dnl

dnl Use the top-level autogen.sh script to generate configure and config.h.in

dnl

dnl SPDX-License-Identifier: ISC

dnl

dnl Copyright (c) 1994-1996, 1998-2021 Todd C. Miller <[email protected]>

dnl

dnl Permission to use, copy, modify, and distribute this software for any

dnl purpose with or without fee is hereby granted, provided that the above

dnl copyright notice and this permission notice appear in all copies.

dnl

dnl THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES

dnl WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF

dnl MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR

dnl ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES

dnl WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN

dnl ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF

dnl OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

dnl

AC_PREREQ([2.70])

AC_INIT([sudo], [1.9.7p1], [https://bugzilla.sudo.ws/], [sudo])

AC_CONFIG_HEADERS([config.h pathnames.h])

AC_CONFIG_SRCDIR([src/sudo.c])

AC_CONFIG_AUX_DIR([scripts])

dnl

dnl Variables that get substituted in the Makefile and man pages

dnl

AC_SUBST([SHELL])

AC_SUBST([LIBTOOL])

AC_SUBST([CFLAGS])

AC_SUBST([PROGS])

AC_SUBST([CPPFLAGS])

AC_SUBST([LDFLAGS])

AC_SUBST([SUDO_LDFLAGS])

AC_SUBST([SUDOERS_LDFLAGS])

AC_SUBST([LIBUTIL_LDFLAGS])

AC_SUBST([ZLIB_LDFLAGS])

AC_SUBST([LT_LDFLAGS])

AC_SUBST([LT_LDDEP])

AC_SUBST([LT_LDEXPORTS])

AC_SUBST([LT_STATIC])

AC_SUBST([LT_DEP_LIBS])

AC_SUBST([COMMON_OBJS])

AC_SUBST([SUDOERS_OBJS])

AC_SUBST([SUDO_OBJS])

AC_SUBST([LIBS])

AC_SUBST([SUDO_LIBS])

AC_SUBST([SUDOERS_LIBS])

AC_SUBST([STATIC_SUDOERS])

AC_SUBST([NET_LIBS])

AC_SUBST([AFS_LIBS])

AC_SUBST([REPLAY_LIBS])

AC_SUBST([GETGROUPS_LIB])

AC_SUBST([AUTH_OBJS])

AC_SUBST([MANTYPE])

AC_SUBST([MANDIRTYPE])

AC_SUBST([MANCOMPRESS])

AC_SUBST([MANCOMPRESSEXT])

AC_SUBST([SHLIB_ENABLE])

AC_SUBST([SHLIB_MODE])

AC_SUBST([SUDOERS_MODE])

AC_SUBST([SUDOERS_UID])

AC_SUBST([SUDOERS_GID])

AC_SUBST([DEVEL])

AC_SUBST([BAMAN])

AC_SUBST([LCMAN])

AC_SUBST([PSMAN])

AC_SUBST([SEMAN])

AC_SUBST([devdir])

AC_SUBST([mansectsu])

AC_SUBST([mansectform])

AC_SUBST([NOEXECFILE])

AC_SUBST([NOEXECDIR])

AC_SUBST([noexec_file])

AC_SUBST([sesh_file])

AC_SUBST([INSTALL_BACKUP])

AC_SUBST([INSTALL_NOEXEC])

AC_SUBST([CHECK_NOEXEC])

AC_SUBST([NOEXEC_MODULE])

AC_SUBST([DONT_LEAK_PATH_INFO])

AC_SUBST([BSDAUTH_USAGE])

AC_SUBST([SELINUX_USAGE])

AC_SUBST([LDAP])

AC_SUBST([LOGINCAP_USAGE])

AC_SUBST([ZLIB])

AC_SUBST([ZLIB_SRC])

AC_SUBST([LIBTOOL_DEPS])

AC_SUBST([CONFIGURE_ARGS])

AC_SUBST([LIBDL])

AC_SUBST([LIBRT])

AC_SUBST([LIBINTL])

AC_SUBST([LIBMD])

AC_SUBST([LIBTLS])

AC_SUBST([LIBPTHREAD])

AC_SUBST([SUDO_NLS])

AC_SUBST([LOCALEDIR_SUFFIX])

AC_SUBST([COMPAT_TEST_PROGS])

AC_SUBST([SUDOERS_TEST_PROGS])

AC_SUBST([CROSS_COMPILING])

AC_SUBST([ASAN_LDFLAGS])

AC_SUBST([ASAN_CFLAGS])

AC_SUBST([PIE_LDFLAGS])

AC_SUBST([PIE_CFLAGS])

AC_SUBST([SSP_LDFLAGS])

AC_SUBST([SSP_CFLAGS])

AC_SUBST([INIT_SCRIPT])

AC_SUBST([INIT_DIR])

AC_SUBST([RC_LINK])

AC_SUBST([COMPAT_EXP])

AC_SUBST([TMPFILES_D])

AC_SUBST([exampledir])

AC_SUBST([DIGEST])

AC_SUBST([devsearch])

AC_SUBST([SIGNAME])

AC_SUBST([PYTHON_PLUGIN])

AC_SUBST([PYTHON_PLUGIN_SRC])

AC_SUBST([LOGSRV])

AC_SUBST([LOGSRV_SRC])

AC_SUBST([LOGSRVD_SRC])

AC_SUBST([LOGSRVD_CONF])

AC_SUBST([LIBLOGSRV])

AC_SUBST([PPFILES])

AC_SUBST([FUZZ_ENGINE])

AC_SUBST([FUZZ_LD])

dnl

dnl Variables that get substituted in docs (not overridden by environment)

dnl

AC_SUBST([iolog_dir])dnl real initial value from SUDO_IO_LOGDIR

AC_SUBST([log_dir])dnl real initial value from SUDO_LOGDIR

AC_SUBST([logpath])dnl real initial value from SUDO_LOGFILE

AC_SUBST([relay_dir])dnl real initial value from SUDO_RELAY_DIR

AC_SUBST([rundir])dnl real initial value from SUDO_RUNDIR

AC_SUBST([vardir])dnl real initial value from SUDO_VARDIR

AC_SUBST([timeout])

AC_SUBST([password_timeout])

AC_SUBST([sudo_umask])

AC_SUBST([umask_override])

AC_SUBST([passprompt])

AC_SUBST([long_otp_prompt])

AC_SUBST([lecture])

AC_SUBST([logfac])

AC_SUBST([goodpri])

AC_SUBST([badpri])

AC_SUBST([loglen])

AC_SUBST([ignore_dot])

AC_SUBST([mail_no_user])

AC_SUBST([mail_no_host])

AC_SUBST([mail_no_perms])

AC_SUBST([mailto])

AC_SUBST([mailsub])

AC_SUBST([badpass_message])

AC_SUBST([fqdn])

AC_SUBST([runas_default])

AC_SUBST([env_editor])

AC_SUBST([env_reset])

AC_SUBST([passwd_tries])

AC_SUBST([timestamp_type])

AC_SUBST([insults])

AC_SUBST([root_sudo])

AC_SUBST([path_info])

AC_SUBST([ldap_conf])

AC_SUBST([ldap_secret])

AC_SUBST([sssd_lib])

AC_SUBST([nsswitch_conf])

AC_SUBST([netsvc_conf])

AC_SUBST([secure_path])

AC_SUBST([editor])

AC_SUBST([pam_session])

AC_SUBST([pam_login_service])

AC_SUBST([plugindir])

#

# Begin initial values for man page substitution

#

iolog_dir=/var/log/sudo-io

log_dir=/var/log

logpath=/var/log/sudo.log

relay_dir=/var/log/sudo_logsrvd

rundir=/var/run/sudo

vardir=/var/adm/sudo

timeout=5

password_timeout=5

sudo_umask=0022

umask_override=off

passprompt="Password: "

long_otp_prompt=off

lecture=once

logfac=auth

goodpri=notice

badpri=alert

loglen=80

ignore_dot=off

mail_no_user=on

mail_no_host=off

mail_no_perms=off

mailto=root

mailsub="*** SECURITY information for %h ***"

badpass_message="Sorry, try again."

fqdn=off

runas_default=root

env_editor=on

env_reset=on

editor=vi

passwd_tries=3

timestamp_type=tty

insults=off

root_sudo=on

path_info=on

ldap_conf=/etc/ldap.conf

ldap_secret=/etc/ldap.secret

netsvc_conf=/etc/netsvc.conf

noexec_file="$libexecdir/sudo/sudo_noexec.so"

sesh_file="$libexecdir/sudo/sesh"

nsswitch_conf=/etc/nsswitch.conf

secure_path="not set"

pam_session=on

pam_login_service=sudo

plugindir="$libexecdir/sudo"

DIGEST=digest.lo

devsearch="/dev/pts:/dev/vt:/dev/term:/dev/zcons:/dev/pty:/dev"

#

# End initial values for man page substitution

#

dnl

dnl Initial values for Makefile variables listed above

dnl May be overridden by environment variables..

dnl

INSTALL_BACKUP=

INSTALL_NOEXEC=

CHECK_NOEXEC=

NOEXEC_MODULE=-module

exampledir='$(docdir)/examples'

devdir='$(srcdir)'

PROGS="sudo"

: ${MANDIRTYPE='man'}

: ${SHLIB_MODE='0644'}

: ${SUDOERS_MODE='0440'}

: ${SUDOERS_UID='0'}

: ${SUDOERS_GID='0'}

DEVEL=

LDAP="#"

BAMAN=0

LCMAN=0

PSMAN=0

SEMAN=0

LIBINTL=

LIBMD=

LIBTLS=

ZLIB=

ZLIB_SRC=

AUTH_OBJS=

AUTH_REG=

AUTH_EXCL=

AUTH_EXCL_DEF=

AUTH_DEF=passwd

SUDO_NLS=disabled

LOCALEDIR_SUFFIX=

LT_LDEXPORTS="-export-symbols \$(shlib_exp)"

LT_LDDEP="\$(shlib_exp)"

OS_INIT=os_init_common

INIT_SCRIPT=

INIT_DIR=

RC_LINK=

COMPAT_EXP=

SIGNAME=

FUZZ_ENGINE=

FUZZ_LD='$(CC)'

dnl

dnl Other variables

dnl

WEAK_ALIAS=no

CHECKSHADOW=true

shadow_funcs=

shadow_libs=

TMPFILES_D=

CONFIGURE_ARGS="$@"

PYTHON_PLUGIN=#

LOGSRVD=

LOGSRVD_SRC=logsrvd

LOGSRV_SRC=lib/logsrv

LOGSRVD_CONF='$(srcdir)/sudo_logsrvd.conf'

LIBLOGSRV='$(top_builddir)/lib/logsrv/liblogsrv.la'

PPFILES='$(srcdir)/etc/sudo.pp'

dnl

dnl LD_PRELOAD equivalents

dnl

RTLD_PRELOAD_VAR="LD_PRELOAD"

RTLD_PRELOAD_ENABLE_VAR=

RTLD_PRELOAD_DELIM=":"

RTLD_PRELOAD_DEFAULT=

dnl

dnl libc replacement functions live in libsudo_util.a

dnl

AC_CONFIG_LIBOBJ_DIR(lib/util)

dnl

dnl We must call AC_USE_SYSTEM_EXTENSIONS before the compiler is run.

dnl

AC_USE_SYSTEM_EXTENSIONS

#

# Prior to sudo 1.8.7, sudo stored libexec files in $libexecdir.

# Starting with sudo 1.8.7, $libexecdir/sudo is used so strip

# off an extraneous "/sudo" from libexecdir.

#

case "$libexecdir" in

*/sudo)

AC_MSG_WARN([libexecdir should not include the "sudo" subdirectory])

libexecdir=`expr "$libexecdir" : '\\(.*\\)/sudo$'`

;;

esac

dnl

dnl Deprecated --with options (these all warn or generate an error)

dnl

AC_ARG_WITH(otp-only, [AS_HELP_STRING([--with-otp-only], [deprecated])],

[case $with_otp_only in

yes) with_passwd="no"

AC_MSG_NOTICE([--with-otp-only option deprecated, treating as --without-passwd])

;;

esac])

AC_ARG_WITH(alertmail, [AS_HELP_STRING([--with-alertmail], [deprecated])],

[case $with_alertmail in

*) with_mailto="$with_alertmail"

AC_MSG_NOTICE([--with-alertmail option deprecated, treating as --mailto])

;;

esac])

AC_ARG_WITH(pc-insults, [AS_HELP_STRING([--with-pc-insults], [deprecated])],

[case $with_pc_insults in

yes) enable_offensive_insults=no

AC_MSG_NOTICE([--with-pc-insults option deprecated, it is now the default])

;;

no) enable_offensive_insults=yes

AC_MSG_NOTICE([--without-pc-insults option deprecated, use --enable-offensive-insults])

;;

esac])

dnl

dnl Options for --with

dnl

AC_ARG_WITH(devel, [AS_HELP_STRING([--with-devel], [add development options])],

[case $with_devel in

yes) AC_MSG_NOTICE([setting up for development: -Wall, flex, yacc])

AX_APPEND_FLAG([-DSUDO_DEVEL], [CPPFLAGS])

DEVEL="true"

devdir=.

;;

no) ;;

*) AC_MSG_WARN([ignoring unknown argument to --with-devel: $with_devel])

;;

esac])

AC_ARG_WITH(CC, [AS_HELP_STRING([--with-CC], [C compiler to use])],

[case $with_CC in

*) AC_MSG_ERROR([the --with-CC option is no longer supported, please pass CC=$with_CC to configure instead.])

;;

esac])

AC_ARG_WITH(rpath, [AS_HELP_STRING([--with-rpath], [deprecated, use --disable-rpath])],

[AC_MSG_WARN([--with-rpath deprecated, rpath is now the default])])

AC_ARG_WITH(blibpath, [AS_HELP_STRING([--with-blibpath[[=PATH]]], [deprecated])],

[AC_MSG_WARN([--with-blibpath deprecated, use --with-libpath])])

dnl

dnl Handle BSM auditing support.

dnl

AC_ARG_WITH(bsm-audit, [AS_HELP_STRING([--with-bsm-audit], [enable BSM audit support])],

[case $with_bsm_audit in

yes) AC_DEFINE(HAVE_BSM_AUDIT)

SUDOERS_LIBS="${SUDOERS_LIBS} -lbsm"

SUDOERS_OBJS="${SUDOERS_OBJS} bsm_audit.lo"

;;

no) ;;

*) AC_MSG_ERROR([--with-bsm-audit does not take an argument.])

;;

esac])

dnl

dnl Handle Linux auditing support.

dnl

AC_ARG_WITH(linux-audit, [AS_HELP_STRING([--with-linux-audit], [enable Linux audit support])],

[case $with_linux_audit in

yes) AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[#include <libaudit.h>]], [[int i = AUDIT_USER_CMD; (void)i;]])], [

AC_DEFINE(HAVE_LINUX_AUDIT)

SUDO_LIBS="${SUDO_LIBS} -laudit"

SUDOERS_LIBS="${SUDO_LIBS} -laudit"

SUDOERS_OBJS="${SUDOERS_OBJS} linux_audit.lo"

], [

AC_MSG_ERROR([unable to find AUDIT_USER_CMD in libaudit.h for --with-linux-audit])

])

;;

no) ;;

*) AC_MSG_ERROR([--with-linux-audit does not take an argument.])

;;

esac])

dnl

dnl Handle Solaris auditing support.

dnl

AC_ARG_WITH(solaris-audit, [AS_HELP_STRING([--with-solaris-audit], [enable Solaris audit support])],

[case $with_solaris_audit in

yes) AC_DEFINE(HAVE_SOLARIS_AUDIT)

SUDOERS_LIBS="${SUDOERS_LIBS} -lbsm"

SUDOERS_OBJS="${SUDOERS_OBJS} solaris_audit.lo"

;;

no) ;;

*) AC_MSG_ERROR([--with-solaris-audit does not take an argument.])

;;

esac])

dnl

dnl Handle SSSD support.

dnl

AC_ARG_WITH(sssd, [AS_HELP_STRING([--with-sssd], [enable SSSD support])],

[case $with_sssd in

yes) SUDOERS_OBJS="${SUDOERS_OBJS} sssd.lo"

case "$SUDOERS_OBJS" in

*ldap_util.lo*) ;;

*) SUDOERS_OBJS="${SUDOERS_OBJS} ldap_util.lo";;

esac

AC_DEFINE(HAVE_SSSD)

;;

no) ;;

*) AC_MSG_ERROR([--with-sssd does not take an argument.])

;;

esac])

AC_ARG_WITH(sssd-conf, [AS_HELP_STRING([--with-sssd-conf], [path to the SSSD config file])])

sssd_conf="/etc/sssd/sssd.conf"

test -n "$with_sssd_conf" && sssd_conf="$with_sssd_conf"

SUDO_DEFINE_UNQUOTED(_PATH_SSSD_CONF, "$sssd_conf", [Path to the SSSD config file])

AC_ARG_WITH(sssd-lib, [AS_HELP_STRING([--with-sssd-lib], [path to the SSSD library])])

sssd_lib="\"LIBDIR\""

test -n "$with_sssd_lib" && sssd_lib="$with_sssd_lib"

SUDO_DEFINE_UNQUOTED(_PATH_SSSD_LIB, "$sssd_lib", [Path to the SSSD library])

AC_ARG_WITH(incpath, [AS_HELP_STRING([--with-incpath], [additional places to look for include files])],

[case $with_incpath in

yes) AC_MSG_ERROR([must give --with-incpath an argument.])

;;

no) AC_MSG_ERROR([--without-incpath not supported.])

;;

*) AC_MSG_NOTICE([adding ${with_incpath} to CPPFLAGS])

for i in ${with_incpath}; do

AX_APPEND_FLAG([-I${i}], [CPPFLAGS])

done

;;

esac])

AC_ARG_WITH(libpath, [AS_HELP_STRING([--with-libpath], [additional places to look for libraries])],

[case $with_libpath in

yes) AC_MSG_ERROR([must give --with-libpath an argument.])

;;

no) AC_MSG_ERROR([--without-libpath not supported.])

;;

*) AC_MSG_NOTICE([adding ${with_libpath} to LDFLAGS])

;;

esac])

AC_ARG_WITH(libraries, [AS_HELP_STRING([--with-libraries], [additional libraries to link with])],

[case $with_libraries in

yes) AC_MSG_ERROR([must give --with-libraries an argument.])

;;

no) AC_MSG_ERROR([--without-libraries not supported.])

;;

*) AC_MSG_NOTICE([adding ${with_libraries} to LIBS])

;;

esac])

AC_ARG_WITH(csops, [AS_HELP_STRING([--with-csops], [add CSOps standard options])],

[case $with_csops in

yes) AC_MSG_NOTICE([adding CSOps standard options])

CHECKSIA=false

with_ignore_dot=yes

insults=on

with_classic_insults=yes

with_csops_insults=yes

with_env_editor=yes

: ${mansectsu='8'}

: ${mansectform='5'}

;;

no) ;;

*) AC_MSG_WARN([ignoring unknown argument to --with-csops: $with_csops])

;;

esac])

AC_ARG_WITH(passwd, [AS_HELP_STRING([--without-passwd], [don't use passwd/shadow file for authentication])],

[case $with_passwd in

yes|no) AUTH_DEF=""

test "$with_passwd" = "yes" && AUTH_REG="$AUTH_REG passwd"

;;

*) AC_MSG_ERROR([sorry, --with-passwd does not take an argument.])

;;

esac])

AC_ARG_WITH(skey, [AS_HELP_STRING([--with-skey[[=DIR]]], [enable S/Key support ])],

[case $with_skey in

no) ;;

*) AC_DEFINE(HAVE_SKEY)

AUTH_REG="$AUTH_REG S/Key"

;;

esac])

AC_ARG_WITH(opie, [AS_HELP_STRING([--with-opie[[=DIR]]], [enable OPIE support ])],

[case $with_opie in

no) ;;

*) AC_DEFINE(HAVE_OPIE)

AUTH_REG="$AUTH_REG NRL_OPIE"

;;

esac])

AC_ARG_WITH(long-otp-prompt, [AS_HELP_STRING([--with-long-otp-prompt], [use a two line OTP (skey/opie) prompt])],

[case $with_long_otp_prompt in

yes) AC_DEFINE(LONG_OTP_PROMPT)

long_otp_prompt=on

;;

no) long_otp_prompt=off

;;

*) AC_MSG_ERROR([--with-long-otp-prompt does not take an argument.])

;;

esac])

AC_ARG_WITH(SecurID, [AS_HELP_STRING([--with-SecurID[[=DIR]]], [enable SecurID support])],

[case $with_SecurID in

no) ;;

*) AC_DEFINE(HAVE_SECURID)

AUTH_EXCL="$AUTH_EXCL SecurID"

;;

esac])

AC_ARG_WITH(fwtk, [AS_HELP_STRING([--with-fwtk[[=DIR]]], [enable FWTK AuthSRV support])],

[case $with_fwtk in

no) ;;

*) AC_DEFINE(HAVE_FWTK)

AUTH_EXCL="$AUTH_EXCL FWTK"

;;

esac])

AC_ARG_WITH(kerb5, [AS_HELP_STRING([--with-kerb5[[=DIR]]], [enable Kerberos V support])],

[case $with_kerb5 in

no) ;;

*) AUTH_REG="$AUTH_REG kerb5"

;;

esac])

AC_ARG_WITH(aixauth, [AS_HELP_STRING([--with-aixauth], [enable AIX general authentication support])],

[case $with_aixauth in

yes) AUTH_EXCL="$AUTH_EXCL AIX_AUTH";;

no) ;;

*) AC_MSG_ERROR([--with-aixauth does not take an argument.])

;;

esac])

AC_ARG_WITH(pam, [AS_HELP_STRING([--with-pam], [enable PAM support])],

[case $with_pam in

yes) AUTH_EXCL="$AUTH_EXCL PAM";;

no) ;;

*) AC_MSG_ERROR([--with-pam does not take an argument.])

;;

esac])

AC_ARG_WITH(AFS, [AS_HELP_STRING([--with-AFS], [enable AFS support])],

[case $with_AFS in

yes) AC_DEFINE(HAVE_AFS)

AUTH_REG="$AUTH_REG AFS"

;;

no) ;;

*) AC_MSG_ERROR([--with-AFS does not take an argument.])

;;

esac])

AC_ARG_WITH(DCE, [AS_HELP_STRING([--with-DCE], [enable DCE support])],

[case $with_DCE in

yes) AC_DEFINE(HAVE_DCE)

AUTH_REG="$AUTH_REG DCE"

;;

no) ;;

*) AC_MSG_ERROR([--with-DCE does not take an argument.])

;;

esac])

AC_ARG_WITH(logincap, [AS_HELP_STRING([--with-logincap], [enable BSD login class support])],

[case $with_logincap in

yes|no) ;;

*) AC_MSG_ERROR([--with-logincap does not take an argument.])

;;

esac])

AC_ARG_WITH(bsdauth, [AS_HELP_STRING([--with-bsdauth], [enable BSD authentication support])],

[case $with_bsdauth in

yes) AUTH_EXCL="$AUTH_EXCL BSD_AUTH";;

no) ;;

*) AC_MSG_ERROR([--with-bsdauth does not take an argument.])

;;

esac])

AC_ARG_WITH(project, [AS_HELP_STRING([--with-project], [enable Solaris project support])],

[case $with_project in

yes|no) ;;

no) ;;

*) AC_MSG_ERROR([--with-project does not take an argument.])

;;

esac])

AC_ARG_WITH(lecture, [AS_HELP_STRING([--without-lecture], [don't print lecture for first-time sudoer])],

[case $with_lecture in

yes|short|always) lecture=once

;;

no|none|never) lecture=never

AC_DEFINE(NO_LECTURE)

;;

*) AC_MSG_ERROR([unknown argument to --with-lecture: $with_lecture])

;;

esac])

AC_ARG_WITH(logging, [AS_HELP_STRING([--with-logging], [log via syslog, file, or both])],

[case $with_logging in

yes) AC_MSG_ERROR([must give --with-logging an argument.])

;;

no) AC_MSG_ERROR([--without-logging not supported.])

;;

syslog) AC_DEFINE(LOGGING, SLOG_SYSLOG)

;;

file) AC_DEFINE(LOGGING, SLOG_FILE)

;;

both) AC_DEFINE(LOGGING, SLOG_BOTH)

;;

*) AC_MSG_ERROR([unknown argument to --with-logging: $with_logging])

;;

esac], [

with_logging=syslog

AC_DEFINE(LOGGING, SLOG_SYSLOG)

])

AC_ARG_WITH(logfac, [AS_HELP_STRING([--with-logfac], [syslog facility to log with (default is "auth")])],

[case $with_logfac in

yes) AC_MSG_ERROR([must give --with-logfac an argument.])

;;

no) AC_MSG_ERROR([--without-logfac not supported.])

;;

authpriv|auth|daemon|user|local0|local1|local2|local3|local4|local5|local6|local7) logfac=$with_logfac

;;

*) AC_MSG_ERROR([$with_logfac is not a supported syslog facility.])

;;

esac])

AC_ARG_WITH(goodpri, [AS_HELP_STRING([--with-goodpri], [syslog priority for commands (def is "notice")])],

[case $with_goodpri in

yes) AC_MSG_ERROR([must give --with-goodpri an argument.])

;;

no) AC_MSG_ERROR([--without-goodpri not supported.])

;;

alert|crit|debug|emerg|err|info|notice|warning)

goodpri=$with_goodpri

;;

*) AC_MSG_ERROR([$with_goodpri is not a supported syslog priority.])

;;

esac])

AC_DEFINE_UNQUOTED(PRI_SUCCESS, "$goodpri", [The syslog priority sudo will use for successful attempts.])

AC_ARG_WITH(badpri, [AS_HELP_STRING([--with-badpri], [syslog priority for failures (def is "alert")])],

[case $with_badpri in

yes) AC_MSG_ERROR([must give --with-badpri an argument.])

;;

no) AC_MSG_ERROR([--without-badpri not supported.])

;;

alert|crit|debug|emerg|err|info|notice|warning)

badpri=$with_badpri

;;

*) AC_MSG_ERROR([$with_badpri is not a supported syslog priority.])

;;

esac])

AC_DEFINE_UNQUOTED(PRI_FAILURE, "$badpri", [The syslog priority sudo will use for unsuccessful attempts/errors.])

AC_ARG_WITH(logpath, [AS_HELP_STRING([--with-logpath], [path to the sudo log file])],

[case $with_logpath in

yes) AC_MSG_ERROR([must give --with-logpath an argument.])

;;

no) AC_MSG_ERROR([--without-logpath not supported.])

;;

esac])

AC_ARG_WITH(loglen, [AS_HELP_STRING([--with-loglen], [maximum length of a log file line (default is 80)])],

[case $with_loglen in

yes) AC_MSG_ERROR([must give --with-loglen an argument.])

;;

no) AC_MSG_ERROR([--without-loglen not supported.])

;;

[[0-9]]*) loglen=$with_loglen

;;

*) AC_MSG_ERROR([you must enter a number, not $with_loglen])

;;

esac])

AC_DEFINE_UNQUOTED(MAXLOGFILELEN, $loglen, [The max number of chars per log file line (for line wrapping).])

AC_ARG_WITH(ignore-dot, [AS_HELP_STRING([--with-ignore-dot], [ignore '.' in the PATH])],

[case $with_ignore_dot in

yes) ignore_dot=on

AC_DEFINE(IGNORE_DOT_PATH)

;;

no) ignore_dot=off

;;

*) AC_MSG_ERROR([--with-ignore-dot does not take an argument.])

;;

esac])

AC_ARG_WITH(mail-if-no-user, [AS_HELP_STRING([--without-mail-if-no-user], [do not send mail if user not in sudoers])],

[case $with_mail_if_no_user in

yes) mail_no_user=on

;;

no) mail_no_user=off

;;

*) AC_MSG_ERROR([--with-mail-if-no-user does not take an argument.])

;;

esac])

if test "$mail_no_user" = "on"; then

AC_DEFINE(SEND_MAIL_WHEN_NO_USER)

fi

AC_ARG_WITH(mail-if-no-host, [AS_HELP_STRING([--with-mail-if-no-host], [send mail if user in sudoers but not for this host])],

[case $with_mail_if_no_host in

yes) mail_no_host=on

AC_DEFINE(SEND_MAIL_WHEN_NO_HOST)

;;

no) mail_no_host=off

;;

*) AC_MSG_ERROR([--with-mail-if-no-host does not take an argument.])

;;

esac])

AC_ARG_WITH(mail-if-noperms, [AS_HELP_STRING([--with-mail-if-noperms], [send mail if user not allowed to run command])],

[case $with_mail_if_noperms in

yes) mail_noperms=on

AC_DEFINE(SEND_MAIL_WHEN_NOT_OK)

;;

no) mail_noperms=off

;;

*) AC_MSG_ERROR([--with-mail-if-noperms does not take an argument.])

;;

esac])

AC_ARG_WITH(mailto, [AS_HELP_STRING([--with-mailto], [who should get sudo mail (default is "root")])],

[case $with_mailto in

yes) AC_MSG_ERROR([must give --with-mailto an argument.])

;;

no) AC_MSG_ERROR([--without-mailto not supported.])

;;

*) mailto=$with_mailto

;;

esac])

AC_DEFINE_UNQUOTED(MAILTO, "$mailto", [The user or email address that sudo mail is sent to.])

AC_ARG_WITH(mailsubject, [AS_HELP_STRING([--with-mailsubject], [subject of sudo mail])],

[case $with_mailsubject in

yes) AC_MSG_ERROR([must give --with-mailsubject an argument.])

;;

no) AC_MSG_WARN([sorry, --without-mailsubject not supported.])

;;

*) mailsub="$with_mailsubject"

;;

esac])

AC_DEFINE_UNQUOTED(MAILSUBJECT, "$mailsub", [The subject of the mail sent by sudo to the MAILTO user/address.])

AC_ARG_WITH(passprompt, [AS_HELP_STRING([--with-passprompt], [default password prompt])],

[case $with_passprompt in

yes) AC_MSG_ERROR([must give --with-passprompt an argument.])

;;

no) AC_MSG_WARN([sorry, --without-passprompt not supported.])

;;

*) passprompt="$with_passprompt"

esac])

AC_DEFINE_UNQUOTED(PASSPROMPT, "$passprompt", [The default password prompt.])

AC_ARG_WITH(badpass-message, [AS_HELP_STRING([--with-badpass-message], [message the user sees when the password is wrong])],

[case $with_badpass_message in

yes) AC_MSG_ERROR([must give --with-badpass-message an argument.])

;;

no) AC_MSG_WARN([sorry, --without-badpass-message not supported.])

;;

*) badpass_message="$with_badpass_message"

;;

esac])

AC_DEFINE_UNQUOTED(INCORRECT_PASSWORD, "$badpass_message", [The message given when a bad password is entered.])

AC_ARG_WITH(fqdn, [AS_HELP_STRING([--with-fqdn], [expect fully qualified hosts in sudoers])],

[case $with_fqdn in

yes) fqdn=on

AC_DEFINE(FQDN)

;;

no) fqdn=off

;;

*) AC_MSG_ERROR([--with-fqdn does not take an argument.])

;;

esac])

AC_ARG_WITH(timedir, [AS_HELP_STRING([--with-timedir=DIR], [deprecated])],

[case $with_timedir in

*) AC_MSG_ERROR([--without-timedir no longer supported, see --with-rundir.])

;;

esac])

AC_ARG_WITH(rundir, [AS_HELP_STRING([--with-rundir=DIR], [directory for sudo-specific files that do not survive a system reboot, e.g. `/var/run/sudo'])],

[case $with_rundir in

yes) AC_MSG_ERROR([must give --with-rundir an argument.])

;;

no) AC_MSG_ERROR([--without-rundir not supported.])

;;

esac])

AC_ARG_WITH(vardir, [AS_HELP_STRING([--with-vardir=DIR], [directory for sudo-specific files that survive a system reboot, e.g. `/var/db/sudo' or `/var/lib/sudo'])],

[case $with_vardir in

yes) AC_MSG_ERROR([must give --with-vardir an argument.])

;;

no) AC_MSG_ERROR([--without-vardir not supported.])

;;

esac])

AC_ARG_WITH(iologdir, [AS_HELP_STRING([--with-iologdir=DIR], [directory to store sudo I/O log files in])],

[case $with_iologdir in

yes) ;;

no) AC_MSG_ERROR([--without-iologdir not supported.])

;;

esac])

AC_ARG_WITH(relaydir, [AS_HELP_STRING([--with-relaydir=DIR], [directory to store sudo_logsrvd relay temporary files in])],

[case $with_relaydir in

yes) ;;

no) AC_MSG_ERROR([--without-relaydir not supported.])

;;

esac])

AC_ARG_WITH(tzdir, [AS_HELP_STRING([--with-tzdir=DIR], [path to the time zone data directory])],

[case $with_tzdir in

yes) AC_MSG_ERROR([must give --with-tzdir an argument.])

;;

esac])

AC_ARG_WITH(sendmail, [AS_HELP_STRING([--with-sendmail], [set path to sendmail])

AS_HELP_STRING([--without-sendmail], [do not send mail at all])],

[case $with_sendmail in

yes) with_sendmail=""

;;

no) ;;

*) SUDO_DEFINE_UNQUOTED(_PATH_SUDO_SENDMAIL, "$with_sendmail")

;;

esac])

AC_ARG_WITH(sudoers-mode, [AS_HELP_STRING([--with-sudoers-mode], [mode of sudoers file (defaults to 0440)])],

[case $with_sudoers_mode in

yes) AC_MSG_ERROR([must give --with-sudoers-mode an argument.])

;;

no) AC_MSG_ERROR([--without-sudoers-mode not supported.])

;;

[[1-9]]*) SUDOERS_MODE=0${with_sudoers_mode}

;;

0*) SUDOERS_MODE=$with_sudoers_mode

;;

*) AC_MSG_ERROR([you must use an octal mode, not a name.])

;;

esac])

AC_ARG_WITH(sudoers-uid, [AS_HELP_STRING([--with-sudoers-uid], [uid that owns sudoers file (defaults to 0)])],

[case $with_sudoers_uid in

yes) AC_MSG_ERROR([must give --with-sudoers-uid an argument.])

;;

no) AC_MSG_ERROR([--without-sudoers-uid not supported.])

;;

[[0-9]]*) SUDOERS_UID=$with_sudoers_uid

;;

*) AC_MSG_ERROR([you must use an unsigned numeric uid, not a name.])

;;

esac])

AC_ARG_WITH(sudoers-gid, [AS_HELP_STRING([--with-sudoers-gid], [gid that owns sudoers file (defaults to 0)])],

[case $with_sudoers_gid in

yes) AC_MSG_ERROR([must give --with-sudoers-gid an argument.])

;;

no) AC_MSG_ERROR([--without-sudoers-gid not supported.])

;;

[[0-9]]*) SUDOERS_GID=$with_sudoers_gid

;;

*) AC_MSG_ERROR([you must use an unsigned numeric gid, not a name.])

;;

esac])

AC_ARG_WITH(umask, [AS_HELP_STRING([--with-umask], [umask with which the prog should run (default is 022)])

AS_HELP_STRING([--without-umask], [Preserves the umask of the user invoking sudo.])],

[case $with_umask in

yes) AC_MSG_ERROR([must give --with-umask an argument.])

;;

no) sudo_umask=0777

;;

[[0-9]]*) sudo_umask=$with_umask

;;

*) AC_MSG_ERROR([you must enter a numeric mask.])

;;

esac])

AC_DEFINE_UNQUOTED(SUDO_UMASK, $sudo_umask, [The umask that the sudo-run prog should use.])

AC_ARG_WITH(umask-override, [AS_HELP_STRING([--with-umask-override], [Use the umask specified in sudoers even if it is less restrictive than the user's.])],

[case $with_umask_override in

yes) AC_DEFINE(UMASK_OVERRIDE)

umask_override=on

;;

no) umask_override=off

;;

*) AC_MSG_ERROR([--with-umask-override does not take an argument.])

;;

esac])

AC_ARG_WITH(runas-default, [AS_HELP_STRING([--with-runas-default], [User to run commands as (default is "root")])],

[case $with_runas_default in

yes) AC_MSG_ERROR([must give --with-runas-default an argument.])

;;

no) AC_MSG_ERROR([--without-runas-default not supported.])

;;

*) runas_default="$with_runas_default"

;;

esac])

AC_DEFINE_UNQUOTED(RUNAS_DEFAULT, "$runas_default", [The user sudo should run commands as by default.])

AC_ARG_WITH(exempt, [AS_HELP_STRING([--with-exempt=group], [no passwd needed for users in this group])],

[case $with_exempt in

yes) AC_MSG_ERROR([must give --with-exempt an argument.])

;;

no) AC_MSG_ERROR([--without-exempt not supported.])

;;

*) AC_DEFINE_UNQUOTED(EXEMPTGROUP, "$with_exempt", [If defined, users in this group need not enter a passwd (ie "sudo").])

;;

esac])

AC_ARG_WITH(editor, [AS_HELP_STRING([--with-editor=path], [Default editor for visudo (defaults to vi)])],

[case $with_editor in

yes) AC_MSG_ERROR([must give --with-editor an argument.])

;;

no) AC_MSG_ERROR([--without-editor not supported.])

;;

*) AC_DEFINE_UNQUOTED(EDITOR, "$with_editor", [A colon-separated list of pathnames to be used as the editor for visudo.])

editor="$with_editor"

;;

esac], [AC_DEFINE(EDITOR, _PATH_VI)])

AC_ARG_WITH(env-editor, [AS_HELP_STRING([--with-env-editor], [Use the environment variable EDITOR for visudo])],

[case $with_env_editor in

yes) env_editor=on

;;

no) env_editor=off

;;

*) AC_MSG_ERROR([--with-env-editor does not take an argument.])

;;

esac])

if test "$env_editor" = "on"; then

AC_DEFINE(ENV_EDITOR)

fi

AC_ARG_WITH(passwd-tries, [AS_HELP_STRING([--with-passwd-tries], [number of tries to enter password (default is 3)])],

[case $with_passwd_tries in

yes) ;;

no) AC_MSG_ERROR([--without-editor not supported.])

;;

[[1-9]]*) passwd_tries=$with_passwd_tries

;;

*) AC_MSG_ERROR([you must enter the number of tries, > 0])

;;

esac])

AC_DEFINE_UNQUOTED(TRIES_FOR_PASSWORD, $passwd_tries, [The number of tries a user gets to enter their password.])

AC_ARG_WITH(timeout, [AS_HELP_STRING([--with-timeout], [minutes before sudo asks for passwd again (def is 5 minutes)])],

[case $with_timeout in

yes) ;;

no) timeout=0

;;

[[0-9]]*) timeout=$with_timeout

;;

*) AC_MSG_ERROR([you must enter the number of minutes.])

;;

esac])

AC_DEFINE_UNQUOTED(TIMEOUT, $timeout, [The number of minutes before sudo asks for a password again.])

AC_ARG_WITH(password-timeout, [AS_HELP_STRING([--with-password-timeout], [passwd prompt timeout in minutes (default is 5 minutes)])],

[case $with_password_timeout in

yes) ;;

no) password_timeout=0

;;

[[0-9]]*) password_timeout=$with_password_timeout

;;

*) AC_MSG_ERROR([you must enter the number of minutes.])

;;

esac])

AC_DEFINE_UNQUOTED(PASSWORD_TIMEOUT, $password_timeout, [The passwd prompt timeout (in minutes).])

AC_ARG_WITH(tty-tickets, [AS_HELP_STRING([--with-tty-tickets], [use a different ticket file for each tty])],