$Id: CHANGELOG,v 1.21 2004/11/15 00:26:22 hbo Exp $ *Thu Nov 11 2004 hbi@egbok.com - 0:2.1.2 Allow for non-root build of the RPM Add "-" param to ss so "ss -" yields target user's environment. Integrate patch from Conrad Link. Using SUGHUP in ssd and ss when enabling non-root users, any member of the ssers group could send SIGHUP to an arbitrary process. Quick fix is to send SIGWINCH instead. Integrate patch from Conrad Link. When the sysadmin forgets 'runas' in the sudoers entry for a non-root ss user, AND specifies a wildcard for the -u parameter (e.g. 'oracle*'), then ss -u oracleFUBAR, (a non-existent user that matches the pattern) would yield a root shell. Fixis to test for failure of the getpw* calls in ss. Fixed bug pointed out by Conrad Link that prevented correct tracking of log sized in ssd *Mon Jun 23 2003 hbo@egbok.com - 0:2.1.1 Add NetBSD support Add binary packages and source ports for *BSD Rename sudoscripters group to ssers Substantial rewrite of INSTALL document Add RELEASENOTES document Force deletion and recreation of /var/run/sudoscript on daemon start sudoscript-2.1.1 release *Fri Jun 13 2003 hbo@egbok.com - 0:2.1.0 Add Solaris package build to Makefile Minor tweak to sudoscriptd-in to make fifodir into a variable sudoscript-2.1.0 release *Wed May 28 2003 hbo@egbok.com - 0:2.1.0.beta1 Add HP-UX install instructions to INSTALL bump rpm version by one to indicated doc change sudoscript-2.1.0beta1 release *Thu May 22 2003 hbo@egbok.com - 0:2.0.3 Implement non-root shells from idea by Donny Jekels Check for running daemon on damon startup Because of above, make a Sudoscript.pm class for shared code. use warnings Close stdin, stdout on each daemon redirect stderr to log files in /var/run/sudoscript Race loss by ss still a problem; implement fix Add -k switch to daemon to kill current daemon Extensively rework documentation Add HP-UX support per Donny Jekels changes *Mon Dec 16 2002 hbo@egbok.com 0:2.0.3 Sudoscript 2.0.3 release Fix bug where ss lost race with logger to set HUP signal handler under heavy system load. Merge patches from Rene Uittenbogaard fixing spelig airurs and tweaking Linux init script *Thu Sep 12 2002 hbo@egbok.com 0:2.0.2 Sudoscript 2.0.2 release Fix bug where logging timestamp was off after August of each year (it looked strange in August as well). *Thu Sep 5 2002 hbo@egbok.com 0:2.0.1 Sudoscript 2.0.1 release Set $0 so ps shows which daemons are running. Fix bug in log rotate that resulted in zombie compressors *Tue Jun 25 2002 hbo@egbok.com - 0:2.0.0 Remove Irix from pod, PORTING and INSTALL Document the --datefmt switch to sudoscriptd Add LICENSE, Artistic GPLv1 and GPLv2. Together these files spell out the dual Perl-like license used by sudoscript *Tue Jun 11 2002 hbo@egbok.com - 0:2.0.0beta2 Use 'script -f' to tell script to flush buffers on Linux. Turn off buffering on the MERGEFIFO on all platforms. Add a logfile announcement of the logger daemon. Modify Merger logfile announcement. Add a --datefmt= flag to sudoscriptd controlling the leading timestamp in the private log file. Choices are: --datefmt=long gives 'Day Mon dd hh:mm:ss TZ ccyy'. --datefmt=sortable gives 'ccyymmddhhmmss'. Anything else (inc. no switch) gives 'Day Mon dd hh:mm:ss'. Fixed a bug where ss would only look at the first line of ps output when looking for sudoscriptd. Only seemed to be a problem on BSD platforms, but maybe that was just my luck. *Tue Jun 4 2002 hbo@egbok.com - 0:2.0.0beta1 Shorten timestamp now that logs also include session ID Fix bug opening FIFO for R/W that prevented system from working on OpenBSD *Thu May 23 2002 hbo@egbok.com - 0:2.0.0alpha4 Ripped out timer code that caused "interrupted system call" error in merger daemon on Solaris Made rotator/compressor do a setsid() to avoid zombies *Wed May 22 2002 hbo@egbok.com - 0:2.0.0alpha3 Fixed Solaris and Irix init scripts to use -HUP. Fixd speling uf roundebooz Added Tommy Smith to contributors Tweaked POD a little *Tue May 21 2002 hbo@egbok.com - 0:2.0.0alpha2 Fixed bug in merger that resulted in 100% CPU utilization Fixed Linux init script to kill -HUP the daemon, triggering the shutdown code alpha2 denoted in RPM version. Tarball name not changing *Tue May 21 2002 hbo@egbok.com - 0:2.0.0alpha Implemented 2.0 architecture. Daemon split into three sections. The master daemon forks a back-end logger to manage the log file. It then opens a front end FIFO, When sudoshell runs, it contacts the master daemon via this FIFO, then does a Posix::pause with a SIGHUP handler. The master daemon forks a session logger, which creates another FIFO whose name is based on sudoshell's user and PID. It sends a SIGHUP to sudoshell then goes to read the FIFO. Sudoshell wakes up and invokes script(1) on the session FIFO. The session logger tags data it receives with a session ID, then writes it to the FIFO owned by the back-end logger. The back-end logger tags the data with a timestamp, and writes it to /var/log/sudoscript. Every 30 seconds, the backend logger checks the size of the log file, and forks a rotater/compressor if the size exceeds 2MB. When sudoshell's script(1) exits, sudoshell informs the master daemon of this and exits. The master daemon sends a SIGHUP to the associated session daemon, which unlinks the session FIFO and exits. If the master daemon receives a SIGHUP, it signals all outstanding session daemons and the backend logger, each of which clean up and exit in response. The master daemon then exits. Branched 1.0 onto BRANCH_1_0 *Thu May 2 2002 hbo@egbok.com - 0:1.0.4 - Release changes detailed below - Reorganize Makefile a lot - Add PROBLEMS doc calling out some shortcomings - Change Makefile to not use sudo when euid is root - per a suggestion from Chan Wilson - Add SGI install instructions to INSTALL - Change Irix install path to /usr/local so as not to conflict - with any SGI Freeware release that might emerge - Update PORCMOLSULB, README and sudoshell POD to reflect the - real explanations of why cd and globbing fail - Hack PORTING to reflect Chan's changes and devel mailing list - Hack Makefile to install on Irix - Add code to recognize Irix for daemon startup from cwilson - Add Irix init script from cwilson - Fix non-functional '|| die' constructs *Tue Apr 23 2002 sudoscript hbo@egbok.com - 0:1.0.3 - *Sigh* Just packaging issues. The previous RPM and dist work fine. - The web page just points to the wrong RPMS and dist. *Tue Apr 23 2002 sudoscript hbo@egbok.com - 0:1.0.2 - Non-security bug in sudoscriptd computation of log file size squashed *Mon Apr 22 2002 hbo@egbok.com - 0:1.0.1 - A couple of functional changes. Mainly a documentation release. - Added PORCMOLSULB.[xml|html|pdf], a paper describing why I wrote - sudoscript. Due for publication in ;login. - use 'ps -auxww' on Linux. Refixes Solaris 7 fix. 8) - use 'ps -ef' rather than 'ps -elf'. Fixes daemon start - from ss on Solaris 7. - Create /var/run and /var/run/sudoscript if they don't exist - Fixes daemon startup from ss on Solaris 7 - Second check of root was redundant - Document uglyness of script(1) output - Fix documentation. Timestamps will NOT help sort out - multiple users. - Handle return value of rotate_log() consistently. * Tue Apr 02 2002 hbo@egbok.com - 0:1.0 - Created version 1.0