Commit Graph

269 Commits

Author SHA256 Message Date
60c0ac4137 Accepting request 622342 from home:bmwiedemann:branches:Base:System
Build with make -B to make package build reproducible

e.g. diff had a locale.c vs ./locale.c:

/usr/sbin/visudo differs in ELF section .rodata
@@ -13,8 +13,8 @@ 
  20120 636d6e64 5f616c6c 6f776564 00000000  cmnd_allowed....
  20130 66696e64 5f706174 6800676f 6f647061  find_path.goodpa
  20140 74682e63 00000000 7375646f 5f676f6f  th.c....sudo_goo
- 20150 64706174 68006c6f 63616c65 2e630043  dpath.locale.c.C
- 20160 00000000 00000000 25733a20 75736572  ........%s: user
+ 20150 64706174 68002e2f 6c6f6361 6c652e63  dpath../locale.c
+ 20160 00430000 00000000 25733a20 75736572  .C......%s: user
  20170 206c6f63 616c6520 25732c20 7375646f   locale %s, sudo
  20180 65727320 6c6f6361 6c652025 73000000  ers locale %s...
  20190 25733a20 73657474 696e6720 6c6f6361  %s: setting loca

OBS-URL: https://build.opensuse.org/request/show/622342
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=141
2018-07-20 11:29:06 +00:00
Dominique Leuenberger
d506443bb6 Accepting request 603566 from Base:System
OBS-URL: https://build.opensuse.org/request/show/603566
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=96
2018-05-06 12:59:52 +00:00
25170bef0d Accepting request 603193 from home:stroeder:branches:Base:System
- Update to 1.8.23
  * primarily a bug fix release
  * new cvtsudoers utility (replaces sudoers2ldif) and converts
    between sudoers formats and perform some basic filtering.
  * removed obsolete sudoers2ldif-env.patch

OBS-URL: https://build.opensuse.org/request/show/603193
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=139
2018-05-03 08:02:38 +00:00
Dominique Leuenberger
2d560cb03b Accepting request 597343 from Base:System
OBS-URL: https://build.opensuse.org/request/show/597343
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=95
2018-04-23 13:24:41 +00:00
b023d1651d Accepting request 597150 from home:kstreitova:branches:Base:System
- integrate pam_keyinit pam module [bsc#1081947]
  * add sudo-i.pamd PAM configuration file and install it as
    /etc/pam.d/sudo-i
  * add "session optional pam_keyinit.so revoke" to sudo.pamd and
    "session optional pam_keyinit.so force revoke" to sudo-i.pamd
  * add "--with-pam-login" build option to enable specific PAM
    session for "sudo -i"
- make pam configuration files (noreplace)
- reorganize Sources

OBS-URL: https://build.opensuse.org/request/show/597150
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=137
2018-04-17 08:06:20 +00:00
Dominique Leuenberger
2b209e9f64 Accepting request 594820 from Base:System
OBS-URL: https://build.opensuse.org/request/show/594820
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=94
2018-04-16 10:43:13 +00:00
3af71ea9da Accepting request 593440 from home:kukuk:branches:Base:System
- Use %license instead of %doc [bsc#1082318]

OBS-URL: https://build.opensuse.org/request/show/593440
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=135
2018-04-09 09:41:40 +00:00
Dominique Leuenberger
f828090e27 Accepting request 578010 from Base:System
- Fix sudo prompt: escape %p into %%p to ensure 'p' is not wrapped
  and interpreted as being an rpm variable (boo#1081470).

OBS-URL: https://build.opensuse.org/request/show/578010
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=93
2018-02-19 12:03:47 +00:00
6eb28ea1f9 Accepting request 577967 from home:dimstar:Factory
- Fix sudo prompt: escape %p into %%p to ensure 'p' is not wrapped
  and interpreted as being an rpm variable (boo#1081470).

OBS-URL: https://build.opensuse.org/request/show/577967
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=133
2018-02-19 10:49:40 +00:00
Dominique Leuenberger
0dea457431 Accepting request 576060 from Base:System
OBS-URL: https://build.opensuse.org/request/show/576060
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=92
2018-02-16 20:40:11 +00:00
733596dd0b Accepting request 576059 from home:kstreitova:branches:Base:System
- The sudo distribution files are now signed with a new pgp key.
  Refresh sudo.keyring

- Update to 1.8.22 [bsc#1080793]

OBS-URL: https://build.opensuse.org/request/show/576059
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=131
2018-02-13 12:26:57 +00:00
fc0b553ce4 Accepting request 568794 from home:avindra
- Update to 1.8.22
  * Commands run in the background from a script run via sudo will
    no longer receive SIGHUP when the parent exits and I/O logging
    is enabled
  * A particularly offensive insult is now disabled by default
  * The description of sudo -i now correctly documents that the
    env_keep and env_check sudoers options are applied to the
    environment
  * Fixed a crash when the system's host name is not set
  * The sudoers2ldif script now handles #include and #includedir
    directives.
  * Fixed a bug where sudo would silently exit when the command
    was not allowed by sudoers and the passwd_tries sudoers option
    was set to a value less than one.
  * Fixed a bug with the listpw and verifypw sudoers options and
    multiple sudoers sources. If the option is set to all a
    password should be required unless none of a user's sudoers
    entries from any source require authentication.
  * Fixed a bug with the listpw and verifypw sudoers options in
    the LDAP and SSSD back-ends. If the option is set to any and
    the entry contained multiple rules, only the first matching
    rule was checked. If an entry contained more than one matching
    rule and the first rule required authentication but a
    subsequent rule did not, sudo would prompt for a password when
    it should not have.
  * When running a command as the invoking user (not root), sudo
    would execute the command with the same group vector it was
    started with. Sudo now executes the command with a new group
    vector based on the group database which is consistent with how
    su(1) operates.
  * Fixed a double free in the SSSD back-end that could occur when
    ipa_hostname is present in sssd.conf and is set to an unqualified
    host name.
  * When I/O logging is enabled, sudo will now write to the terminal
    even when it is a background process. Previously, sudo would only
    write to the tty when it was the foreground process when I/O
    logging was enabled. If the TOSTOP terminal flag is set, sudo
    will suspend the command (and then itself) with the SIGTTOU signal.
  * A new authfail_message sudoers option that overrides the default
    N incorrect password attempt(s).
  * An empty sudoRunAsUser attribute in the LDAP and SSSD backends
    will now match the invoking user. This is more consistent with
    how an empty runas user in the sudoers file is treated.
  * Documented that in check mode, visudo does not check the owner /
    mode on files specified with the -f flag
  * It is now an error to specify the runas user as an empty string
    on the command line. Previously, an empty runas user was treated
    the same as an unspecified runas user
  * When timestamp_type option is set to tty and a terminal is
    present, the time stamp record will now include the start time
    of the session leader. When the timestamp_type option is set
    to ppid or when no terminal is available, the start time of the
    parent process is used instead. This significantly reduces the
    likelihood of a time stamp record being re-used when a user logs
    out and back in again.
  * The sudoers time stamp file format is now documented in the new
    sudoers_timestamp manual.
  * Visudo will now use the SUDO_EDITOR environment variable (if
    present) in addition to VISUAL and EDITOR. 
- rebase sudoers2ldif-env.patch
- cleanup with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/568794
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=130
2018-01-24 11:27:07 +00:00
Dominique Leuenberger
1cde0d82dd Accepting request 556001 from Base:System
OBS-URL: https://build.opensuse.org/request/show/556001
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=91
2017-12-13 10:57:53 +00:00
c2d7e5850a Accepting request 555983 from home:kstreitova:branches:Base:System
- remove sudoers.dist that is not needed [bsc#1071379]

OBS-URL: https://build.opensuse.org/request/show/555983
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=128
2017-12-11 14:43:16 +00:00
Dominique Leuenberger
627619056b Accepting request 526347 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/526347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=90
2017-09-18 17:50:39 +00:00
4817eb67fb Accepting request 525888 from home:kstreitova:branches:Base:System
- remove "--with-insults" and disable insults by default. Now
  insults sets are included but user must enable it in the sudoers
  file [bsc#1053911]

OBS-URL: https://build.opensuse.org/request/show/525888
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=126
2017-09-15 10:12:27 +00:00
Dominique Leuenberger
37c343a593 Accepting request 522271 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/522271
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=89
2017-09-12 17:37:04 +00:00
Vítězslav Čížek
d65790fef1 Accepting request 522266 from home:stroeder:branches:Base:System
- update to 1.8.21p2

OBS-URL: https://build.opensuse.org/request/show/522266
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=124
2017-09-08 09:43:33 +00:00
Dominique Leuenberger
67ef25f26a Accepting request 505125 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/505125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=88
2017-06-29 13:08:51 +00:00
a08fbe3e8f OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=122 2017-06-13 16:29:37 +00:00
Dominique Leuenberger
a94f80e226 Accepting request 500408 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/500408
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=87
2017-06-03 23:48:57 +00:00
Vítězslav Čížek
40ee4d9fc5 Accepting request 500303 from home:stroeder:branches:Base:System
update to 1.8.20p2

OBS-URL: https://build.opensuse.org/request/show/500303
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=120
2017-06-01 13:59:33 +00:00
Dominique Leuenberger
9715fd989f Accepting request 499850 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/499850
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=86
2017-05-31 19:26:18 +00:00
Vítězslav Čížek
aae3725cc0 Accepting request 499849 from home:simotek:branches:Base:System
Security issue please approve

OBS-URL: https://build.opensuse.org/request/show/499849
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=118
2017-05-30 19:30:20 +00:00
Dominique Leuenberger
960d34d01e Accepting request 477786 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/477786
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=85
2017-03-10 20:05:57 +00:00
5350e3c426 Accepting request 477147 from home:kstreitova:branches:Base:System
- update sudo in SLE12SP3 to the latest Factory version [fate#322095]
  * remove sudo-1.8.10p3-CVE-2016-7032.patch [bsc#1007766]
    * fixed in sudo 1.8.15
  * remove sudo-1.8.10p3-CVE-2016-7076.patch [bsc#1007501]
    * fixed in sudo 1.8.18p1
  * remove sudo-1.8.10p3-parse_boottime_properly.patch [bsc#899252]
    * fixed in sudo 1.8.14
  * remove sudo-1.8.10p3-user_groups.patch [bsc#988014]
    * fixed in sudo 1.8.17p1
  * remove sudo-1.8.10p3_pam_groups_upstream.patch [fate#318850]
    * fixed in sudo 1.8.17 
  * remove sudo-1.8.10p3-CVE-2014-9680.patch [bsc#917806]
    * fixed in sudo 1.8.12

OBS-URL: https://build.opensuse.org/request/show/477147
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=116
2017-03-08 15:53:23 +00:00
Dominique Leuenberger
6077721eb4 Accepting request 453713 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/453713
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=84
2017-02-05 14:44:38 +00:00
0b246503a9 Accepting request 453650 from home:kstreitova:branches:Base:System
- add sudo-1.8.19p2-decrement_env_len.patch - In 
  sudo_unsetenv_nodebug(), decrement envp.env_len after removing
  the variable [bsc#981124]
- add sudo-1.8.19p2-dont_overwrite_ret_val.patch - don't overwrite
  the return value of ldap_sasl_interactive_bind_s() by the
  subsequent call to sudo_set_krb5_ccache_name() [bsc#981124]

OBS-URL: https://build.opensuse.org/request/show/453650
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=114
2017-02-01 06:48:54 +00:00
Dominique Leuenberger
1ce25a0e11 Accepting request 450497 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/450497
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=83
2017-01-19 09:34:14 +00:00
c3b3e5cc11 Accepting request 450320 from home:stroeder:branches:Base:System
update to 1.8.19p2

OBS-URL: https://build.opensuse.org/request/show/450320
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=112
2017-01-16 12:29:14 +00:00
e279162d42 Accepting request 448723 from home:kstreitova:branches:Base:System
- add /usr/lib/tmpfiles.d directory to the %files section and fix
  build for SLE12SP2

OBS-URL: https://build.opensuse.org/request/show/448723
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=111
2017-01-05 09:56:38 +00:00
75391bf1c3 Accepting request 447202 from home:stroeder:branches:Base:System
update to 1.8.19p1 (not sure what the deal with /usr/lib/tmpfiles.d on older platforms is)

OBS-URL: https://build.opensuse.org/request/show/447202
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=110
2017-01-02 09:53:20 +00:00
Dominique Leuenberger
360013f607 Accepting request 437696 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/437696
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=82
2016-11-03 10:12:31 +00:00
9052eff5a2 Accepting request 437620 from home:stroeder:branches:Base:System
update to 1.8.18p1

OBS-URL: https://build.opensuse.org/request/show/437620
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=108
2016-10-28 16:10:32 +00:00
Dominique Leuenberger
caccaf6c96 Accepting request 431109 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/431109
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=81
2016-09-30 13:19:43 +00:00
edcbeba015 Accepting request 429188 from home:stroeder:branches:Base:System
update to upstream release 1.8.18

OBS-URL: https://build.opensuse.org/request/show/429188
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=106
2016-09-28 14:48:20 +00:00
Dominique Leuenberger
9d449a4aed Accepting request 404258 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/404258
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=80
2016-07-01 07:53:48 +00:00
f28eb4234b Accepting request 404091 from home:stroeder:branches:Base:System
update to 1.8.17p1

OBS-URL: https://build.opensuse.org/request/show/404091
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=104
2016-06-23 14:49:06 +00:00
2edf02caab Accepting request 403502 from home:stroeder:branches:Base:System
update to upstream release 1.8.17

OBS-URL: https://build.opensuse.org/request/show/403502
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=103
2016-06-19 21:14:17 +00:00
Dominique Leuenberger
7c7881b119 Accepting request 399716 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/399716
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=79
2016-06-07 21:43:29 +00:00
3f2b10cef4 Accepting request 397383 from home:Dremor:branches:Base:System
Adding localized prompt. Note : This prompt seem to be the only one that have been translated (other than the default one)

OBS-URL: https://build.opensuse.org/request/show/397383
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=101
2016-06-02 15:16:26 +00:00
Dominique Leuenberger
a14c583aeb Accepting request 397216 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/397216
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=78
2016-05-25 19:21:28 +00:00
0844eb2aff Accepting request 396745 from home:kstreitova:branches:Base:System
- add "BuildRequires: cyrus-sasl-devel" to enable SASL
  authentication [bnc#979531]

OBS-URL: https://build.opensuse.org/request/show/396745
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=99
2016-05-21 10:08:11 +00:00
Dominique Leuenberger
734cf422f8 Accepting request 392940 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/392940
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=77
2016-05-05 11:18:29 +00:00
2591981f96 Accepting request 392689 from home:kstreitova:branches:Base:System
- add sudo-1.8.16-pam_groups.patch to do group setup in
  policy_init_session() before calling out to the plugin. This makes
  it possible for the pam_group module to change the group in
  pam_setcred() [fate#318850]

OBS-URL: https://build.opensuse.org/request/show/392689
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=97
2016-04-29 18:42:40 +00:00
Dominique Leuenberger
e59e6f6535 Accepting request 376392 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/376392
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=76
2016-03-26 14:11:50 +00:00
e3c141bcbe Accepting request 375498 from home:pluskalm:branches:Base:System
- Add gpg signature
- Use valid category for tests

OBS-URL: https://build.opensuse.org/request/show/375498
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=95
2016-03-21 10:14:29 +00:00
08f8bf6202 Accepting request 374691 from home:stroeder:branches:Base:System
update to 1.8.16

OBS-URL: https://build.opensuse.org/request/show/374691
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=94
2016-03-18 10:09:27 +00:00
Dominique Leuenberger
0da57a3452 Accepting request 342694 from Base:System
1

OBS-URL: https://build.opensuse.org/request/show/342694
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=75
2015-11-12 18:39:25 +00:00
Vítězslav Čížek
48dca19f32 Accepting request 342689 from home:kstreitova:branches:Base:System
- update to 1.8.15:
  * Fixed a bug that prevented sudo from building outside the source 
    tree on some platforms. Bug #708.
  * Fixed the location of the sssd library in the RHEL/Centos packages.
    Bug #710.
  * Fixed a build problem on systems that don't implicitly include
    sys/types.h from other header files. Bug #711.
  * Fixed a problem on Linux using containers where sudo would ignore
    signals sent by a process in a different container.
  * Sudo now refuses to run a command if the PAM session module returns
    an error.
  * When editing files with sudoedit, symbolic links will no longer be
    followed by default. The old behavior can be restored by enabling
    the sudoedit_follow option in sudoers or on a per-command basis with
    the FOLLOW and NOFOLLOW tags. Bug #707.
  * Fixed a bug introduced in version 1.8.14 that caused the last valid
    editor in the sudoers "editor" list to be used by visudo and sudoedit
    instead of the first. Bug #714.
  * Fixed a bug in visudo that prevented the addition of a final newline
    to edited files without one.
  * Fixed a bug decoding certain base64 digests in sudoers when the
    intermediate format included a '=' character.
  * Individual records are now locked in the time stamp file instead of
    the entire file. This allows sudo to avoid prompting for a password
    multiple times on the same terminal when used in a pipeline.
    In other words, sudo cat foo | sudo grep bar now only prompts for
    the password once. Previously, both sudo processes would prompt for
    a password, often making it impossible to enter. Bug #705.
  * Fixed a bug where sudo would fail to run commands as a non-root user
    on systems that lack both setresuid() and setreuid(). Bug #713.

OBS-URL: https://build.opensuse.org/request/show/342689
OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=92
2015-11-06 12:38:32 +00:00