukTed Unangst
2015-07-26nflag (as in sudo, force non-interactive mode)Marc Espie
as discussed with ted@
2015-07-26Oops, CVS mismerged changes, resulting in compilable and mostly working,Vadim Zhukov
but somewhat wrong code. Well, the CVS mismerged but I just missed.
2015-07-26tweak config checking slightlyTed Unangst
2015-07-26Stop exiting on cmdline overflow: it's used only for logging, so abortingVadim Zhukov
the whole process is stupid, and actually breaks things. Noticed and analyzed by as well as input from nigel@. Okay tedu@, espie@ and (if I understood correctly) hall@
2015-07-26Implement command matching without execution. This just extendsVadim Zhukov
functionality of the -C flag, so we are not introducing more garbage. Input and okay from jmc@ (documentation) and tedu@ (everything).
2015-07-24Further improve syntax error reporting in doas:Vadim Zhukov
- teach parser to recover after error, allowing to report many errors instead of the first one only; - fix remaining error printouts without exact position. Some ideas were taken from diff sent by dlg@ earlier, thanks! okay tedu@, dlg@
2015-07-23tweak previous;Jason McIntyre
2015-07-22Implement quoting support in doas.conf. Now you can pass environmentVadim Zhukov
variables and arguments with almost any values. As a bonus, doas will now point to exact place where syntax error occured most of times; there is some room for improvement, though. okay tedu@
2015-07-22Small tweaks:Vadim Zhukov
- whitespace on empty line; - use getuid() consistently. okay tedu@
2015-07-22tweak previous; ok zhukJason McIntyre
2015-07-22one whitespace out of placeTheo de Raadt
2015-07-21options w/o args go first in SYNOPSIS, and add -C to usage();Jason McIntyre
2015-07-21oops, previous commit regarding cases should have just been for parse.y.Ted Unangst
then a commit that says: add a -C option to check config files without running. ok halex then *this* commit: use setresuid to be explicit. suggested by deraadt
2015-07-21cases should line up with switch, from Dimitris PapastamosTed Unangst
2015-07-21Add argument matching support to doas.Vadim Zhukov
Input and generic support from many. Final okay from tedu@.
2015-07-20SHELL is out, from Michael ReedTed Unangst
2015-07-20whitespace;Jason McIntyre
2015-07-20sf points out sudo doesn't allow SHELL in childrenTed Unangst
2015-07-20check that badlisted env has = after the nameTed Unangst
2015-07-20rescope and rename some variables to reduce pressure on the alphabetTed Unangst
2015-07-20introduce a minimal badset ($ENV) for environment stripping so thatTed Unangst
root shells read the right .kshrc
2015-07-19wrap long lines and kill some whitespaceSebastian Benoit
2015-07-19In the config file allow line continuations with backslashes.Sebastian Benoit
Document this, and comments and environment variables. ok tedu@
2015-07-19whitespace;Jason McIntyre
2015-07-19spell out complete path to config file, okay tedu@Marc Espie
2015-07-19sudo emulation: if execvpe fails with ENOENT, print "command not found"Ted Unangst
requested by krw
2015-07-18rearrange variable decls a littleTed Unangst
2015-07-18Add RCS ID.Brian Callahan
ok deraadt@
2015-07-18identity isn't optional.Anthony J. Bentley
ok tedu@
2015-07-18Add doas -s as a shorthand for doas $SHELL. ok teduNicholas Marriott
2015-07-18Add more error checking and use named constants when useful.Doug Hogan
ok sthen@ tedu@
2015-07-17add some missing content and markup and optimize some indentationIngo Schwarze
ok tedu@
2015-07-17tweak wordingTed Unangst
2015-07-17improve wording, from Thanos TsouanasTed Unangst
2015-07-16Fail if /etc/doas.conf is g+w or o+w or is not owned by root. ok teduNicholas Marriott
2015-07-16Prototype yy* functions, and use verrx in yyerror(). ok teduNicholas Marriott
2015-07-16Allow (almost) any non-space character to be a part of "word" in doas.conf.Vadim Zhukov
This allows weird commands like /bin/echo to be used for real. No command arguments handling yet, though, as well as quoting. okay tedu@
2015-07-16Missing reallocarray check in doas.c (ok tedu) and a calloc in parse.yNicholas Marriott
as well.