~ubuntu-branches/ubuntu/hardy/sudo/hardy-updates : changes

~ubuntu-branches/ubuntu/hardy/sudo/hardy-updates » Changes from revision 20

From Revision 20 to 1

Rev	Summary	Authors	Tags	Date
20	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) * The password prompt asks for the target user's password now, not the invoking one's. (LP: #148498)	Martin Pitt	1.6.9p10-1ubuntu1	16 years ago
19	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/prerm: Abort package removal if there is no root password. (Debian #451241). - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) * sudo.c, parse.c: Apply a change that was missing from the older upstream tarball that fixes the upstream solution of "SETENV is implicit for ALL". We do not want to deviate our orig.tar.gz from Debian's, though.	Martin Pitt	1.6.9p9-1ubuntu1	16 years ago
18	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/prerm: Abort package removal if there is no root password. Forwarded to Debian #451241. - sudoers: Add some explanatory text why it is a REALLY good idea to use visudo. (LP #11620) Forwarded upstream: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=269 - debian/rules: Disable lecture, enable tty_tickets by default. - debian/rules: Configure less confusing default password prompt to point out that it is sudo asking for the user's password, as opposed to another program like ssh, or asking for the root password. (LP #8556) Forwarded to Debian #343268. - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. * New upstream version 1.6.9 fixes the following bugs: - Does not ask for password any more if stdin is not a terminal. (LP: #130636) - sudo -k/-K does not fail any more if timestamp is in the future. (LP: #43233) * Drop our very intrusive patch for selectively cleaning the environment based on whether the user can execute all commands or only some. Debian and upstream now default to cleaning the environment unconditionally and provide option -E and the SETENV tag to override it. Instead, do a tinpy patch to parse.yacc which enables SETENV implicitly for 'ALL' commands. Forwarded upstream: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=268 * sudo.c: Disable i18n for now (upstream enabled it in 1.6.9), since this causes PAM to output localized password prompts, which in turn breaks -p and --with-passprompt, which finally breaks gksu. See http://www.gratisoft.us/bugzilla/show_bug.cgi?id=270 for details.	Martin Pitt	1.6.9p6-1ubuntu1	16 years ago
17	debian/rules: Configure less confusing default password prom... debian/rules: Configure less confusing default password prompt to (a) point out that it wants to know the user's password (instead of root's or whichever) and (b) that it is sudo which asks the question (since those prompts become really unintelligible if the command asks its own password, such as 'ssh', 'passwd', or 'mount -t cifs'). Do not modify --with-badpass-message though, since that breaks gksu. Thanks to Marco Rodrigues, leoquant, and nxvl for the discussion and proposals. (LP: #8556)	Martin Pitt	1.6.8p12-5ubuntu2	16 years ago
16	* Merge to Debian unstable. Remaining Ubuntu changes: * Merge to Debian unstable. Remaining Ubuntu changes: - parse.{h,c,yacc}, sudo.tab.cc, sudo.h, ldap.c, env.c, sudo.c: Clean up environment variable handling to fix vulns like CVE-2005-4158 and CVE-2006-0151 once and for all: Only keep known-good variables if user has limited sudo privileges (blacklist -> whitelist) and keep them all for users with unlimited command privileges (to not drive admins and developers up the wall which actually need to pass env variables from time to time). See 1.6.8p12-1ubuntu1 changelog for details. - sudoers: Add some explanatory text why it is a REALLY good idea to use visudo. (LP #11620) - debian/control, debian/rules: Enable krb5 support, add libkrb5-dev build dependency. (LP #35001) - debian/postinst: Disable lecture, enable tty_tickets in default sudoers. - debian/postinst, debian/sudo-ldap.postinst, debian/rules: Disable init script, since in Ubuntu /var/run is a tmpfs. - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. - auth/pam.c: Abort immediately if the user presses ^C at the password prompt instead of waiting three seconds. (LP #38810, in upstream CVS) - debian/prerm: Abort package removal if there is no root password. * debian/control: Set myself as Ubuntu maintainer.	Martin Pitt	1.6.8p12-5ubuntu1	17 years ago
15	* auth/pam.c: * auth/pam.c: - Abort immediately if the user presses ^C at the password prompt instead of waiting three seconds. There is no information to be gained from doing that, and it's just annoying if one accidentally uses sudo for something. - Patch taken from upstream CVS: http://www.sudo.ws/cgi-bin/cvsweb/sudo/auth/pam.c.diff?r1=1.51&r2=1.52 - Thanks to Anders Kaseorg for the patch! - Closes: LP#38810	Martin Pitt	1.6.8p12-4ubuntu5	17 years ago
14	* debian/rules: Enable krb5 support (also add libkrb5-dev bu... * debian/rules: Enable krb5 support (also add libkrb5-dev build dependency). Closes: LP#35001. * debian/sudo_root.8: Suggest using visudo instead of editing sudoers directly. Closes: LP#47849 * debian/sudo_root.8: Mention benefit of not sharing a password. Closes: LP#48221 * sudo.c: Temporarily drop to user privileges when creating the .sudo_as_admin_successful stamp to also work on NFS with root squashing. Closes: LP#49233	Martin Pitt	1.6.8p12-4ubuntu4	17 years ago
13	* sudo.c: Disable 'def_env_reset = TRUE'. This was introduce... * sudo.c: Disable 'def_env_reset = TRUE'. This was introduced in 1.6.8p12-2 as Debian's way of treating environment variables safely. We have our own way with special treatment of unlimited sudo users, so revert this change to keep all environment variables for unlimited sudoers again. * debian/prerm: - Fix bashism and add a note why we need the slightly unusual syntax. Closes: LP#53273 - Only check the first character of the password against '!' so that we also catch disabled non-empty root passwords.	Martin Pitt	1.6.8p12-4ubuntu3	17 years ago
12	* Do not ship our pre-generated sudo.tab.c in package diff a... * Do not ship our pre-generated sudo.tab.c in package diff any more, so that it gets correctly rebuilt (automatic rebuild was added in 1.6.8p12-2). Closes: LP#51246) * debian/rules: - Remove sudo.tab.[hc] before build to make double sure that it gets regenerated correctly. - Fix rebuilding of sudo{,ers}.man.in.	Martin Pitt	1.6.8p12-4ubuntu2	17 years ago
11	[ Ongoing Merge Process ] [ Ongoing Merge Process ] Merge from debian unstable.	Scott James Remnant	1.6.8p12-4ubuntu1	17 years ago
10	env.c: Preserve additional environment variables for non-alm... env.c: Preserve additional environment variables for non-almighty sudoers: HOME, LOGNAME, DISPLAY, XAUTHORITY, XAUTHORIZATION. Closes: LP#44500	Martin Pitt	1.6.8p12-1ubuntu6	18 years ago
9	* env.c: Unbreak the env_keep option. Closes: LP#31690 * env.c: Unbreak the env_keep option. Closes: LP#31690 * sudoers: Add some explanatory text why it is a REALLY good idea to use visudo. Closes: LP#11620	Martin Pitt	1.6.8p12-1ubuntu5	18 years ago
8	Remove the init script, it only cleans up /var/run which is ... Remove the init script, it only cleans up /var/run which is a tmpfs.	Scott James Remnant	1.6.8p12-1ubuntu4	18 years ago
7	* Add debian/sudo_root.8: Introduction about root handling i... * Add debian/sudo_root.8: Introduction about root handling in ubuntu with sudo. * debian/rules: Install that new manpage into sudo and sudo-ldap.	Martin Pitt	1.6.8p12-1ubuntu3	18 years ago
6	sudo.c: If the user successfully authenticated and he is in ... sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. A future /etc/profile will evaluate this flag to display a short help about how to execute things as root.	Martin Pitt	1.6.8p12-1ubuntu2	18 years ago
5	Revert addition of sudo -t, i. e. revert to version 1.6.8p9-... Revert addition of sudo -t, i. e. revert to version 1.6.8p9-3ubuntu1. As per TB discussion, we will not use sudo for implementing https://wiki.ubuntu.com/HideAdminToolsToUsers.	Martin Pitt	1.6.8p9-3ubuntu4	18 years ago
4	debian/init.d: When resetting the timestamps of the tty tags... debian/init.d: When resetting the timestamps of the tty tags, actually touch the files, not the per-user directories. Since bootclean.sh removes /var/run/anyway, this is no big deal, but clean it up anyway for the sake of correctness. (Ubuntu #16594)	Martin Pitt	1.6.8p9-2ubuntu2	18 years ago
3	Add !fqdn to the Defaults so we don't die horribly when loca... Add !fqdn to the Defaults so we don't die horribly when localhost doesn't resolve (Ubuntu: 2772)	Thom May	1.6.8p5-1ubuntu2	19 years ago
2	Disable lecture by default. (Warty #987) Disable lecture by default. (Warty #987)	Thom May	1.6.7p5-1ubuntu4	19 years ago
1	Import upstream version 1.6.7p5 Import upstream version 1.6.7p5	Thom May	upstream-1.6.7p5	19 years ago