OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=18

sudo-1.6.9p17-ldap.diff

@@ -1,8 +1,8 @@
 --- configure.in
 +++ configure.in
-@@ -2325,7 +2325,7 @@
+@@ -2330,7 +2330,7 @@
  
-     SUDO_LIBS="${SUDO_LIBS}${LDAP_LIBS}"
+     SUDO_LIBS="${SUDO_LIBS} ${LDAP_LIBS}"
      LIBS="$_LIBS"
 -    LDFLAGS="$_LDFLAGS"
 +    LDFLAGS="${LDFLAGS} $_LDFLAGS"

sudo-1.6.9p17-secure_path.diff

@@ -22,7 +22,7 @@
      if (path == NULL)
 --- logging.c
 +++ logging.c
-@@ -464,7 +464,7 @@
+@@ -466,7 +466,7 @@
  #ifndef NO_ROOT_MAILER
      static char *root_envp[] = {
  	"HOME=/",

sudo-1.6.9p17-sudoers.diff

@@ -13,7 +13,7 @@
  overridden in \fIsudoers\fR).
 --- sudoers
 +++ sudoers
-@@ -15,6 +15,24 @@
+@@ -15,6 +15,26 @@
  
  # Defaults specification
  
@@ -21,6 +21,8 @@
 +# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
 +Defaults always_set_home
 +Defaults env_reset
++# Change env_reset to !env_reset in previous line to keep all environment variables
++# Following list will no longer be necessary after this change
 +
 +Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE"
 +# Comment out the preceding line and uncomment the following one if you need

sudo.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Aug 20 15:41:38 CEST 2008 - prusnak@suse.cz
+
+- enabled SELinux support [Fate#303662]
+- added comment about !env_reset into sudoers file
+
 -------------------------------------------------------------------
 Wed Aug  6 19:35:05 CEST 2008 - prusnak@suse.cz
 

sudo.spec

@@ -20,9 +20,10 @@
 
 Name:           sudo
 BuildRequires:  openldap2-devel pam-devel postfix
+BuildRequires:  libselinux-devel
 PreReq:         coreutils
 Version:        1.6.9p17
-Release:        1
+Release:        10
 AutoReqProv:    on
 Group:          System/Base
 License:        BSD 3-Clause
@@ -81,6 +82,7 @@ export LDFLAGS="-pie"
 %configure \
     --libexecdir=%{_libexecdir}/sudo \
     --with-noexec=%{_libexecdir}/sudo/sudo_noexec.so \
+    --with-selinux \
     --with-logfac=auth \
     --with-insults \
     --with-all-insults \
@@ -123,6 +125,9 @@ rm -rf $RPM_BUILD_ROOT
 /var/run/sudo
 
 %changelog
+* Wed Aug 20 2008 prusnak@suse.cz
+- enabled SELinux support [Fate#303662]
+- added comment about !env_reset into sudoers file
 * Wed Aug 06 2008 prusnak@suse.cz
 - updated to 1.6.9p17
   * The -i flag should imply resetting the environment, as it did in