githubmirror/sudo | Gitverse

/

/

Обзор ДокументацияВойти

/

/

Аналитика

Безопасность

plugins/sudoers/

Make login_style private to bsdauth.c

3 года назад

Updated translations from translationproject.org

3 года назад

Add tests to exercise recent runas user and group bug fixes.

3 года назад

Make suspend_parent.c out of lib/util and into src. Nothing else uses it now.

3 года назад

correct the return value type of function alias_find_used

3 года назад

The I/O log file name is not just the basename of the full iolog_path. The audit plugin already has the correct value for iolog_file, don't overwrite it with basename(iolog_path). In the future we may wish to pass in iolog_file and iolog_dir in addition to iolog_path. Fixes Bug #1046.

3 года назад

Split base64 encode/decode functions into separate source files. They are independent functions.

5 лет назад

Split base64 encode/decode functions into separate source files. They are independent functions.

5 лет назад

Add an explicit check for sys/sysctl.h. This test needs to be done after AC_LANG_WERROR to avoid including sys/sysctl.h on systems where it is marked as deprecated via a #warning directive.

5 лет назад

Fix some warnings from pvs-studio

6 лет назад

Defer logging of the successful command until approval plugins have run. This adds audit plugin support to the sudoers module, currently only used for accept events. As a result, the sudoers file is now initially parsed as an audit plugin.

6 лет назад

Do variable length arrays the C99 way

3 года назад

Add a reminder to the default lecture that the password will not echo. This line is only displayed when the pwfeedback option is disabled. GitHub issue #195.

4 года назад

Make timestamp_uid and timestamp_gid private to timestamp.c.

3 года назад

check_aliases.c

Move gcc-style __attribute__ macros to config.h.in Renamed __malloc -> sudo_malloclike, __printflike -> sudo_printflike, __printf0like -> sudo_printf0like. Add sudo_noreturn instead of __attribute__((__noreturn__)). We do not use stdnoreturn.h since it has been deprecated in C23 in favor of the [[noreturn]] attribute.

4 года назад

Move sudoers search path to struct sudoers_parser_config.

3 года назад

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

cvtsudoers_csv.c

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

cvtsudoers_json.c

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

cvtsudoers_ldif.c

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

cvtsudoers_merge.c

Eliminate a few harmless dead stores. Quiets warnings from Infer.

4 года назад

cvtsudoers_pwutil.c

Make sudo pass -Wwrite-strings

4 года назад

Update the description of intercept_verify

4 года назад

Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.

4 года назад

Update the description of intercept_verify

4 года назад

sudo_ldap_check_non_unix_group: pass nss pointer to netgr_matches() This allows us to use the LDAP-specific version of innetgr() when possible. Also enable "use_netgroups" by default even on systems without innetgr() since we can now query netgroups directly via LDAP.

3 года назад

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

Initialize digest_type to SUDO_DIGEST_INVALID, not -1 and make it unsigned. This makes the digest type consistently unsigned instead of a mix of signed (for the -1 value in the tokenizer) and unsigned.

3 года назад

set_cmnd_path: apply runchroot if set when finding the command path Previously we would prepend runchroot to the path we were checking but that does not properly handle symbolic links.

3 года назад

env_file_next_local: change the order of the val_len check. It makes more sense to verify that val_len > 1 before using it. This is not a problem in practice because val[val_len - 1] is guaranteed not to underflow but it can confuse reviewers and static analyzers.

4 года назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Make sudo pass -Wwrite-strings

4 года назад

parse.h is already included by sudoers.h.

3 года назад

Initialize digest_type to SUDO_DIGEST_INVALID, not -1 and make it unsigned. This makes the digest type consistently unsigned instead of a mix of signed (for the -1 value in the tokenizer) and unsigned.

3 года назад

set_cmnd_path: apply runchroot if set when finding the command path Previously we would prepend runchroot to the path we were checking but that does not properly handle symbolic links.

3 года назад

Prefer size_t over int, as casting can take extra instructions

3 года назад

fmtsudoers_cvt.c

Pass around const struct sudoers_parse_tree pointers where possible.

3 года назад

Remove unused sudoers_gc_init() function.

3 года назад

parse_gentime: use timegm() to generate time since the epoch The timegm() function is non-standard but widely available. Provide an implementation for those systems that lack it. Bug #1006

5 лет назад

Fix typos and update excluded/ignored codespell lists.

3 года назад

Fix typos and update excluded/ignored codespell lists.

3 года назад

Close the passwd db before calling getpwnam_shadow(3). Otherwise, we will get the non-shadow passwd entry ("*") since we called setpassent(3) earlier to keep the passwd db open.

6 лет назад

set_cmnd_path: apply runchroot if set when finding the command path Previously we would prepend runchroot to the path we were checking but that does not properly handle symbolic links.

3 года назад

Populate runasusers even when only a grouplist is specified.

3 года назад

Recover from missing include file unless error_recovery is disabled. It is still treated as an error from a logging perspective, and mail is still sent.

4 года назад

Populate runasusers even when only a grouplist is specified.

3 года назад

Remove the owner and mode checks when loading a sudo plugin. The sudo.conf file is considered a trusted source of information and these checks suffer from TOCTOU issues anyway. The checks complicate loading of shared objects since we need to perform fallback processing twice.

4 года назад

Add SPDX-License-Identifier to files.

7 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

Make sudo pass -Wwrite-strings

4 года назад

Move definition of INADDR_NONE from interfaces.c to net_ifs.c. Fixes compilation on Solaris 9.

5 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

The I/O log file name is not just the basename of the full iolog_path. The audit plugin already has the correct value for iolog_file, don't overwrite it with basename(iolog_path). In the future we may wish to pass in iolog_file and iolog_dir in addition to iolog_path. Fixes Bug #1046.

3 года назад

iolog_path_escapes.c

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Add NETGROUP_QUERY option for servers that can't match nisNetgroupTriple. This can be used to support netgroup queries on systems that lack the innetgr() function and where the LDAP server cannot query the nisNetgroup by nisNetgroupTriple.

3 года назад

Do variable length arrays the C99 way

3 года назад

sudo_ldap_netgroup_match_str: "-" in a netgroup can never match. We already check for a NULL value above so "str == NULL" is always false. Found by PVS-Studio.

3 года назад

Move some functions from ldap.c to ldap_util.c. These will be used by the LDAP innetgr() implementation.

3 года назад

Check the return value of fcntl() when setting FD_CLOEXEC. This should never fail unless the fd is invalid. Problem reported by Matthias Gerstner of SUSE.

6 лет назад

Add missing const to linux_audit_command()'s argv function argument.

6 лет назад

Pass file, line and column to sudoers defaults callbacks.

4 года назад

fmt_info_messages: don't include ttyname if it is NULL

3 года назад

Save a pointer to the event_alloc parameter in the plugin open function. That way we don't need to pass event_alloc around to the log client functions.

4 года назад

Fix "sudo -l command args", broken in sudo 1.9.13. The value of user_args should not contain the command to be run in "sudo -l command args", only the arguments of the command being checked. This restores the pre-1.9.13 behavior. GitHub issue #249

3 года назад

Add sudoers open errors to the list of parse errors sent via mail. Previously there would be one email for the open failure and a separate one describing the parse error. Now a single email message contains everything.

3 года назад

runaslist_matches: split out user_list and group_list matching.

3 года назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

match_command.c

Modify the is_script function for match_command.c

3 года назад

match_command: apply runchroot if set when matching the command Previously we would prepend runchroot to the path we were checking but that does not properly handle symbolic links.

3 года назад

Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.

5 лет назад

sudoers_lookup_pseudo: remove validated function argument

3 года назад

sudo_ldap_check_non_unix_group: pass nss pointer to netgr_matches() This allows us to use the LDAP-specific version of innetgr() when possible. Also enable "use_netgroups" by default even on systems without innetgr() since we can now query netgroups directly via LDAP.

3 года назад

Fix a potential use-after-free bug with cvtsudoers filtering. In role_to_sudoers() when merging a privilege to the previous one where the runas lists are the same we need to re-use the runas lists of the last command in the previous privilege, not the first. Otherwise, the check in free_cmndspec() will not notice the re-used runas lists. Reported/analyzed by Sohom Datta. GitHub issue #198.

4 года назад

Fix typos and update excluded/ignored codespell lists.

3 года назад

Set command_info to NULL once it is freed

3 года назад

expand_prompt: use correct strlcpy() size parameter The available size passed to strlcpy() was computed incorrectly. Switch to updating the length after writing to the new prompt instead of computing it each time. The actual buffer size is computed and allocated correctly so there is no real consequence to this bug. Found by Qualys.

5 лет назад

sudo_debug_group_list: short-circuit if groups is NULL

4 года назад

Apply spelling fixes. Fixes from PR #30 (ka7) and Bug #925 (fossies.org codespell)

6 лет назад

Fix CodeQL "Multiplication result converted to larger type" warnings.

5 лет назад

Suppress PVS Studio false positives.

6 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

serialize_list.c

Escape/unescape commas when serializing/deserializing a stringlist.

5 лет назад

Add struct sudoers_parser_config and pass it to init_parser().

3 года назад

solaris_audit.c

Fix Solaris and BSM audit warnings. Use BSM audit on Illumos, which lacks Solaris audit.

6 лет назад

solaris_audit.h

Defer logging of the successful command until approval plugins have run. This adds audit plugin support to the sudoers module, currently only used for accept events. As a result, the sudoers file is now initially parsed as an audit plugin.

6 лет назад

Pass around const struct sudo_nss pointers where possible.

3 года назад

get_starttime: add support for GNU Hurd using the mach task_info call. This is currently Hurd-specific but could be made Mach-generic as long as the equivalent of pid2task() is available.

3 года назад

strlcpy_unesc.c

Mark code that escapes/unescapes "sudo -s cmd args..." for removal. A future version of the plugin API will defer any such escaping to the policy plugin so it can be configurable.

4 года назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Add SPDX-License-Identifier to files.

7 лет назад

Eliminate a few harmless dead stores. Quiets warnings from Infer.

4 года назад

Stub out pivot_root() and unpivot_root() for all but the sudoers module.

3 года назад

Move non-config-related macros to from sudo_ldap_conf.h to sudo_ldap.h.

3 года назад

sudo_ldap_conf.h

Do variable length arrays the C99 way

3 года назад

Pass around const struct sudo_nss pointers where possible.

3 года назад

Pass around const struct sudo_nss pointers where possible.

3 года назад

Use the fallthrough attribute instead of /* FALLTHROUGH */ comments.

6 лет назад

parse.h is already included by sudoers.h.

3 года назад

Export sudoers_audit symbol for compilers without symbol visibility.

6 лет назад

Move parser prototypes / externs from sudoers.h to parse.h or toke.h.

3 года назад

Add commented out example for disabling use_pty.

3 года назад

sudoers_debug.c

sudo_debug_register: add minfd argument to specify lowest fd number Use this in sudo_intercept.so to avoid allocating a low-numbered fd which the shell reserves for use by scripts.

5 лет назад

sudoers_debug.h

Add SPDX-License-Identifier to files.

7 лет назад

sudoers_hooks.c

Make sudo pass -Wwrite-strings

4 года назад

sudoers_version.h

Bump SUDOERS_GRAMMAR_VERSION to 50 for the new list pseudo-command.

4 года назад

Add an fd argument to sudo_get_ttysize() instead of always using stderr.

3 года назад

Rename parser_conf -> sudoers_conf in all but the parser itself.

3 года назад

testsudoers_pwutil.c

Do not redefine system group and passwd functions for testsudoers. Instead, prefix the replacements with "testsudoers_" and use a custom pwutil backend so they get used.

5 лет назад

Include string.h unconditionally and only use strings.h for strn?casecmp() In the pre-POSIX days BSD had strings.h, not string.h. Now strings.h is only used for non-ANSI string functions.

6 лет назад

Make timestamp_uid and timestamp_gid private to timestamp.c.

3 года назад

Make sudo pass -Wmissing-prototypes

4 года назад

Initialize digest_type to SUDO_DIGEST_INVALID, not -1 and make it unsigned. This makes the digest type consistently unsigned instead of a mix of signed (for the -1 value in the tokenizer) and unsigned.

3 года назад

Move parser prototypes / externs from sudoers.h to parse.h or toke.h.

3 года назад

Initialize digest_type to SUDO_DIGEST_INVALID, not -1 and make it unsigned. This makes the digest type consistently unsigned instead of a mix of signed (for the -1 value in the tokenizer) and unsigned.

3 года назад

Add struct sudoers_parser_config and pass it to init_parser().

3 года назад

Place C23 attributes before keywords in function declarations. In practice this means we must use "sudo_noreturn static foo(void)" instead of "static sudo_noreturn foo(void)".

4 года назад

Eliminate a few harmless dead stores. Quiets warnings from Infer.

4 года назад

Refactor code to open passwd/group file and add setpassent/setgroupent. This makes the "stayopen" semantics match the system passwd/group functions. The getpwent/getgrent functions now open the database if it is not already open.

4 года назад

Make sudo pass -Wmissing-prototypes

4 года назад

run_command: back out changes to run editor in its own process group. It unnecessarily complicates things to work around bugs in an OS almost no one runs.

3 года назад