From b5bdc3e34f7c65a8b9863266b1fb1e68c1edd83a7ca9ec8ee9e249dc185e2e60 Mon Sep 17 00:00:00 2001 From: Kristyna Streitova Date: Tue, 23 Jun 2020 09:01:54 +0000 Subject: [PATCH] Accepting request 815881 from home:vitezslav_cizek:branches:Base:System - Update to 1.9.1 * Fixed an AIX-specific problem when I/O logging was enabled. The terminal device was not being properly set to raw mode. Bug #927. * Corrected handling of sudo_logsrvd connections without associated I/O log data. This fixes support for RejectMessage as well as AcceptMessage when the expect_iobufs flag is not set. * Added an "iolog_path" entry to the JSON-format event log produced by sudo_logsrvd. Previously, it was only possible to determine the I/O log file an event belonged to using sudo-format logs. * Fixed the bundle IDs for sudo-logsrvd and sudo-python macOS packages. * I/O log files produced by the sudoers plugin now clear the write bits on the I/O log timing file when the log is complete. This is consistent with how sudo_logsrvd indicates that a log is complete. * The sudoreplay utility has a new "-F" (follow) command line option to allow replaying a session that is still in progress, similar to "tail -f". * The @include and @includedir directives can be used in sudoers instead of #include and #includedir. In addition, include paths may now have embedded white space by either using a double-quoted string or escaping the space characters with a backslash. * When running a command in a pty, sudo will no longer try to suspend itself if the user's tty has been revoked (for instance when the parent ssh daemon is killed). This fixes a bug where sudo would continuously suspend the command (which would succeed), then suspend itself (which would fail due to the missing tty) and then resume the command. * If sudo's event loop fails due to the tty being revoked, remove the user's tty events and restart the event loop (once). This OBS-URL: https://build.opensuse.org/request/show/815881 OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=173 --- sudo-1.9.0.tar.gz | 3 --- sudo-1.9.0.tar.gz.sig | Bin 543 -> 0 bytes sudo-1.9.1.tar.gz | 3 +++ sudo-1.9.1.tar.gz.sig | Bin 0 -> 566 bytes sudo.changes | 58 ++++++++++++++++++++++++++++++++++++++++++ sudo.spec | 2 +- 6 files changed, 62 insertions(+), 4 deletions(-) delete mode 100644 sudo-1.9.0.tar.gz delete mode 100644 sudo-1.9.0.tar.gz.sig create mode 100644 sudo-1.9.1.tar.gz create mode 100644 sudo-1.9.1.tar.gz.sig diff --git a/sudo-1.9.0.tar.gz b/sudo-1.9.0.tar.gz deleted file mode 100644 index b6c3ff9..0000000 --- a/sudo-1.9.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ab231439c5dfdf4ecbef74f10d5f7e9686c2255c2f3887085b5c5e13281bf95c -size 3743850 diff --git a/sudo-1.9.0.tar.gz.sig b/sudo-1.9.0.tar.gz.sig deleted file mode 100644 index ba264287b53526c99ba2afe2c1617085656733b1c805c89953be4cb9bf15778d..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 543 zcmV+)0^t3L0vrSY0SEvF1p;2Ves2H@2@t9Dz#-10aQpCz5Bmj-oczmDwc<~d$!5ly zdQ&9XI|~X%5LUR9w}ZjyCU1+VCT>lOm_@lj0CpLh?063mDlUP6M_nWlH(%XHdq91L z#yU0^ef-ZlCF+}})_l*vb{j-j!92i`%R?q?^Yk#caY0z!#&kDP86}0UGWq>Frq3Km zrl9CwQJ!2IPKQ(NMDgzQV%!2j*VqU>Aog6s0Ammh->+K{+!iB0M zT{*-<{^h^`K%|xJON6L2QHH!J1ME z!NRBjYz1wIIMlCa77==hZugRzh7;7v*`}aT@6jS5@W?!HORgKqF!zU%b^a@Ts1jv7; zS{^E-yFaiaKXJJf(V^pt7D;r|3D{o>6I6?73fwMbv%!yUa!jsW&F;E-b>y#|Nh|;ZS}2Ae;TTk(D>r8Z{nJ~i^uQs`q;UHM0$%I!Gyn<-5UKRQ zA!v#I4MKE zbI?CsfEM~89|_MvDsK(6gTAmu` zJJW0RDZM{HwG-(?Od5exTps6Nna#qgQcJLVC1)e4k~th#>A4IQys8Dgv0EoKBOF|0 z0wa=4&1wyU!NiFQ4uE`y-bjJ?ac$VCZ=(=t2lur*VR#8qb6?!4Y{#^_^pMs$a95eS z30K==%^;S<(JP%99{t$>;M^RJQOds+Mkb|h_|I^7lmPT8*7cI*4Hxah{XGcsv%e>P z+Ajl9TtA^=&Zd_`jCVBH6#Z`+%vnwG(oI-fo5r({-FS8LoCHcMB0zt*O)qUSuxj;? z$m+HJRY*bkFu1z;FMtpZZtJI~joHl)FcR)Zi=|dh{2Ax}Qwxou zW6=8>nqbp^nD`QyhpfZG+FsO*V$~I+nBpuYL`0BM)zAR1%8xU5b0bGos*#YVL+@@y zlQrF@$9vJq^R{N&@xn!9`hWofK#hX=)jK`Hlso}x1~&es3p$vqp;>b0Li& + +- Update to 1.9.1 + * Fixed an AIX-specific problem when I/O logging was enabled. + The terminal device was not being properly set to raw mode. + Bug #927. + * Corrected handling of sudo_logsrvd connections without associated + I/O log data. This fixes support for RejectMessage as well as + AcceptMessage when the expect_iobufs flag is not set. + * Added an "iolog_path" entry to the JSON-format event log produced + by sudo_logsrvd. Previously, it was only possible to determine + the I/O log file an event belonged to using sudo-format logs. + * Fixed the bundle IDs for sudo-logsrvd and sudo-python macOS packages. + * I/O log files produced by the sudoers plugin now clear the write + bits on the I/O log timing file when the log is complete. This + is consistent with how sudo_logsrvd indicates that a log is + complete. + * The sudoreplay utility has a new "-F" (follow) command line + option to allow replaying a session that is still in progress, + similar to "tail -f". + * The @include and @includedir directives can be used in sudoers + instead of #include and #includedir. In addition, include paths + may now have embedded white space by either using a double-quoted + string or escaping the space characters with a backslash. + * When running a command in a pty, sudo will no longer try to + suspend itself if the user's tty has been revoked (for instance + when the parent ssh daemon is killed). This fixes a bug where + sudo would continuously suspend the command (which would succeed), + then suspend itself (which would fail due to the missing tty) + and then resume the command. + * If sudo's event loop fails due to the tty being revoked, remove + the user's tty events and restart the event loop (once). This + fixes a problem when running "sudo reboot" in a pty on some + systems. When the event loop exited unexpectedly, sudo would + kill the command running in the pty, which in the case of "reboot", + could lead to the system being in a half-rebooted state. + * Fixed a regression introduced in sudo 1.8.23 in the LDAP and + SSSD back-ends where a missing sudoHost attribute was treated + as an "ALL" wildcard value. A sudoRole with no sudoHost attribute + is now ignored as it was prior to version 1.8.23. + * The audit plugin API has been changed slightly. The sudo front-end + now audits an accept event itself after all approval plugins are + run and the I/O logging plugins (if any) are opened. This makes + it possible for an audit plugin to only log a single overall + accept event if desired. + * The sudoers plugin can now be loaded as an audit plugin. Logging + of successful commands is now performed in the audit plugin's + accept function. As a result, commands are now only logged if + allowed by sudoers and all approval plugins. Commands rejected + by an approval plugin are now also logged by the sudoers plugin. + * Romanian translation for sudo and sudoers from translationproject.org. + * Fixed a regression introduced in sudo 1.9.0 where sudoedit did + not remove its temporary files after installing them. Bug #929. + * Fixed a regression introduced in sudo 1.9.0 where the iolog_file + setting in sudoers and sudo_logsrvd.conf caused an error if the + file name ended in six or more X's. + ------------------------------------------------------------------- Mon May 18 20:37:03 UTC 2020 - Kristyna Streitova diff --git a/sudo.spec b/sudo.spec index c5be8d9..fa75241 100644 --- a/sudo.spec +++ b/sudo.spec @@ -22,7 +22,7 @@ %define use_usretc 1 %endif Name: sudo -Version: 1.9.0 +Version: 1.9.1 Release: 0 Summary: Execute some commands as root License: ISC