~ubuntu-branches/ubuntu/oneiric/sudo/oneiric-updates : changes

~ubuntu-branches/ubuntu/oneiric/sudo/oneiric-updates » Changes to sudoers.pod from revision 53

From Revision 53

Rev	Summary	Authors	Tags	Date
51	* debian/patches/enable_badpass.patch: turn on "mail_badpass... * debian/patches/enable_badpass.patch: turn on "mail_badpass" by default: - attempting sudo without knowing a login password is as bad as not being listed in the sudoers file, especially if getting the password wrong means doing the access-check-email-notification never happens (Closes: 641218).	Kees Cook	1.7.4p6-1ubuntu2	12 years ago
50	* Merge from debian/unstable, remaining changes: * Merge from debian/unstable, remaining changes: - debian/patches/keep_home_by_default.patch: + Set HOME in initial_keepenv_table. - debian/rules: + compile with --without-lecture --with-tty-tickets (Ubuntu specific) + install man/man8/sudo_root.8 (Ubuntu specific) + install apport hooks - debian/sudoers: + grant admin group sudo access - debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks * drop debian/patches/CVE-2011-0010.patch, applied upstream now	Michael Vogt	1.7.4p6-1ubuntu1	13 years ago
40	* Merge from debian unstable (LP: #689025), remaining change... * Merge from debian unstable (LP: #689025), remaining changes: - debian/rules: + compile with --without-lecture --with-tty-tickets (Ubuntu specific) + install man/man8/sudo_root.8 (Ubuntu specific) + install apport hooks - debian/sudo-ldap.dirs, debian/sudo.dirs: add usr/share/apport/package-hooks * This upload also fixes: LP: #609645	Lorenzo De Liso	1.7.4p4-5ubuntu1	13 years ago
37	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - debian/rules: - compile with --without-lecture --with-tty-tickets (Ubuntu specific) - install man/man8/sudo_root.8 (Ubuntu specific) - install apport hooks - debian/sudo-ldap.dirs, debian/sudo.dirs: add usr/share/apport/package-hooks - debian/patches/ubuntu-sudo-as-admin-successful.patch: adjust sudo.c so that if the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present * Dropped the following, now included upstream: - fix for CVE-2010-1163 - fix for CVE-2010-0426 - debian/sudo.postinst, debian/sudo-ldap.postinst: update description to match behavior in sudoers file - don't install init script. Debian moved to /var/lib/sudo from /var/run/sudo, so Ubuntu's tmpfs usage won't clean those out automatically any more, so we now need the initscript.	Jamie Strandboge	1.7.2p7-1ubuntu1	13 years ago
32	* Merge from debian testing. Remaining changes: * Merge from debian testing. Remaining changes: - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) - env.c: Add "http_proxy" to initial_keepenv_table, so that it is kept for "sudo apt-get ...". (Ubuntu specific EBW hack, should disappear at some point) - debian/{rules,postinst,sudo-ldap.postinst}: Disable init script installation. Debian reintroduced it because /var/run tmpfs is not the default there, but has been on Ubuntu for ages. - debian/{source_sudo.py,rules,sudo-ldap.dirs,sudo.dirs}: Add apport hook	Marc Deslauriers	1.7.2p1-1ubuntu1	14 years ago
29	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) - env.c: Add "http_proxy" to initial_keepenv_table, so that it is kept for "sudo apt-get ...". (Ubuntu specific EBW hack, should disappear at some point) - debian/{rules,postinst,sudo-ldap.postinst}: Disable init script installation. Debian reintroduced it because /var/run tmpfs is not the default there, but has been on Ubuntu for ages.	Martin Pitt	1.7.0-1ubuntu1	15 years ago
26	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) - env.c: Add "http_proxy" to initial_keepenv_table, so that it is kept for "sudo apt-get ...". (Ubuntu specific EBW hack, should disappear at some point) * debian/{rules,postinst,sudo-ldap.postinst}: Disable init script installation. Debian reintroduced it because /var/run tmpfs is not the default there, but has been on Ubuntu for ages.	Martin Pitt	1.6.9p17-1ubuntu1	15 years ago
25	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - logging.c: Ignore SIGPIPE when creating an error email, so that non-fatal error messages (like "unable to resolve local host name") do not lead to being killed with SIGPIPE if /usr/bin/sendmail does not exist or crashes. (LP #32906, http://www.gratisoft.us/bugzilla/show_bug.cgi?id=285) - debian/postinst: put "NOPASSWD" example at the bottom, so that uncommenting it will actually work (later entries override former ones). (LP #131399, Debian #479616) - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) - env.c: Add "http_proxy" to initial_keepenv_table, so that it is kept for "sudo apt-get ...". (Ubuntu specific EBW hack, should disappear at some point) * debian/{rules,postinst}: Disable init script installation. Debian reintroduced it because /var/run tmpfs is not the default there, but has been on Ubuntu for ages.	Martin Pitt	1.6.9p15-2ubuntu1	16 years ago
23	* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes: - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) - env.c: Add "http_proxy" to initial_keepenv_table, so that it is kept for "sudo apt-get ...". (Ubuntu specific EBW hack, should disappear at some point) * logging.c: Ignore SIGPIPE when creating an error email, so that non-fatal error messages (like "unable to resolve local host name") do not lead to being killed with SIGPIPE if /usr/bin/sendmail does not exist or crashes. Forwarded upstream to http://www.gratisoft.us/bugzilla/show_bug.cgi?id=285 (LP: #32906) * env.c: Do not clobber $HOME when not specifying -H or -s. Patch taken from upstream CVS. (LP: #221395) * debian/postinst: put "NOPASSWD" example at the bottom, so that uncommenting it will actually work (later entries override former ones). (LP: #131399)	Martin Pitt	1.6.9p12-1ubuntu1	16 years ago
19	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/prerm: Abort package removal if there is no root password. (Debian #451241). - debian/rules: Disable lecture, enable tty_tickets by default. (Ubuntu specific) - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. (Ubuntu specific) - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. (Ubuntu specific) * sudo.c, parse.c: Apply a change that was missing from the older upstream tarball that fixes the upstream solution of "SETENV is implicit for ALL". We do not want to deviate our orig.tar.gz from Debian's, though.	Martin Pitt	1.6.9p9-1ubuntu1	16 years ago
18	* Merge with Debian unstable. Remaining Ubuntu changes: * Merge with Debian unstable. Remaining Ubuntu changes: - debian/prerm: Abort package removal if there is no root password. Forwarded to Debian #451241. - sudoers: Add some explanatory text why it is a REALLY good idea to use visudo. (LP #11620) Forwarded upstream: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=269 - debian/rules: Disable lecture, enable tty_tickets by default. - debian/rules: Configure less confusing default password prompt to point out that it is sudo asking for the user's password, as opposed to another program like ssh, or asking for the root password. (LP #8556) Forwarded to Debian #343268. - Add debian/sudo_root.8: Explanation of root handling through sudo. Install it in debian/rules. - sudo.c: If the user successfully authenticated and he is in the 'admin' group, then create a stamp ~/.sudo_as_admin_successful. Our default bash profile checks for this and displays a short intro about sudo if the flag is not present. * New upstream version 1.6.9 fixes the following bugs: - Does not ask for password any more if stdin is not a terminal. (LP: #130636) - sudo -k/-K does not fail any more if timestamp is in the future. (LP: #43233) * Drop our very intrusive patch for selectively cleaning the environment based on whether the user can execute all commands or only some. Debian and upstream now default to cleaning the environment unconditionally and provide option -E and the SETENV tag to override it. Instead, do a tinpy patch to parse.yacc which enables SETENV implicitly for 'ALL' commands. Forwarded upstream: http://www.gratisoft.us/bugzilla/show_bug.cgi?id=268 * sudo.c: Disable i18n for now (upstream enabled it in 1.6.9), since this causes PAM to output localized password prompts, which in turn breaks -p and --with-passprompt, which finally breaks gksu. See http://www.gratisoft.us/bugzilla/show_bug.cgi?id=270 for details.	Martin Pitt	1.6.9p6-1ubuntu1	16 years ago
11	[ Ongoing Merge Process ] [ Ongoing Merge Process ] Merge from debian unstable.	Scott James Remnant	1.6.8p12-4ubuntu1	17 years ago
5	Revert addition of sudo -t, i. e. revert to version 1.6.8p9-... Revert addition of sudo -t, i. e. revert to version 1.6.8p9-3ubuntu1. As per TB discussion, we will not use sudo for implementing https://wiki.ubuntu.com/HideAdminToolsToUsers.	Martin Pitt	1.6.8p9-3ubuntu4	18 years ago
4	debian/init.d: When resetting the timestamps of the tty tags... debian/init.d: When resetting the timestamps of the tty tags, actually touch the files, not the per-user directories. Since bootclean.sh removes /var/run/anyway, this is no big deal, but clean it up anyway for the sake of correctness. (Ubuntu #16594)	Martin Pitt	1.6.8p9-2ubuntu2	18 years ago
3	Add !fqdn to the Defaults so we don't die horribly when loca... Add !fqdn to the Defaults so we don't die horribly when localhost doesn't resolve (Ubuntu: 2772)	Thom May	1.6.8p5-1ubuntu2	19 years ago
2	Disable lecture by default. (Warty #987) Disable lecture by default. (Warty #987)	Thom May	1.6.7p5-1ubuntu4	19 years ago
1	Import upstream version 1.6.7p5 Import upstream version 1.6.7p5	Thom May	upstream-1.6.7p5	19 years ago