githubmirror/sudo | Gitverse

/

/

Обзор ДокументацияВойти

/

/

Аналитика

Безопасность

Add support for the struct kinfo_proc on Dragonfly BSD.

4 года назад

Handle "locale -a" returning both C.UTF-8 and C.utf8. It is possible to have mutiple matches from the output of "locale -a". Just take the first one. Fixes GitHub issue #241.

3 года назад

Fix a few whitespace issues.

4 года назад

Only add trailing carriage return to messages if output is a raw tty. If output is being written to a terminal in "raw" mode, we need to add a carriage return after the newline to avoid "stair-step" output. However, we should not write the carriage return if the terminal is in "cooked" mode, output to a pipe, or output redirected to a file. Bug #1042.

4 года назад

Make sudo pass -Wmissing-prototypes

4 года назад

Make sudo pass -Wwrite-strings

4 года назад

Avoid a -Wshadow warning on Solaris 9.

4 года назад

Add support for logging stdin/stdout/stderr in the non-pty exec path. If we are logging I/O but not terminal input/output (either because no terminal is present or because that is what the plugin requested), the non-pty exec path is now taken.

4 года назад

Make sudo pass -Wwrite-strings

4 года назад

exec_intercept.c

Correct error message when command doesn't exist in intercept mode. Previously, we would always use EACCES, even when ENOENT was appropriate. This also affected log_subcmds.

4 года назад

exec_intercept.h

Update the cwd for log_subcmds too. Fixes a problem for intercept_method=trace when running a relative command from a different directory than what sudo ws started from. GitHub issue #194

4 года назад

Move exec code to call into I/O log plugin to exec_iolog.c. This will be shared with exec_nopty.c in the future to log stdin/stdout/stderr without running the command in a pty. Both exec_pty.c and exec_nopty.c now use the same closure.

4 года назад

Fix handling of signal forwarding when running commands in a script. We need to forward signals from a process in the same pgrp if the pgrp leader is not either sudo or the command itself.

4 года назад

write_callback: only enable /dev/tty reader if the command is running This fixes a hang when there is /dev/tty data in a buffer to be flushed by the final call to del_io_events(). We do not want to re-enable the reader when flushing the buffers as part of pty_finish(). See PR #247 for analysis of the problem and how to reproduce it.

3 года назад

fmtstr: call va_arg() for %c when computing length. Even though we don't need to read the actual char to know its length, we do need to consume it to get the correct value for the next format.

4 года назад

get_execve_info: defer setting pathname until argbuf is finalized If we reallocate the buffer (via growbuf()) in ptrace_read_vec(), the address of argbuf may change. If so, the value stored in pathname will no longer be valid. GitHub issue #194.

4 года назад

Include elf.h, not linux/elf.h but define NT_ARM_SYSTEM_CALL if missing. Older kernel headers are missing the definition of EM_ARM in linux/elf.h. GitHub issue #232

4 года назад

write_callback: only enable /dev/tty reader if the command is running This fixes a hang when there is /dev/tty data in a buffer to be flushed by the final call to del_io_events(). We do not want to re-enable the reader when flushing the buffers as part of pty_finish(). See PR #247 for analysis of the problem and how to reproduce it.

3 года назад

Quiet a few Solaris Studio compiler warnings.

5 лет назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

intercept.exp.in

Add support for intercepting the system(3) function. This also means we can log system(3) with log_subcmds.

4 года назад

intercept.pb-c.c

Stop sending an InterceptResponse to a PolicyCheckRequest for log_subcmds. There's no real reason for the command to wait for sudo send back a response that will always be a PolicyAcceptMessage.

4 года назад

intercept.proto

Stop sending an InterceptResponse to a PolicyCheckRequest for log_subcmds. There's no real reason for the command to wait for sudo send back a response that will always be a PolicyAcceptMessage.

4 года назад

When applying fallback limits, make sure we don't reduce rlim_max. Fixes a problem where sudo could reduce the max stack size on some systems if the original limit was higher than the fallback limit, but not unlimited/infinity.

5 лет назад

Fix --enable-static-sudoers, broken in sudo 1.9.13. sudo_qualify_plugin() should not try to fully-qualify the path to a statically-compiled plugin. GitHub issue #245

3 года назад

Initialize the integer result parameter passed to SIOCGIFANUM. It appears that passing in a non-zero value causes the ioctl() to fail. From Tim Rice.

4 года назад

We no longer need to include headers we don't use for sudo*.h files. Previously we needed to include headers required by the various sudo*h files. Now those files are more self-sufficient and we should only include headers needed by code in the various .c files.

6 лет назад

parse_args: an environment variable may not start with '='. Also check VAR=val format in validate_env_vars() and add an error message if insert_env_vars() fails.

4 года назад

Use AIX-style shared libraries on AIX by default instead of SVR4-style. This removes the need to use the -brtl linker flag which can cause problems when there are both a .so and .a version of the same library but with different versions. This was particularly problematic when using the AIX freeware version of OpenSSL. The --with-aix-soname=svr4 option can be used to build SVR4-style shared libs instead.

4 года назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Use getopt() and getopt_long() for sesh command line options.

4 года назад

Use getopt() and getopt_long() for sesh command line options.

4 года назад

Make sure SIGCHLD is not ignored when sudo is executed. If SIGCHLD is ignored there is a race condition between when the process is executed and when the SIGCHLD handler is installed. This fixes the bug described by GitHub PR #98

5 лет назад

Fix some warnings from pvs-studio

6 лет назад

Pass back the number of files to edit when using sudoedit. The sudo front-end can use this to determine where the list of files to edit begins.

4 года назад

Pass back the number of files to edit when using sudoedit. The sudo front-end can use this to determine where the list of files to edit begins.

4 года назад

Pass back the number of files to edit when using sudoedit. The sudo front-end can use this to determine where the list of files to edit begins.

4 года назад

Rename run_cred -> cur_cred and stash existing creds in set_tmpdir(). For sudo_edit_open() et al what we need is a copy of the current cred to restore after dir_is_writable() changes to the user cred.

6 лет назад

Pass sudo's process ID to suspend_sudo_nopty() since we already know it. Saves an unnecessary getpid(2) call.

4 года назад

sudo_intercept.c

copy_vector: plug memory leak in error path Only the array was being freed, not the contents. GitHub issue #202.

4 года назад

sudo_intercept_common.c

Avoid a -Wshadow warning on Solaris 9.

4 года назад

Make sudo pass -Wmissing-prototypes

4 года назад

sudo_plugin_int.h

Avoid a -Wshadow warning on Solaris 9.

4 года назад

sudo_usage.h.in

Add [arg ...] after command in SYNOPSIS and usage output. Use Ar markup when referring to the command and args.

4 года назад

suspend_nopty.c

Pass sudo's process ID to suspend_sudo_nopty() since we already know it. Saves an unnecessary getpid(2) call.

4 года назад

tcsetpgrp_nobg.c

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Display error in error message if we can't restore the terminal.

4 года назад

Add support for the struct kinfo_proc on Dragonfly BSD.

4 года назад

Rewind utmp file pointer after searching for entry (#108)

5 лет назад