Accepting request 87713 from Base:System
- updated to sudo-1.8.2
* Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
language support (NLS). This can be disabled by passing configure
the --disable-nls option. Sudo will use gettext(), if available,
to display translated messages. All translations are coordinated
via The Translation Project, http://translationproject.org/.
* Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
RTLD_LOCAL. This fixes missing symbol problems in PAM modules
on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
* I/O logging is now supported for commands run in background mode
(using sudo's -b flag).
* Group ownership of the sudoers file is now only enforced when
the file mode on sudoers allows group readability or writability.
* Visudo now checks the contents of an alias and warns about cycles
when the alias is expanded.
* If the user specifes a group via sudo's -g option that matches
the target user's group in the password database, it is now
allowed even if no groups are present in the Runas_Spec.
* The sudo Makefiles now have more complete dependencies which are
automatically generated instead of being maintained manually.
* The "use_pty" sudoers option is now correctly passed back to the
sudo front end. This was missing in previous versions of sudo
1.8 which prevented "use_pty" from being honored.
* "sudo -i command" now works correctly with the bash version
2.0 and higher. Previously, the .bash_profile would not be
sourced prior to running the command unless bash was built with
NON_INTERACTIVE_LOGIN_SHELLS defined.
* When matching groups in the sudoers file, sudo will now match
based on the name of the group instead of the group ID. This can
substantially reduce the number of group lookups for sudoers
OBS-URL: https://build.opensuse.org/request/show/87713
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=39
This commit is contained in:
Lars Vogdt
Git OBS Bridge
commit
20338eda89
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:1fc238c148d369c5610076b351965f852772e6837d9d8884b2eaca41b02d0467
|
||||
size 950324
|
||||
3
sudo-1.8.2.tar.gz
Normal file
3
sudo-1.8.2.tar.gz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:37fe6ee670329bc45937fbe402e847f80b3a0a1c8fc9a66487e92b4b810152b0
|
||||
size 1465051
|
||||
12
sudo-grp-include.patch
Normal file
12
sudo-grp-include.patch
Normal file
@ -0,0 +1,12 @@
|
||||
Index: sudo-1.8.2/common/setgroups.c
|
||||
===================================================================
|
||||
--- sudo-1.8.2.orig/common/setgroups.c
|
||||
+++ sudo-1.8.2/common/setgroups.c
|
||||
@@ -33,6 +33,7 @@
|
||||
#endif /* HAVE_UNISTD_H */
|
||||
#include <errno.h>
|
||||
#include <limits.h>
|
||||
+#include <grp.h>
|
||||
|
||||
#include "missing.h"
|
||||
|
||||
45
sudo.changes
45
sudo.changes
@ -1,3 +1,48 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Oct 13 00:59:49 UTC 2011 - prusnak@opensuse.org
|
||||
|
||||
- updated to sudo-1.8.2
|
||||
* Sudo, visudo, sudoreplay and the sudoers plug-in now have natural
|
||||
language support (NLS). This can be disabled by passing configure
|
||||
the --disable-nls option. Sudo will use gettext(), if available,
|
||||
to display translated messages. All translations are coordinated
|
||||
via The Translation Project, http://translationproject.org/.
|
||||
* Plug-ins are now loaded with the RTLD_GLOBAL flag instead of
|
||||
RTLD_LOCAL. This fixes missing symbol problems in PAM modules
|
||||
on certain platforms, such as FreeBSD and SuSE Linux Enterprise.
|
||||
* I/O logging is now supported for commands run in background mode
|
||||
(using sudo's -b flag).
|
||||
* Group ownership of the sudoers file is now only enforced when
|
||||
the file mode on sudoers allows group readability or writability.
|
||||
* Visudo now checks the contents of an alias and warns about cycles
|
||||
when the alias is expanded.
|
||||
* If the user specifes a group via sudo's -g option that matches
|
||||
the target user's group in the password database, it is now
|
||||
allowed even if no groups are present in the Runas_Spec.
|
||||
* The sudo Makefiles now have more complete dependencies which are
|
||||
automatically generated instead of being maintained manually.
|
||||
* The "use_pty" sudoers option is now correctly passed back to the
|
||||
sudo front end. This was missing in previous versions of sudo
|
||||
1.8 which prevented "use_pty" from being honored.
|
||||
* "sudo -i command" now works correctly with the bash version
|
||||
2.0 and higher. Previously, the .bash_profile would not be
|
||||
sourced prior to running the command unless bash was built with
|
||||
NON_INTERACTIVE_LOGIN_SHELLS defined.
|
||||
* When matching groups in the sudoers file, sudo will now match
|
||||
based on the name of the group instead of the group ID. This can
|
||||
substantially reduce the number of group lookups for sudoers
|
||||
files that contain a large number of groups.
|
||||
* Multi-factor authentication is now supported on AIX.
|
||||
* Added support for non-RFC 4517 compliant LDAP servers that require
|
||||
that seconds be present in a timestamp, such as Tivoli Directory Server.
|
||||
* If the group vector is to be preserved, the PATH search for the
|
||||
command is now done with the user's original group vector.
|
||||
* For LDAP-based sudoers, the "runas_default" sudoOption now works
|
||||
properly in a sudoRole that contains a sudoCommand.
|
||||
* Spaces in command line arguments for "sudo -s" and "sudo -i" are
|
||||
now escaped with a backslash when checking the security policy.
|
||||
- added missing include (grp-include.patch)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri May 20 12:10:45 UTC 2011 - puzel@novell.com
|
||||
|
||||
|
||||
17
sudo.spec
17
sudo.spec
@ -18,17 +18,18 @@
|
||||
|
||||
|
||||
Name: sudo
|
||||
Version: 1.8.1p2
|
||||
Version: 1.8.2
|
||||
Release: 1
|
||||
License: BSD3c(or similar)
|
||||
Summary: Execute some commands as root
|
||||
Url: http://www.sudo.ws/
|
||||
Group: System/Base
|
||||
Source0: http://sudo.ws/sudo/dist/%{name}-%{version}.tar.bz2
|
||||
Source0: http://sudo.ws/sudo/dist/%{name}-%{version}.tar.gz
|
||||
Source1: sudo.pamd
|
||||
Source2: README.SUSE
|
||||
Patch1: sudoers2ldif-env.patch
|
||||
Patch3: sudo-sudoers.patch
|
||||
Patch0: sudoers2ldif-env.patch
|
||||
Patch1: sudo-sudoers.patch
|
||||
Patch2: sudo-grp-include.patch
|
||||
BuildRequires: audit-devel
|
||||
BuildRequires: libselinux-devel
|
||||
BuildRequires: openldap2-devel
|
||||
@ -56,8 +57,9 @@ These header files are needed for building of sudo plugins.
|
||||
|
||||
%prep
|
||||
%setup -q
|
||||
%patch0 -p1
|
||||
%patch1 -p1
|
||||
%patch3 -p1
|
||||
%patch2 -p1
|
||||
|
||||
%build
|
||||
%ifarch s390 s390x %sparc
|
||||
@ -103,6 +105,9 @@ rm -f %{buildroot}%{_docdir}/%{name}/sample.pam
|
||||
rm -f %{buildroot}%{_docdir}/%{name}/sample.syslog.conf
|
||||
rm -f %{buildroot}%{_docdir}/%{name}/schema.OpenLDAP
|
||||
rm -f %{buildroot}%{_libexecdir}/%{name}/sudoers.la
|
||||
%find_lang %{name}
|
||||
%find_lang sudoers
|
||||
cat sudoers.lang >> %{name}.lang
|
||||
|
||||
%post
|
||||
chmod 0440 %{_sysconfdir}/sudoers
|
||||
@ -118,7 +123,7 @@ chmod 0440 %{_sysconfdir}/sudoers
|
||||
%clean
|
||||
rm -rf %{buildroot}
|
||||
|
||||
%files
|
||||
%files -f %{name}.lang
|
||||
%defattr(-,root,root)
|
||||
%doc %{_docdir}/%{name}
|
||||
%doc %{_mandir}/man?/*
|
||||
|
||||
Loading…
Reference in New Issue
Block a user