summaryrefslogtreecommitdiffstats
path: root/usr.bin/su
Commit message (Collapse)AuthorAgeFilesLines
...
* Allow a user in group 0 to su(1) to root if their primarysteve1998-05-252-9/+21
| | | | | | | | | group is 0 in /etc/passwd even if they aren't listed as a member in /etc/group. This is more inline with what the group manpage says. PR: 6696 Submitted by: Max Euston <meuston@jmrodgers.com>
* I wonder how I managed to get the krb.h include wrong. Anyway: correct it.guido1997-10-281-2/+2
|
* Add -c option that allows root to specify a login_class.guido1997-10-272-19/+35
|
* Changes for KTH KerberosIV.markm1997-09-282-11/+22
| | | | | | | | | | | Quieten -Wall a bit. From Joe Traister: The previous patch did not propogate the KRBTKFILE environment variable into the new environment when -l is given to su, making it impossible for kdestroy to find the ticket file. This patch corrects that problem as well as the original segfault problem. (Fixes PR 3903)
* PR: docs/4383wosch1997-09-131-5/+14
| | | | | | su manpage ambiguous regarding command prompt Submitted by: sheldonh@iafrica.com
* If elf, don't add libmd.a just because we link against libskey.so.peter1997-09-051-0/+3
| | | | A
* fix a few spelling changesjmg1997-08-301-2/+2
| | | | | | | | Submitted by: Josh Gilliam Closes PR's: 4429, 4431-4438 PS: He has agreed to submit all contrib fixes back to the original author.
* Prevent a NULL dereferencation when given a garbage command line.joerg1997-08-231-2/+5
| | | | | PR: bin/3206 Submitted by: blank@fox.uni-trier.de
* Add usage().charnier1997-08-122-14/+20
|
* Move libmd after all libraries to keep natural libraries orderache1997-05-231-3/+3
|
* login_getclass() -> login_getpwclass().davidn1997-05-101-2/+2
|
* compare return value from getopt against -1 rather than EOF, per the finalimp1997-03-291-2/+2
| | | | posix standard on the topic.
* When group wheel is empty, allow everyone to su to root. This has normallyguido1997-02-242-5/+7
| | | | | | | no conseqeunces as we ship with a non-empty wheel. Closes PR/1882 Submitted by: Arne Henrik Juul <arnej@frida.imf.unit.no>
* Revert $FreeBSD$ to $Id$peter1997-02-221-1/+1
|
* Sort cross references.wosch1997-01-151-4/+4
|
* Fix problem with mask passwd to setusercontext() whichdavidn1997-01-141-4/+4
| | | | prevented uid/group change with non-root target.
* Make the long-awaited change from $Id$ to $FreeBSD$jkh1997-01-142-2/+2
| | | | | | | | This will make a number of things easier in the future, as well as (finally!) avoiding the Id-smashing problem which has plagued developers for so long. Boy, I'm glad we're not using sup anymore. This update would have been insane otherwise.
* Document effect of login class capabilities.davidn1997-01-131-1/+10
|
* Make su login_cap savvy.davidn1997-01-132-32/+121
| | | | | As with login(1), LOGIN_CAP_AUTH is not yet enabled since we don't yet have authorisation modules.
* Export $TERM only if it has been set in our environment.joerg1996-10-071-2/+3
| | | | Detected by: Amancio Hasty
* [HISTORY] command appeared in Version 1 AT&T UNIXwosch1996-08-291-1/+2
| | | | Obtained from: A Quarter Century of UNIX, Peter H. Salus, page 41
* Make su a little less fascist about using Kerberos if it is notmarkm1996-03-111-6/+7
| | | | | | | configured or available. Also fix a _nasty_ bug that would let one in if su -K was used. Any old password would work :-( :-(.
* Better integrate kerberos into su so that if an incorrect Kerberosmarkm1996-03-092-32/+53
| | | | | | | password is entered, the user is not prompted for a password a second time. This closes pr-bin/1006.
* #include <kerberosIV/des.h> -> #include <des.h>markm1996-02-111-1/+1
|
* Make it possible to enable WHEELSU from /etc/make.conf.wollman1995-10-121-1/+4
|
* Kerberos can now deal with multi-homed clients.gibbs1995-10-051-4/+5
| | | | | | | | | | | | | | Kerberos obtains a network address for the local host from the routing tables and uses it consistently for all Kerberos transactions. This ensures that packets only leave the *authenticated* interface. Clients who open and use their own sockets for encrypted or authenticated correspondance to kerberos services should bind their sockets to the same address as that used by kerberos. krb_get_local_addr() and krb_bind_local_addr() allow clients to obtain the local address or bind a socket to the local address used by Kerberos respectively. Reviewed by: Mark Murray <markm>, Garrett Wollman <wollman> Obtained from: concept by Dieter Dworkin Muller <dworkin@village.org>
* Bring Barry Morris' changes from FreeBSD 1.1.5.1 back: pass argumentsjoerg1995-09-062-9/+50
| | | | | | | | | to the target login's shell. This allows for "su -c". Do it right this time and also explain this behaviour in the man page. :) Obtained from: bsm's work in FreeBSD 1.1.5.1
* Check for expired passwords before allowing access to the system.mpp1995-08-281-0/+7
|
* Added support for an LCS-style `wheel su' which allows users in group wheelwollman1995-07-121-6/+36
| | | | | | | | | | to su to root by authenticating as themselves (using a password or S/Key) rather than by using the root password. This is useful in contexts like ours, where a large group of people need root access to a set of machines. (However, the security implications are such that this should not be enabled by default.) The code is conditionalized on WHEELSU.
* Remove trailing whitespace.rgrimes1995-05-302-2/+2
|
* It has always bugged me that ps and w did not display su with tcshjkh1995-04-061-1/+2
| | | | | | | | | | | properly. I know, tcsh is not a "Real Shell". jc p2 :0.0 Tue04PM - -u (tcsh) ^^^ 7173 p2 S+ 0:01.33 -u (tcsh) ^^^ Submitted by: John Capo <jc@irbs.com>
* Change the library order so libcrypt is the last library in the list.nate1995-03-181-2/+2
| | | | | | libskey contains references to _crypt and can't resolve it unless -lcrypt occurs after it in the link command. This only occurs when linking statically.
* Add distribution=krb for P-HKwollman1994-11-201-0/+1
|
* Fixed the PATH and cleanenv setting in su. This was totally broken in theats1994-11-171-3/+3
| | | | 4.4BSD Lite source.
* Include most of the logdaemon v4.4 S/key changespst1994-10-192-8/+8
|
* Add support for s/keyspst1994-09-292-2/+16
|
* First level of changes for bringing in eBones (kerberos).csgr1994-09-291-3/+9
| | | | | | | | - Get rid of inverse logic (NOKERBEROS and NOEBONES) in src/makefile, and replace with MAKE_KERBEROS and MAKE_EBONES. (Far fewer contortions, and both default to off.) IF YOU WANT KERBEROS, YOU HAVE TO EXPLICITLY DEFINE ONE OF THESE. - Make Makefiles kerberos-aware.
* LDADD= -lcryptcsgr1994-08-201-1/+2
| | | | Submitted by: Geoff
* Don't use kerberos yet, we aren't ready.wollman1994-08-051-3/+3
|
* BSD 4.4 Lite Usr.bin Sourcesrgrimes1994-05-273-0/+582
OpenPOWER on IntegriCloud