summaryrefslogtreecommitdiff
path: root/usr.bin/sudo
AgeCommit message (Collapse)Author
2013-04-29use FD_CLOEXEC instead of 1; from David HillOkan Demirmen
ok otto
2013-03-19Fix use_loginclass, backport from upstream.Todd C. Miller
2013-03-10Remove obsolete code that used to change the mode of sudoers fromTodd C. Miller
the old (pre-1.6) default.
2013-02-04In rbrepair(), make sure we never try to change the color of theTodd C. Miller
sentinel node, which is the first entry, not the root.
2012-08-17Native mdoc versions of the sudo manuals, back-ported from sudo trunk.Todd C. Miller
2012-05-16Add missing break between AF_INET and AF_INET6 in addr_matches_if_netmask()Todd C. Miller
Addresses CVE 2012-2337
2011-05-01Split ALL, ROLE and TYPE into their own actions. Since you canTodd C. Miller
only have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in the non-SELinux case. This is safe because the actions are in one big switch() statement. Prodded by and with help from espie@
2011-04-29sorry, lousy fingers... typoed in the file while checking the diffMarc Espie
2011-04-29slightly better netmask regexpMarc Espie
okay millert@ henning@
2011-02-06Fix NULL dereference with "sudo -g group" when the sudoers rule hasTodd C. Miller
no runas user or group listed.
2011-01-12Backport fix from sudo 1.7.4p5; if -g specified w/o -u the targetTodd C. Miller
user is considered to be different from the invoking user unless the user's gid is the same as the target gid.
2010-07-08Update sudo to version 1.7.2p8Todd C. Miller
2010-06-02Update to sudo 1.7.2p7Todd C. Miller
2010-04-13Update to sudo 1.7.2p6Todd C. Miller
2010-03-11Fix intended use of closefrom() so that we do indeed close fd 3 and up byAlexander Hall
default and make -C work as expected. fine by kettenis@, beck@, millert@
2010-03-09Don't attempt to dereference gl_pathv if the gl_pathc returned by glob(3) isMark Kettenis
zero. ok deraadt@, millert@
2010-03-04Remove old $Sudo$ tags; the main sudo tree no longer lives in cvs.Todd C. Miller
2010-03-01update to sudo 1.7.2p5Todd C. Miller
2010-02-23bump patchlevelTodd C. Miller
2010-02-22Check for pseudo-command by looking at the first character of theTodd C. Miller
command in sudoers instead of checking the user-supplied command for a slash.
2010-02-13Update to sudo 1.7.2p3Todd C. Miller
2009-12-07update to sudo 1.7.2p2Todd C. Miller
2009-10-26Add MAKECONF for building ports in non-standard locations; from Tobias UlmerTodd C. Miller
2009-10-25Add DISTDIR to list of variables preserved via default env_keep,Kenneth R Westerback
making one more piece of ports building via sudo less surprising. ok millert@
2009-07-19Missed these in sudo sudo 1.7.2 update.Todd C. Miller
2009-07-19Fix expansion of %h in #include names.Todd C. Miller
2009-06-30Add missing single quotes around a colon in Runas_Spec definition.Todd C. Miller
2009-06-29sync with sudo 1.7.2Todd C. Miller
2009-06-26Sync with sudo repoTodd C. Miller
2009-06-24Make environment file parsing grok linux-style env files.Todd C. Miller
2009-06-21Upgrade to sudo 1.7.2Todd C. Miller
2009-06-03Preserve NOMAN since the top level Makefile uses it when making/installingTodd C. Miller
libs.
2009-06-03Adapt for putenv and unsetenv changes.Todd C. Miller
2009-05-08Sort variables in env_keep.Antoine Jacoutot
"sure" millert@
2009-04-19Sync with sudo 1.7.1 finalTodd C. Miller
2009-04-11Update to sudo 1.7.1Todd C. Miller
2009-01-09Do not try to set the close on exec flag if we didn't actually open sudoers.Todd C. Miller
Fixes a crash when sudoers owenership is wrong found by thib@
2008-12-19Sync some bits with sudo 1.7.0 final.Todd C. Miller
2008-12-09sync with sudo cvs repoTodd C. Miller
2008-12-09Better fix for rev 1.21Todd C. Miller
2008-12-08Do not short circuit pseudo commands when we get a match since, dependingTodd C. Miller
on the settings, we may need to examine all commands for tags.
2008-11-25Even if neither stdin nor stdout are ttys we may still have /dev/ttyTodd C. Miller
available to us.
2008-11-24Fix typo in sudoers man page (from Markus Lude)Todd C. Miller
Fix parsing error with lines that only contain a comment char
2008-11-22sync with sudo repoTodd C. Miller
2008-11-18fix check_aliasesTodd C. Miller
2008-11-18when destroying an alias, free the correct data pointerTodd C. Miller
2008-11-18standardize on the term 'option' for command line options (not flag)Todd C. Miller
2008-11-15classic C compatibility (no statements before decls)Theo de Raadt
2008-11-14add back acsite.m4Todd C. Miller
2008-11-14Upgrade to sudo 1.7. See the WHATSNEW files for details.Todd C. Miller