[sudo-commits] sudo changeset 8251:cad35f0b3ad7

[Todd C. Miller]

changeset:	8251:cad35f0b3ad7 in /home/hg/sudo
details:	http://www.sudo.ws/repos/sudo/rev/cad35f0b3ad7
user:		Todd C. Miller <Todd.Miller at courtesan.com>
date:		Tue Jul 10 12:42:33 2012 -0400

Log Message:
	Move log_denial() calls and logic to log_failure().
	Move authentication failure logging to log_auth_failure().
	Both of these call audit_failure() for us.

	This subtly changes logging for commands that are denied by sudoers
	but where the user failed to enter the correct password.  Previously,
	these would be logged as "N incorrect password attempts" but now
	are logged as "command not allowed".  Fixes bug #563

diffstat:

 plugins/sudoers/auth/sudo_auth.c |  84 ++++++++++++++++++------------------
 plugins/sudoers/check.c          |   5 +-
 plugins/sudoers/logging.c        |  91 +++++++++++++++++++++++++++++++++++++--
 plugins/sudoers/logging.h        |  11 ++--
 plugins/sudoers/sudoers.c        |  37 +++-------------
 plugins/sudoers/sudoers.h        |   5 +-
 6 files changed, 147 insertions(+), 86 deletions(-)