root/op/1.30/ChangeLog

Revision 233, 5.9 kB (checked in by athomas, 4 years ago)
  • Added an INSTALL file documenting the usual installation instructions.
  • Default to using Flex, as Lex has internal constraints.
  • Added default op.pam which is now installed if /etc/pam.d exists.
Line 
1 Dave Koblas added the keyword "password" to the list of options
2 accepted by op. This requires the user to supply op with a password
3 before executing the command.  The password can be specified in the
4 op.access file (with "password=") or the user's personal password may
5 be required.
6
7 Howard Owen added the keyword "securid" to the list of options
8 accepted by op. This functions similarly to the "password" option,
9 requiring the user to supply op with his or her current SecurID code before
10 executing the command. If op is compiled without SecurID support, use
11 of this option in op.access will result in an error message and a
12 refusal to execute the corresponding command.
13
14 Alec Thomas added support for user@host and group@host based access, as well
15 as variable expansion in options.
16
17 November 22nd 1997 - op 1.1.1
18 ===============================
19 Break shadow support out from Solaris support. Added SHADOW symbol to the
20 build. It works on Linux 2.0.30. Presumably it still works on Solaris. 8)
21
22 Cleaned up logging code. It was an uncomfortable mess. Slimmed it down some.
23
24 September 13th 2002 - op 1.1.2
25 ==============================
26 Added user@host and group@host based access as well as variable expansion.
27 Changed SHADOW to USE_SHADOW so it doesn't conflict with system defines.
28
29 April 10th 2003 - op 1.1.3
30 ==========================
31 Added a max length arugment to GetField to help prevent buffer overflows.
32 Regular expressions always have ^ prepended and $ appended so that if you put
33 'a' in an rx field it will not match any string with an 'a'. Old behaviour can
34 be emulated with '.*a.*'.
35 Added expiration support to users (user[@host][/expiry]).
36
37 April 16th 2003 - op 1.1.4
38 ==========================
39 Added basic quoted argument passing to exec commands. This allows for complex
40 shell scripts:
41
42         inetd /bin/sh -c '
43                         case $1 in
44                                 on) /usr/sbin/inetd -s ;;
45                                 off) /usr/bin/pkill inetd ;;
46                         esac
47                         ';
48                 users=ROOTUSERS
49                 $1=on|off
50
51 April 17th 2003 - op 1.1.5
52 ==========================
53 Added extensive logging to op. All logging is sent to syslog as auth.notice.
54
55 22/07/03 - op 1.1.6
56 ===================
57 Added PAM support.
58
59 28/10/03 - op 1.1.7
60 ===================
61 Logging now uses auth.level, and level is actually useful.
62
63 06/11/03 - op 1.1.8
64 ===================
65 Fixed a fairly substantial bug where command arguments with multiple variables
66 were not being expanded at all.
67
68 24/01/04 - op 1.1.9
69 ===================
70 Trapping signals (SIGINT, etc.) so that a failed authentication attempt can not
71 be broken out of.
72
73 27/01/04 - op 1.1.10
74 ====================
75 Applied some of the FreeBSD patches, thanks to Cyrille Lefevre (the previous
76 FreeBSD port maintainer) for pointing me to these.
77 Patched a potential buffer overflow, again, picked up by Cyrille.
78 Added lots of checks for allocation failures.
79 Added constraints to as many uses of strcpy/strcat as I could find.
80 Added constraint on number of simultaneous groups a user can be in.
81
82 02/02/04 - op 1.20
83 ==================
84 Fixed a fairly major bug whereby blocked signals were not restored to their
85 original state upon execv'ing the child process.
86
87 Changed version number scheme to match the original op versions, and bumped up
88 to 1.20. This is part of a collaborative effort between myself and Steve
89 Simmons, who is going to add Kerberos support to op in the near future. Welcome
90 Steve.
91
92 23/04/04 - op 1.21
93 ==================
94 Added netgroup support. eg.
95
96         shell /bin/su -; netgroup=op-shell environment
97
98 This is very useful in conjunction with either LDAP or NIS based netgroups.
99
100 03/05/04 - op 1.22
101 ==================
102 Added xauth support. This allows the X authority for the current display to be
103 exported to the destination users X authority database. eg.
104
105         shell  /bin/su -; users=athomas $TERM xauth password
106
107 To enable xauth support, the preprocessor macro XAUTH must be defined as
108 a string pointing to the FULL PATH to the xauth binary.
109
110 04/05/04 - op 1.23
111 ==================
112 The xauth modifier now updates $XAUTHORITY in the child environment.
113 Fixed a bug when setting the GID explicitly.
114
115 06/07/04 - op 1.24
116 ==================
117 The xauth directive can now be given a target user, into whose environment the
118 X authentication information is imported.
119
120 07/04/05 - op 1.26
121 ==================
122 op will now read all config files in /etc/op.d with a .conf extension. This is
123 a clean way of adding extra commands without having to manipulate op.conf.
124 op.conf does not have to be present at all.  Useful for dropping in op config
125 with other packages or when adding config to systems in bulk. Thanks to Kyle
126 Hyland for this idea.
127
128 Also made error reporting a bit smarter when config files are missing or have
129 incorrect permissions.
130
131 07/04/05 - op 1.27/1.28
132 ==================
133 Added ''nolog'' option which suppresses informational logs. Useful for
134 automated jobs to prevent log spam.
135
136 Configuration files in /etc/op.d are now lexically sorted. This allows
137 variables in configuration files to be used deterministically. Commands
138 can also be overridden in this fashion.
139
140 08/04/05 - op 1.29
141 ==================
142 Added -l argument which lists available commands.
143
144 Also added a {{{help="<help>"}}} option which defines the help string displayed
145 by -l.
146
147 Cleaned up the code a bit, adding some basic dynamic array functions instead of
148 replicating the code across multiple areas.
149
150 Closes #4
151
152  27/05/05- op 1.30
153 ==================
154 Fixed use of DEFAULT section, closes #5. Quite a pain in the arse actually.
155
156 Environment variables can now be propagated into child environments even when
157 "environment" is specified. This will override any existing variables.
158
159 Now using vsnprintf rather than snprintf. Correspondingly, changed preprocessor
160 define which may mean build scripts need to be changed.
161
162 Added an INSTALL file documenting the usual installation instructions.
163
164 Default to using Flex, as Lex has internal constraints.
165
166 Added default op.pam which is now installed if /etc/pam.d exists.
167
168 Added patches by Pierre fixing strnprintf issues and a wildcard constraint bug.
169 Thanks Pierre.
Note: See TracBrowser for help on using the browser.