sudo-rs
sudo-rs copied to clipboard
A memory safe implementation of sudo and su.
The log crate wasn't used for getting logs from dependencies and we only used a small subset of the functionality of the log crate, so removing it simplifies things. The...
Fix the problem by throwing an error if the number is negative or unexpected, added a test too. This is a suggestion only. Thread: https://github.com/trifectatechfoundation/sudo-rs/issues/1311
Change the default so that asterisks are shown when entering passwords. It is still possibly to disable the asterisks by explicitly turning `pwfeedback` off. This fixes a major UX pain...
This pull request replaces `system::time::Duration` with `std::time::Duration`. I couldn't find any code that still uses negative duration, so I replaced it with it's `std` equivalent. The only place, where I'm...
I decided to go with the existing loop style as the `wildcard_match` function for continuity, simplicity, and index control. With this draft I have a few questions: 1. Can I...
I'm working on updating sudo-rs Fedora package to the latest version, and I encountered one new test failure in 0.2.9 (compared to 0.2.6) - from the build log: ``` failures:...
I have the following in root's .bashrc alias vim='TERM=xterm-color vim' export EDITOR=vim Calling visudo-rs complains that it can't find the editor and refuses to start. Commenting out the first of...
The test `test_traverse_secure_open_positive()` at https://github.com/trifectatechfoundation/sudo-rs/blob/main/src/system/audit.rs#L359 makes assumptions about the current directory and its parents. These don't hold in Debian's CI, which runs `cargo test` from outside the (read-only) directory containing...
PAM modules can send a `num_msg`, which is handled improperly by `sudo-rs`, as it is assumed this is a positive number without any checks. Negative PAM message counts cause integer...
**Describe the feature you'd like see implemented in `sudo-rs`** I'd like to be able to use the `!syslog` option from `sudo`. **What problem can be solved with this feature?** I...