summaryrefslogtreecommitdiffstats
path: root/usr.bin/sudo (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Revert some $OpenBSD$ additions about which there are doubts.krw2015-01-203-3/+0
| | | | Suggested by deraadt@
* Missing $OpenBSD$'s.krw2015-01-203-0/+3
| | | | ok deraadt@
* add missing .An macrosschwarze2015-01-162-5/+6
|
* Fix logic inversion when checking environment variables on themillert2014-04-241-1/+1
| | | | | command line against the blacklist. This is only a problem when env_reset is disabled. CVE 2014-0106
* Use calloc() instead of malloc(n * s) followed by memset(). Notmillert2014-04-221-2/+1
| | | | | actually used on OpenBSD but changed to avoid false positives in audits. From Jean-Philippe Ouellet.
* add an error detection mechanism. People not used to doing ports often messespie2014-04-081-2/+2
| | | | | | | | up their sudo configuration, and end up telling us that "flavors are broken". Add an explicit env variable that's there just to catch that early, to be bumped each time sudoers need to be adjusted. okay sthen@, matthieu@
* * simplify the documentation of -l as suggested by millert@schwarze2014-02-161-13/+7
| | | | | * the `-' arg to -c is a fixed string for the cmd line, so use .Cm ok millert@
* simplify macro usage, in part suggested by jmc@,schwarze2014-02-151-55/+48
| | | | | and fix a few markup bugs; ok millert@
* Don't need keeps in SYNOPSIS for .mdoc.millert2014-02-153-53/+3
| | | | Fix escaping of colon in example.
* minor macro cleanup; from Jan Stary <hans at stare dot cz>;schwarze2014-02-151-4/+4
| | | | ok millert@
* handle ttysize/TIOCGSIZE as a fallback for winsize/TIOCGWINSZ, not thenaddy2013-12-121-7/+7
| | | | other way around; ok millert@
* Make -c option description more accurate (merged from sudo 1.8).millert2013-12-081-13/+14
|
* When checking whether a user may change the login class, just checkmillert2013-12-071-2/+1
| | | | pw_uid of the runas user, which was passed in to set_loginclass().
* Back port remainder of use_loginclass fix from sudo 1.7.9.millert2013-11-062-20/+49
|
* Keep Defaults env_keep to a minimum: basically just what is required forajacoutot2013-09-231-6/+11
| | | | | | | | | | | | | | | pkg_add(1) to work properly. Keep previous Defaults env_keep that were mostly used for building src and ports only for users in the 'wsrc' group. Add commented ftp_proxy http_proxy. People wanting VISUAL/PAGER/EDITOR... can easily set it up... or it will be another commit. discussed^bikeshedded with many ok nick@ dcoppa@ espie@ sthen@ millert@
* Revert. It seems people don't agree about which device should be used.ajacoutot2013-09-231-1/+1
| | | | req. by krw@ millert@
* cd0a -> cd0c for consistency with the FAQ.ajacoutot2013-09-231-2/+2
| | | | discussed with and ok miod@
* Add SM_PATH to the default env_keep.ajacoutot2013-09-121-3/+3
| | | | ok espie@ dcoppa@ sthen@ millert@
* A couple of %d / (long)tv_sec -> %lld / (long long)tv_sec. The codekrw2013-09-111-3/+3
| | | | | | | is not compiled on OpenBSD but don't leave bad examples lying around if avoidable. ok millert@
* use FD_CLOEXEC instead of 1; from David Hillokan2013-04-291-1/+1
| | | | ok otto
* Fix use_loginclass, backport from upstream.millert2013-03-191-1/+1
|
* Remove obsolete code that used to change the mode of sudoers frommillert2013-03-101-24/+1
| | | | the old (pre-1.6) default.
* In rbrepair(), make sure we never try to change the color of themillert2013-02-041-3/+3
| | | | sentinel node, which is the first entry, not the root.
* Native mdoc versions of the sudo manuals, back-ported from sudo trunk.millert2012-08-1711-3208/+5409
|
* Add missing break between AF_INET and AF_INET6 in addr_matches_if_netmask()millert2012-05-161-2/+5
| | | | Addresses CVE 2012-2337
* Split ALL, ROLE and TYPE into their own actions. Since you canmillert2011-05-011-15/+25
| | | | | | only have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in the non-SELinux case. This is safe because the actions are in one big switch() statement. Prodded by and with help from espie@
* sorry, lousy fingers... typoed in the file while checking the diffespie2011-04-291-1/+1
|
* slightly better netmask regexpespie2011-04-291-1/+1
| | | | okay millert@ henning@
* Fix NULL dereference with "sudo -g group" when the sudoers rule hasmillert2011-02-061-24/+27
| | | | no runas user or group listed.
* Backport fix from sudo 1.7.4p5; if -g specified w/o -u the targetmillert2011-01-121-1/+6
| | | | | user is considered to be different from the invoking user unless the user's gid is the same as the target gid.
* Update sudo to version 1.7.2p8millert2010-07-089-35/+65
|
* Update to sudo 1.7.2p7millert2010-06-0213-516/+791
|
* Update to sudo 1.7.2p6millert2010-04-138-24/+94
|
* Fix intended use of closefrom() so that we do indeed close fd 3 and up byhalex2010-03-111-1/+1
| | | | | | default and make -C work as expected. fine by kettenis@, beck@, millert@
* Don't attempt to dereference gl_pathv if the gl_pathc returned by glob(3) iskettenis2010-03-091-1/+1
| | | | | | zero. ok deraadt@, millert@
* Remove old $Sudo$ tags; the main sudo tree no longer lives in cvs.millert2010-03-0476-242/+2
|
* update to sudo 1.7.2p5millert2010-03-015-20/+23
|
* bump patchlevelmillert2010-02-233-13/+13
|
* Check for pseudo-command by looking at the first character of themillert2010-02-221-1/+1
| | | | | command in sudoers instead of checking the user-supplied command for a slash.
* Update to sudo 1.7.2p3millert2010-02-138-28/+62
|
* update to sudo 1.7.2p2millert2009-12-0714-102/+309
|
* Add MAKECONF for building ports in non-standard locations; from Tobias Ulmermillert2009-10-261-4/+5
|
* Add DISTDIR to list of variables preserved via default env_keep,krw2009-10-251-2/+2
| | | | | | making one more piece of ports building via sudo less surprising. ok millert@
* Missed these in sudo sudo 1.7.2 update.millert2009-07-192-1/+44
|
* Fix expansion of %h in #include names.millert2009-07-191-1/+2
|
* Add missing single quotes around a colon in Runas_Spec definition.millert2009-06-302-2/+22
|
* sync with sudo 1.7.2millert2009-06-293-12/+37
|
* Sync with sudo repomillert2009-06-261-2/+2
|
* Make environment file parsing grok linux-style env files.millert2009-06-243-37/+70
|
* Upgrade to sudo 1.7.2millert2009-06-2144-418/+1812
|