2007-01-16 00:38:14 +01:00
|
|
|
#
|
2008-04-25 16:46:55 +02:00
|
|
|
# spec file for package sudo (Version 1.6.9p15)
|
2007-01-16 00:38:14 +01:00
|
|
|
#
|
2008-03-21 04:40:40 +01:00
|
|
|
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
2007-01-16 00:38:14 +01:00
|
|
|
# This file and all modifications and additions to the pristine
|
|
|
|
# package are under the same license as the package itself.
|
|
|
|
#
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
#
|
|
|
|
|
|
|
|
# norootforbuild
|
|
|
|
|
2008-03-21 04:40:40 +01:00
|
|
|
|
2007-01-16 00:38:14 +01:00
|
|
|
Name: sudo
|
|
|
|
BuildRequires: openldap2-devel pam-devel postfix
|
2007-01-26 23:12:53 +01:00
|
|
|
PreReq: coreutils
|
2008-04-25 16:46:55 +02:00
|
|
|
Version: 1.6.9p15
|
2008-05-07 00:15:06 +02:00
|
|
|
Release: 5
|
2007-10-04 03:12:16 +02:00
|
|
|
AutoReqProv: on
|
2007-01-16 00:38:14 +01:00
|
|
|
Group: System/Base
|
2007-07-18 23:01:14 +02:00
|
|
|
License: BSD 3-Clause
|
2007-10-04 03:12:16 +02:00
|
|
|
Url: http://www.sudo.ws/
|
2007-01-16 00:38:14 +01:00
|
|
|
Summary: Execute some commands as root
|
|
|
|
Source0: %{name}-%{version}.tar.bz2
|
|
|
|
Source1: %{name}-%{version}.pamd
|
|
|
|
Source2: README.SUSE
|
2007-07-27 02:11:20 +02:00
|
|
|
Patch1: %{name}-%{version}-defaults.diff
|
|
|
|
Patch2: %{name}-%{version}-sudoers.diff
|
|
|
|
Patch3: %{name}-%{version}-__P.diff
|
|
|
|
Patch4: %{name}-%{version}-strip.diff
|
2008-03-21 04:40:40 +01:00
|
|
|
Patch5: %{name}-%{version}-secure_path.diff
|
|
|
|
Patch6: %{name}-%{version}-ldap.diff
|
|
|
|
Patch7: %{name}-%{version}-env.diff
|
2008-05-07 00:15:06 +02:00
|
|
|
Patch8: %{name}-%{version}-pam_rhost.diff
|
2007-01-16 00:38:14 +01:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
|
|
|
|
|
|
%description
|
|
|
|
Sudo is a command that allows users to execute some commands as root.
|
|
|
|
The /etc/sudoers file (edited with 'visudo') specifies which users have
|
|
|
|
access to sudo and which commands they can run. Sudo logs all its
|
|
|
|
activities to syslogd, so the system administrator can keep an eye on
|
|
|
|
things. Sudo asks for the password for initializing a check period of a
|
|
|
|
given time N (where N is defined at installation and is set to 5
|
|
|
|
minutes by default).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Authors:
|
|
|
|
--------
|
|
|
|
Jeff Nieusma <nieusma@rootgroup.com>
|
|
|
|
David Hieb <davehieb@rootgroup.com>
|
|
|
|
Ian McCloghrie <ian@ucsd.edu>
|
|
|
|
|
|
|
|
%prep
|
|
|
|
%setup -q
|
|
|
|
%patch1
|
|
|
|
%patch2
|
2007-07-27 02:11:20 +02:00
|
|
|
%patch3
|
2007-01-16 00:38:14 +01:00
|
|
|
%patch4
|
|
|
|
%patch5
|
|
|
|
%patch6
|
|
|
|
%patch7
|
2008-05-07 00:15:06 +02:00
|
|
|
%patch8
|
2007-01-16 00:38:14 +01:00
|
|
|
cp %{S:1} %{S:2} .
|
|
|
|
|
|
|
|
%build
|
|
|
|
%ifarch s390 s390x
|
|
|
|
F_PIE=-fPIE
|
|
|
|
%else
|
|
|
|
F_PIE=-fpie
|
|
|
|
%endif
|
2007-07-27 02:11:20 +02:00
|
|
|
export CFLAGS="$RPM_OPT_FLAGS -Wall $F_PIE -DLDAP_DEPRECATED"
|
|
|
|
export LDFLAGS="-pie"
|
|
|
|
%configure \
|
|
|
|
--libexecdir=%{_libexecdir}/sudo \
|
|
|
|
--with-noexec=%{_libexecdir}/sudo/sudo_noexec.so \
|
|
|
|
--with-logfac=auth \
|
|
|
|
--with-insults \
|
|
|
|
--with-all-insults \
|
|
|
|
--with-ignore-dot \
|
|
|
|
--with-tty-tickets \
|
|
|
|
--enable-shell-sets-home \
|
|
|
|
--with-sudoers-mode=0440 \
|
|
|
|
--with-pam \
|
|
|
|
--with-ldap \
|
|
|
|
--with-env-editor \
|
2007-08-15 20:37:18 +02:00
|
|
|
--without-secure-path \
|
2007-08-12 11:46:56 +02:00
|
|
|
--with-passprompt='%%p\x27s password:'
|
2007-01-16 00:38:14 +01:00
|
|
|
make %{?jobs:-j%jobs}
|
|
|
|
|
|
|
|
%install
|
|
|
|
make DESTDIR=$RPM_BUILD_ROOT install
|
|
|
|
install -d -m 700 $RPM_BUILD_ROOT/var/run/sudo
|
|
|
|
install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/pam.d
|
|
|
|
install -m 644 sudo-%{version}.pamd $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/sudo
|
2007-01-26 23:12:53 +01:00
|
|
|
install -m 755 sudoers2ldif $RPM_BUILD_ROOT%{_sbindir}/sudoers2ldif
|
2007-07-27 02:11:20 +02:00
|
|
|
rm -f $RPM_BUILD_ROOT%{_bindir}/sudoedit
|
|
|
|
ln -sf %{_bindir}/sudo $RPM_BUILD_ROOT%{_bindir}/sudoedit
|
2007-01-16 00:38:14 +01:00
|
|
|
|
2007-01-26 23:12:53 +01:00
|
|
|
%post
|
|
|
|
chmod 0440 %{_sysconfdir}/sudoers
|
|
|
|
|
2007-01-16 00:38:14 +01:00
|
|
|
%clean
|
|
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
|
|
|
|
%files
|
|
|
|
%defattr(-,root,root)
|
2007-10-04 03:12:16 +02:00
|
|
|
%doc BUGS CHANGES HISTORY LICENSE PORTING README README.LDAP README.SUSE TROUBLESHOOTING *.pod
|
2007-01-16 00:38:14 +01:00
|
|
|
%doc %{_mandir}/man?/*
|
2007-07-27 02:11:20 +02:00
|
|
|
%config(noreplace) %attr(0440,root,root) %{_sysconfdir}/sudoers
|
|
|
|
%config %{_sysconfdir}/pam.d/sudo
|
2007-01-16 00:38:14 +01:00
|
|
|
%attr(4755,root,root) %{_bindir}/sudo
|
|
|
|
%{_bindir}/sudoedit
|
|
|
|
%{_sbindir}/*
|
2007-07-27 02:11:20 +02:00
|
|
|
%{_libexecdir}/sudo
|
2007-01-16 00:38:14 +01:00
|
|
|
/var/run/sudo
|
2007-12-06 01:36:36 +01:00
|
|
|
|
2007-07-18 23:01:14 +02:00
|
|
|
%changelog
|
2008-05-07 00:15:06 +02:00
|
|
|
* Tue May 06 2008 prusnak@suse.cz
|
|
|
|
- do not set PAM_RHOST (pam_rhost.diff) [bnc#386587]
|
2008-04-25 16:46:55 +02:00
|
|
|
* Thu Apr 24 2008 prusnak@suse.cz
|
|
|
|
- updated to 1.6.9p15
|
|
|
|
* updated libtool to version 1.5.26
|
|
|
|
* fixed printing of default SELinux role and type in -V mode
|
|
|
|
* the HOME environment variable is once again preserved by default,
|
|
|
|
as per the documentation
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Mar 19 2008 prusnak@suse.cz
|
|
|
|
- updated to 1.6.9p14
|
|
|
|
* Moved LDAP options into a table for simplified parsing/setting.
|
|
|
|
* Fixed a problem with how some LDAP options were being applied.
|
|
|
|
* Added support for connecting directly to LDAP servers via SSL
|
|
|
|
in addition to the existing start_tls support.
|
|
|
|
* Fixed a compilation problem on SCO related to how they
|
|
|
|
store the high resolution timestamps in struct stat.
|
|
|
|
* Avoid checking the passwd file group multiple times
|
|
|
|
in the LDAP query when the user's passwd group is also
|
|
|
|
listed in the supplemental group vector.
|
|
|
|
* The URI specifier can now be used in ldap.conf even when
|
|
|
|
the LDAP SDK doesn't support ldap_initialize().
|
|
|
|
* New %%p prompt escape that expands to the user whose password
|
|
|
|
is being prompted, as specified by the rootpw, targetpw and
|
|
|
|
runaspw sudoers flags. Based on a diff from Patrick Schoenfeld.
|
|
|
|
* Added a configure check for the ber_set_option() function.
|
|
|
|
* Fixed a compilation problem with the HP-UX K&R C compiler.
|
|
|
|
* Revamped the Kerberos 5 ticket verification code.
|
|
|
|
* Added support for the checkpeer ldap.conf variable for
|
|
|
|
netscape-based LDAP SDKs.
|
|
|
|
* Fixed a problem where an incomplete password could be echoed
|
|
|
|
to the screen if there was a read timeout.
|
|
|
|
* Sudo will now set the nproc resource limit to unlimited on Linux
|
|
|
|
systems to work around Linux's setuid() resource limit semantics.
|
|
|
|
On PAM systems the resource limits will be reset by pam_limits.so
|
|
|
|
before the command is executed.
|
|
|
|
* SELinux support that can be used to implement role based access
|
|
|
|
control (RBAC). A role and (optional) type may be specified
|
|
|
|
in sudoers or on the command line. These are then used in the
|
|
|
|
security context that the command is run as.
|
|
|
|
* Fixed a Kerberos 5 compilation problem with MIT Kerberos.
|
|
|
|
* Fixed an invalid assumption in the PAM conversation function
|
|
|
|
introduced in version 1.6.9p9. The conversation function may
|
|
|
|
be called for non-password reading purposes as well.
|
|
|
|
* Fixed freeing an uninitialized pointer in -l mode, introduced in
|
|
|
|
version 1.6.9p13.
|
|
|
|
* Check /etc/sudoers after LDAP even if the user was found in LDAP.
|
|
|
|
This allows Defaults options in /etc/sudoers to take effect.
|
|
|
|
* Add missing checks for enforcing mode in SELinux RBAC mode.
|
|
|
|
- dropped obsoleted patch:
|
|
|
|
* prompt.patch (included in update)
|
|
|
|
* Tue Dec 04 2007 prusnak@suse.cz
|
2007-12-06 01:36:36 +01:00
|
|
|
- updated to 1.6.9p9
|
|
|
|
* the ALL command in sudoers now implies SETENV permissions
|
|
|
|
* the command search is now performed using the target user's
|
|
|
|
auxiliary group vector too
|
|
|
|
* when determining if the PAM prompt is the default "Password: ",
|
|
|
|
compare the localized version if possible
|
|
|
|
* added passprompt_override flag to sudoers to cause sudo's prompt
|
|
|
|
to be used in all cases, also set when the -p flag is used
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Nov 06 2007 prusnak@suse.cz
|
2007-11-06 23:24:53 +01:00
|
|
|
- updated to 1.6.9p8
|
|
|
|
* fixed a bug where a sudoers entry with no runas user specified
|
|
|
|
was treated differently from a line with the default runas user
|
|
|
|
explicitly specified
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Oct 30 2007 prusnak@suse.cz
|
2007-10-30 12:29:53 +01:00
|
|
|
- updated to 1.6.9p7
|
|
|
|
* go back to using TCSAFLUSH instead of TCSADRAIN when turning off
|
|
|
|
echo during password reading
|
|
|
|
* fixed a configure bug that was preventing the addition of -lutil
|
|
|
|
for login.conf support on FreeBSD and NetBSD
|
|
|
|
* add configure check for struct in6_addr since some systems define
|
|
|
|
AF_INET6 but have no real IPv6 support
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Oct 10 2007 prusnak@suse.cz
|
2007-10-10 12:10:42 +02:00
|
|
|
- update to 1.6.9p6
|
|
|
|
* worked around bugs in the session support of some PAM
|
|
|
|
implementations
|
|
|
|
* the full tty path is now passed to PAM as well
|
|
|
|
* sudo now only prints the password prompt if the process is in
|
|
|
|
the foreground
|
|
|
|
* inttypes.h is now included when appropriate if it is present
|
|
|
|
* simplified alias allocation in the parser
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Sep 25 2007 prusnak@suse.cz
|
2007-10-04 03:12:16 +02:00
|
|
|
- update to 1.6.9p5
|
|
|
|
* fixed a bug related to supplemental group matching
|
|
|
|
* added IPv6 support from YOSHIFUJI Hideaki
|
|
|
|
* fixed the sudo_noexec installation path
|
|
|
|
* fixed a compilation error on old K&R-style compilers
|
|
|
|
* fixed a bug in the IP address matching introduced by the IPV6 merge
|
|
|
|
* for "visudo -f file" we now use the permissions of the original file
|
|
|
|
and not the hard-coded sudoers owner/group/mode
|
|
|
|
(this makes it possible to use visudo with a revision control system)
|
|
|
|
* fixed sudoedit when used on a non-existent file
|
|
|
|
* regenerated configure using autoconf 2.6.1 and libtool 1.5.24
|
|
|
|
* groups and netgroups are now valid in an LDAP sudoRunas statement
|
|
|
|
- dropped obsolete patches:
|
|
|
|
* groupmatch.patch (included in update)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Aug 28 2007 prusnak@suse.cz
|
2007-08-29 22:45:09 +02:00
|
|
|
- build --without-secure-path
|
|
|
|
- hardcoded secure path changed to /usr/sbin:/bin:/usr/bin:/sbin
|
|
|
|
(secure_path.diff)
|
|
|
|
- user can now add PATH variable to env_keep in /etc/sudoers
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Aug 14 2007 prusnak@suse.cz
|
2007-08-15 20:37:18 +02:00
|
|
|
- added XDG_SESSION_COOKIE to env_keep variables [#298943]
|
|
|
|
- fixed supplemental group matching (groupmatch.patch)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Sat Aug 11 2007 schwab@suse.de
|
2007-08-12 11:46:56 +02:00
|
|
|
- Avoid command line parsing bug in autoconf < 2.59c.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Jul 31 2007 prusnak@suse.cz
|
2007-08-03 23:18:41 +02:00
|
|
|
- updated to 1.6.9p2
|
|
|
|
* fixed a crash in the error logging function
|
|
|
|
* worked around a crash when no tty was present in some PAM
|
|
|
|
implementations
|
|
|
|
* fixed updating of the saved environment when the environ pointer
|
|
|
|
gets changed out from underneath us
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Jul 24 2007 prusnak@suse.cz
|
2007-07-27 02:11:20 +02:00
|
|
|
- updated to 1.6.9
|
|
|
|
* added to the list of variables to remove from the environment
|
|
|
|
* fixed a Kerberos V security issue that could allow a user to
|
|
|
|
authenticate using a fake KDC
|
|
|
|
* PAM is now the default on systems where it is supported
|
|
|
|
* removed POSIX saved uid use; the stay_setuid option now requires
|
|
|
|
the setreuid() or setresuid() functions to work
|
|
|
|
* fixed fd leak when lecture file option is enabled
|
|
|
|
* PAM fixes
|
|
|
|
* security fix for Kerberos5
|
|
|
|
* fixed securid5 authentication
|
|
|
|
* added fcntl F_CLOSEM support to closefrom()
|
|
|
|
* sudo now uses the supplemental group vector for matching
|
|
|
|
* added more environment variables to remove by default
|
|
|
|
* mail from sudo now includes an Auto-Submitted: auto-generated header
|
|
|
|
* reworked the environment handling code
|
|
|
|
* remove the --with-execv option, it was not useful
|
|
|
|
* use TCSADRAIN instead of TCSAFLUSH in tgetpass() since some OSes
|
|
|
|
have issues with TCSAFLUSH
|
|
|
|
* use glob(3) instead of fnmatch(3) for matching pathnames
|
|
|
|
* reworked the syslog long line splitting code based on changes
|
|
|
|
from Eygene Ryabinkin
|
|
|
|
* visudo will now honor command line arguments in the EDITOR or VISUAL
|
|
|
|
environment variables if env_editor is enabled
|
|
|
|
* LDAP now honors rootbinddn, timelimit and bind_timelimit in /etc/ldap.conf
|
|
|
|
* For LDAP, do a sub tree search instead of a base search (one level in
|
|
|
|
the tree only) for sudo right objects
|
|
|
|
* env_reset option is now enabled by default
|
|
|
|
* moved LDAP schema data into separate files
|
|
|
|
* sudo no longer assumes that gr_mem in struct group is non-NULL
|
|
|
|
* added support for setting environment variables on the command line
|
|
|
|
if the command has the SETENV attribute set in sudoers
|
|
|
|
* added a -E flag to preserve the environment if the SETENV attribute
|
|
|
|
has been set
|
|
|
|
* sudoers2ldif script now parses Runas users
|
|
|
|
* -- flag now behaves as documented
|
|
|
|
* sudo -k/-K no longer cares if the timestamp is in the future
|
|
|
|
* when searching for the command, sudo now uses the effective gid of
|
|
|
|
the runas user
|
|
|
|
* sudo no longer updates the timestamp if not validated by sudoers
|
|
|
|
* now rebuild environment regardless of how sudo was invoked
|
|
|
|
* more accurate usage() when called as sudoedit
|
|
|
|
* command line environment variables are now treated like normal
|
|
|
|
environment variables unless the SETENV tag is set
|
|
|
|
* better explanation of environment handling in the sudo man page
|
|
|
|
- changed '/usr/bin/env perl' to '/usr/bin/env' in sudoers2ldif
|
|
|
|
script (env.diff)
|
|
|
|
- dropped obsoleted patches:
|
|
|
|
* sudo-1.6.8p12-conf.diff
|
|
|
|
* sudo-1.6.8p12-configure.diff
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Jul 17 2007 prusnak@suse.cz
|
2007-07-18 23:01:14 +02:00
|
|
|
- added note about special input method variables into /etc/sudoers
|
|
|
|
(sudoers.diff) [#222728]
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Jan 26 2007 prusnak@suse.cz
|
2007-01-26 23:12:53 +01:00
|
|
|
- packaged script sudoers2ldif
|
|
|
|
* can be used for importing /etc/sudoers to LDAP
|
|
|
|
* more info at http://www.sudo.ws/sudo/readme_ldap.html
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jan 24 2007 prusnak@suse.cz
|
2007-01-26 23:12:53 +01:00
|
|
|
- added sudoers permission change to %%post section of spec file
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Nov 30 2006 prusnak@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- package /etc/sudoers as 0440 [Fate#300934]
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Nov 29 2006 prusnak@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- protect locale-related environment variables from resetting (sudoers.diff) [#222728]
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Oct 04 2006 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- enable LDAP support (#159774)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jun 14 2006 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Fix quoting in configure script.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Mar 08 2006 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- don't limit access to local group users (#151938)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Jan 27 2006 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- set environment and sudo search PATH to SECURE_PATH
|
|
|
|
only when env_reset (#145687)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 26 2006 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Fix syntax error in /etc/sudoers.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 26 2006 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- fix PATH always reset (#145687)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jan 25 2006 mls@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- converted neededforbuild to BuildRequires
|
2008-03-21 04:40:40 +01:00
|
|
|
* Sun Jan 15 2006 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Don't strip binaries.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Jan 10 2006 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- fix CVE-2005-4158 (#140300)
|
|
|
|
* compile with --with-secure-path
|
|
|
|
* use always_set_home and env_reset by default
|
|
|
|
- document purpose of the default asking for root password
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Dec 21 2005 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to 1.6.8p12
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Dec 09 2005 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- disabled selinux
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Aug 02 2005 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to 1.6.8p9
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Jun 20 2005 anicka@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- build position independent binaries
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Feb 28 2005 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to 1.6.8p7
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Nov 15 2004 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Use common PAM config files
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Sep 13 2004 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- undef __P first
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Apr 06 2004 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- fix default permissions of sudo
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Mar 26 2004 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- added postfix to neededforbuild
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Feb 25 2004 lnussel@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Add comment and warning for 'Defaults targetpw' to config file
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 29 2004 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Fix sudo configuration broken by last patch
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jan 28 2004 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Add SELinux patch
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 22 2004 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- package /etc/sudoers as 0640
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Jan 16 2004 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Add pam-devel to neededforbuild
|
2008-03-21 04:40:40 +01:00
|
|
|
* Sun Jan 11 2004 adrian@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- build as user
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Nov 07 2003 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Fix quoting in configure script.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Sep 10 2003 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- move the defaults to better place in /etc/sudoers (#30282)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Aug 25 2003 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to 1.6.7p5
|
|
|
|
* Fixed a problem with large numbers
|
|
|
|
of environment variables.
|
|
|
|
- more useful defaults (#28056)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed May 14 2003 mjancar@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to version 1.6.7p4
|
2008-03-21 04:40:40 +01:00
|
|
|
* Fri Feb 07 2003 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Use pam_unix2.so instead of pam_unix.so
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jun 05 2002 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- updated to version 1.6.6
|
|
|
|
- removed obsolete heap-overflow fix in prompt patch
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Apr 22 2002 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- fixed a heap-overflow (prompt patch)
|
|
|
|
- fixed prompt behaviour, %% is always translated to %% (prompt patch)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Feb 12 2002 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- insults are really off by default now [#13134]
|
|
|
|
- sudo.pamd moved from patch to sources
|
|
|
|
- used %%defattr(-,root,root)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 24 2002 postadal@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- updated to version 1.6.5p2
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 17 2002 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- updated to version 1.6.5p1
|
|
|
|
- removed obsolete security patch (to do not run mailer as root),
|
|
|
|
sudo runs mailer again as root but with hard-coded environment
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jan 02 2002 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- aplied security patch from Sebastian Krahmer <krahmer@suse.de>
|
|
|
|
to do not run mailer as root
|
|
|
|
- NOTIFY_BY_EMAIL enabled
|
2008-04-25 16:46:55 +02:00
|
|
|
* Wed Oct 31 2001 bjacke@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- make /etc/sudoers (noreplace)
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Aug 15 2001 pmladek@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- updated to version 1.6.3p7
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Aug 14 2001 ro@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Don't use absolute paths to PAM modules in PAM config files
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Feb 27 2001 pblaha@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- update on 1.6.3p6 for fix potential security problems
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Jun 26 2000 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Add %%suse_update_config.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu May 04 2000 smid@suse.cz
|
2007-01-16 00:38:14 +01:00
|
|
|
- upgrade to 1.6.3
|
|
|
|
- buildroot added
|
2008-03-21 04:40:40 +01:00
|
|
|
* Tue Apr 04 2000 uli@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- added "--with-env-editor" to configure call
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Mar 01 2000 schwab@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- Specfile cleanup, remove Makefile.Linux
|
|
|
|
- /usr/man -> /usr/share/man
|
2008-03-21 04:40:40 +01:00
|
|
|
* Mon Sep 13 1999 bs@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- ran old prepare_spec on spec file to switch to new prepare_spec.
|
2008-03-21 04:40:40 +01:00
|
|
|
* Wed Jun 09 1999 kukuk@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to version 1.5.9p1
|
|
|
|
- enable PAM
|
2008-03-21 04:40:40 +01:00
|
|
|
* Thu Jan 02 1997 florian@suse.de
|
2007-01-16 00:38:14 +01:00
|
|
|
- update to version 1.5.2
|
|
|
|
- sudo has changed a lot, please check the sudo documentation
|