summaryrefslogtreecommitdiffstats
path: root/usr.bin/su
Commit message (Collapse)AuthorAgeFilesLines
* Remove tcsetpgrp() stuff across suspend/continue because it cause upper levelache2002-07-091-3/+1
| | | | | tcsh killed on resume (fg). It is because tcsh is interactive itself and do its own things with terminal group.
* This is Alexander Kabaev's patch to solve the signal problem with sudillon2002-06-261-0/+11
| | | | | | | (see 'zsh exits upon ^C' thread). This may be temporary be he's been running it for a year without incident so we should be golden with it. Approved by: des
* Backout 1.51 on DES's request.dillon2002-06-261-2/+0
| | | | Approved by: des
* Make our child the leader of its own process group to avoid receivingdes2002-05-291-0/+2
| | | | signals in its stead. This fixes the dread "zsh exits upon ^C" bug.
* Drive-by whitespace cleanup & add NAI copyrightdes2002-05-281-2/+9
|
* Use `The .Nm utility'charnier2002-04-201-2/+3
|
* Fix a few typos.keramida2002-03-301-2/+2
| | | | | | | | | as a user ID -> has a user ID command constitutes of -> command consists of PR: misc/36523 Submitted by: Chris Pepper <pepper@mail.rockefeller.edu> MFC after: 3 days
* Belatedly OpenPAMify. I forgot this patch in last night's megacommit.des2002-03-061-2/+2
| | | | Sponsored by: DARPA, NAI Labs
* Don't set PAM_RHOST, this is a local login.des2002-01-241-5/+1
| | | | Sponsored by: DARPA, NAI Labs
* Remove to-be-default WARNS?=2markm2001-12-121-2/+0
|
* Set BINOWN=root explicitly for setuid root binaries.ru2001-09-131-0/+1
| | | | | | This is not "useless", as one may have non-default setting for BINOWN in make.conf, and we still want these to be installed setuid root in this case.
* Reinstate complete (and now correctly functioning) WARNS=2.markm2001-09-122-9/+11
|
* Back out (with prejudice) the last WARNS=2 fix. I cannot understandmarkm2001-09-072-11/+9
| | | | its failure mode, and will revisit it later.
* WARNS=2 fixes.markm2001-09-042-9/+11
| | | | | | | | The remaining problem of converting highly incompatible pointer types is done by "laundering" the value through a union. This solves the problem (in my own mind) of how a "const char *" _ever_ actually gets a value in a WARNS=2 world.
* Very minor stylistic nit.markm2001-08-201-2/+1
| | | | Discussed with: ru
* Substitute ARGSTR in-place.ru2001-08-151-4/+3
| | | | Forgot trailing newline in usage().
* Fixed the usage() string.ru2001-08-151-1/+3
| | | | | | | | This also reverts change in rev. 1.36 to the documented style of writing usage(). PR: bin/29730 Submitted by: Joseph Mallett <jmallett@xMach.org>
* Set the RUSER for PAM so that (eg) kerberos can set up tickets properly.markm2001-08-111-0/+2
|
* WARNS=2 type cleanup.markm2001-08-112-5/+9
| | | | | | | WARNS=2 cannot be enable because of an unresolvable conflict in arg 2 of execv(). Document this in the Makefile. Reviewed by: bde (su.c only)
* mdoc(7) police: join split punctuation to macro calls.ru2001-08-101-2/+1
|
* Remove whitespace at EOL.dd2001-07-151-5/+5
|
* Deconvolute the authentication mess, and hand total responsiblitymarkm2001-05-263-358/+226
| | | | | | | | | | for authentication to PAM. This meens that WHEELSU-type logic can now be effected in the pam.conf "su" configuration stack. While here, clean up the mess that the code had assumed over years of hacking by folks using different styles. ANSIfy. There is more policy in here that can be handed over to PAM. This will be revisited.
* Tell the user what group they must be in to su to root.obrien2001-05-101-1/+4
| | | | Submitted by: Seth Kingsley <sethk@osd.bsdi.com>
* Dike out Kerberos(IV) support on the grounds that better kerberosmarkm2001-04-281-7/+0
| | | | support can be gotten via PAM.
* Dike out the Kerberos(IV) support on the grounds that better kerberosmarkm2001-04-282-189/+14
| | | | support can be already obtained via PAM.
* Add full PAM support for account management and sessions.markm2001-03-273-64/+230
| | | | | | | The PAM_FAIL_CHECK and PAM_END macros in su.c came from the util-linux package's PAM patches to the BSD login.c Submitted by: "David J. MacKenzie" <djm@web.us.uu.net>
* o Make comment match reality, synch code with comment.rwatson2000-11-301-2/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | o In practice: the comment indicates that all but umask and environmental variables of the users login class are applied when su occurs, unless -m is used to specify a class. This was incorrect; in practice, the uid, gids, resources, and priority were set, and then resources and priority were selectively removed. This meant that some aspects of the user context were not set, including handling of login events (wtmp, utmp), as well as the path specified in login.conf. o I changed it so that the behavior is the same, but instead, LOGIN_SETALL is used, and appropriate flags are removed, including the LOGIN_SETLOGIN and LOGIN_SETPATH entries that were implicitly not present before. I also updated the comment to reflect reality, selecting reality as the "correct" behavior. o This has the practical benefit that as new LOGIN_SET* flags are introduced, they are supported by su unless specifically disabled. For example, of a LOGIN_SETLABEL flag is introduced to support MAC labels determined by the user's login class, then su no longer has to be modified. o It might be desirable to have su use LOGIN_SETPATH depending on its command line parameters, as it might or might not be considered part of the "environment". Obtained from: TrustedBSD Project
* mdoc(7) police: use the new features of the Nm macro.ru2000-11-201-2/+2
|
* Document the ``-'' option and minor re-wording in EXAMPLESmarko2000-08-051-2/+12
|
* Remove single-space hard sentence breaks. These degrade the qualitysheldonh2000-03-011-1/+2
| | | | | of the typeset output, tend to make diffs harder to read and provide bad examples for new-comers to mdoc.
* Use libcrypto in place of libdes.markm2000-02-242-3/+3
|
* Revert the libcrypt/libmd stuff back to how it was. This should not havepeter1999-12-181-2/+2
| | | | | | | | happened as it was working around problems elsewhere (ie: binutils/ld not doing the right thing according to the ELF design). libcrypt has been adjusted to not need the runtime -lmd. It's still not quite right (ld is supposed to work damnit) but at least it doesn't impact all the users of libcrypt in Marcel's cross-build model.
* Add libmd (or move it after libcrypt). We don't want the linker to bemarcel1999-12-161-2/+2
| | | | | smart because it will definitely get it wrong. This popped up during cross-linking.
* Change edistribution to krb4 in preaparation for K5markm1999-09-191-1/+1
|
* Fix Common Error brokenness.markm1999-09-061-2/+2
|
* $Id$ -> $FreeBSD$peter1999-08-283-3/+3
|
* Fixed editing error in previous commit. `-lmd' (link libmd) became `-md'bde1999-08-151-4/+4
| | | | | | | (emulate the 'd' linker (?)). This was most harmful for the NOSHARED=yes case since libskey.o isn't linked to libmd.a. Fixed the usual disorder of DPADD and LDADD, and some tab lossage.
* Axe LOGIN_CAP_AUTH.sheldonh1999-08-132-65/+6
| | | | | | PR: 10115 Reported by: Gene Skonicki <gene@cif.rochester.edu> Requested by: jdp
* Actually fixed ambiguous else. The previous revision had no effect.bde1999-07-021-4/+4
|
* Fix ambigious else.billf1999-07-011-2/+3
| | | | Reviewed By: eivind
* Add JKH's auth.conf parser to turn on/off Kerberos in userlandmarkm1998-10-092-2/+13
|
* Fix bad option processing.roberto1998-09-211-7/+4
| | | | | PR: bin/7986 Submitted by: Dan Nelson <dnelson@emsphone.com>
* Remove useless `BINOWN=root' now that it is the default.obrien1998-09-191-2/+1
|
* Removed a buggy ifdef for not linking libmd explicitly. Explicitbde1998-09-021-9/+3
| | | | | | | linkage is needed for the NOSHARED=YES case, so it is simplest to never depend on the automagic linkage for elf shared libraries. Reviewed by: jdp
* Add $Id$gpalmer1998-08-301-0/+1
|
* Still need -lmd on the alpha as it doesn't have shlibs yetgpalmer1998-08-301-1/+1
|
* BINFORMAT -> OBJFORMAT ready for E-day.jb1998-08-301-1/+1
|
* Fix LIBDIR (for aout/ELF).markm1998-08-061-1/+1
|
* Reword to remove confusion between su(1)'s "-c" option and that of the shelljkoshy1998-06-081-9/+16
| | | | | | being invoked. Add example that clarifies usage of "-c". PR: 6859
* PR: 1904danny1998-05-261-1/+6
| | | | Abort if given uname is > MAXLOGNAME-1
OpenPOWER on IntegriCloud