2006-12-14 11:23:51 +00:00
|
|
|
Summary: Allows restricted root access for specified users
|
2004-09-09 12:46:21 +00:00
|
|
|
Name: sudo
|
2014-09-30 13:45:25 +00:00
|
|
|
Version: 1.8.11
|
|
|
|
|
Release: 1%{?dist}
|
2010-09-07 14:28:31 +00:00
|
|
|
License: ISC
|
2004-09-09 12:46:21 +00:00
|
|
|
Group: Applications/System
|
|
|
|
|
URL: http://www.courtesan.com/sudo/
|
2006-08-08 11:57:00 +00:00
|
|
|
Source0: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
|
2014-03-12 11:44:37 +00:00
|
|
|
Source1: sudo-1.8.8-sudoers
|
2007-02-26 19:23:08 +00:00
|
|
|
Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
|
2014-09-30 13:45:25 +00:00
|
|
|
Requires: /etc/pam.d/system-auth
|
|
|
|
|
Requires: /usr/bin/vi
|
2013-09-30 22:09:16 +00:00
|
|
|
Requires(post): /bin/chmod
|
2006-05-23 14:27:14 +00:00
|
|
|
|
|
|
|
|
BuildRequires: pam-devel
|
|
|
|
|
BuildRequires: groff
|
|
|
|
|
BuildRequires: openldap-devel
|
2006-07-16 22:37:37 +00:00
|
|
|
BuildRequires: flex
|
|
|
|
|
BuildRequires: bison
|
2007-08-30 16:21:58 +00:00
|
|
|
BuildRequires: automake autoconf libtool
|
|
|
|
|
BuildRequires: audit-libs-devel libcap-devel
|
2008-02-06 13:05:56 +00:00
|
|
|
BuildRequires: libselinux-devel
|
2009-01-13 17:09:02 +00:00
|
|
|
BuildRequires: sendmail
|
2011-11-10 09:22:56 +00:00
|
|
|
BuildRequires: gettext
|
2013-02-28 12:19:12 +00:00
|
|
|
BuildRequires: zlib-devel
|
2004-09-09 12:53:47 +00:00
|
|
|
|
2005-09-19 18:03:10 +00:00
|
|
|
# don't strip
|
2007-08-20 12:11:21 +00:00
|
|
|
Patch1: sudo-1.6.7p5-strip.patch
|
2014-09-30 13:45:25 +00:00
|
|
|
# Patch to read ldap.conf more closely to nss_ldap
|
|
|
|
|
Patch2: sudo-1.8.11b4-ldapconfpatch.patch
|
2004-09-09 12:46:21 +00:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
Sudo (superuser do) allows a system administrator to give certain
|
|
|
|
|
users (or groups of users) the ability to run some (or all) commands
|
|
|
|
|
as root while logging all commands and arguments. Sudo operates on a
|
|
|
|
|
per-command basis. It is not a replacement for the shell. Features
|
|
|
|
|
include: the ability to restrict what commands a user may run on a
|
|
|
|
|
per-host basis, copious logging of each command (providing a clear
|
|
|
|
|
audit trail of who did what), a configurable timeout of the sudo
|
|
|
|
|
command, and the ability to use the same configuration file (sudoers)
|
|
|
|
|
on many different machines.
|
|
|
|
|
|
2011-07-12 11:20:39 +00:00
|
|
|
%package devel
|
|
|
|
|
Summary: Development files for %{name}
|
|
|
|
|
Group: Development/Libraries
|
|
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
|
|
|
|
|
%description devel
|
|
|
|
|
The %{name}-devel package contains header files developing sudo
|
|
|
|
|
plugins that use %{name}.
|
|
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
%prep
|
|
|
|
|
%setup -q
|
2010-09-07 14:28:31 +00:00
|
|
|
|
2007-08-20 12:11:21 +00:00
|
|
|
%patch1 -p1 -b .strip
|
2014-09-30 13:45:25 +00:00
|
|
|
%patch2 -p1 -b .ldapconfpatch
|
2011-09-07 08:48:26 +00:00
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
%build
|
2014-03-12 11:29:34 +00:00
|
|
|
# Remove bundled copy of zlib
|
|
|
|
|
rm -rf zlib/
|
2012-09-06 12:41:27 +00:00
|
|
|
autoreconf -I m4 -fv --install
|
2008-06-18 09:52:34 +00:00
|
|
|
|
2008-02-04 08:30:14 +00:00
|
|
|
%ifarch s390 s390x sparc64
|
2004-09-09 12:53:47 +00:00
|
|
|
F_PIE=-fPIE
|
|
|
|
|
%else
|
|
|
|
|
F_PIE=-fpie
|
|
|
|
|
%endif
|
|
|
|
|
|
2011-06-03 13:01:00 +00:00
|
|
|
export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"
|
2004-09-09 12:53:47 +00:00
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
%configure \
|
2007-02-26 19:23:08 +00:00
|
|
|
--prefix=%{_prefix} \
|
|
|
|
|
--sbindir=%{_sbindir} \
|
|
|
|
|
--libdir=%{_libdir} \
|
2013-09-30 22:09:16 +00:00
|
|
|
--docdir=%{_pkgdocdir} \
|
2007-02-26 19:23:08 +00:00
|
|
|
--with-logging=syslog \
|
|
|
|
|
--with-logfac=authpriv \
|
|
|
|
|
--with-pam \
|
2013-02-28 12:19:12 +00:00
|
|
|
--with-pam-login \
|
2007-02-26 19:23:08 +00:00
|
|
|
--with-editor=/bin/vi \
|
|
|
|
|
--with-env-editor \
|
|
|
|
|
--with-ignore-dot \
|
|
|
|
|
--with-tty-tickets \
|
2008-02-21 15:10:42 +00:00
|
|
|
--with-ldap \
|
2013-02-28 12:19:12 +00:00
|
|
|
--with-selinux \
|
|
|
|
|
--with-passprompt="[sudo] password for %p: " \
|
|
|
|
|
--with-linux-audit \
|
|
|
|
|
--with-sssd
|
|
|
|
|
# --without-kerb5 \
|
|
|
|
|
# --without-kerb4
|
2004-09-09 12:46:21 +00:00
|
|
|
make
|
|
|
|
|
|
|
|
|
|
%install
|
|
|
|
|
rm -rf $RPM_BUILD_ROOT
|
2005-04-12 12:19:47 +00:00
|
|
|
make install DESTDIR="$RPM_BUILD_ROOT" install_uid=`id -u` install_gid=`id -g` sudoers_uid=`id -u` sudoers_gid=`id -g`
|
2011-11-10 09:22:56 +00:00
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
chmod 755 $RPM_BUILD_ROOT%{_bindir}/* $RPM_BUILD_ROOT%{_sbindir}/*
|
2010-09-20 06:38:07 +00:00
|
|
|
install -p -d -m 700 $RPM_BUILD_ROOT/var/db/sudo
|
2010-01-12 13:17:31 +00:00
|
|
|
install -p -d -m 750 $RPM_BUILD_ROOT/etc/sudoers.d
|
2007-02-26 19:23:08 +00:00
|
|
|
install -p -c -m 0440 %{SOURCE1} $RPM_BUILD_ROOT/etc/sudoers
|
2004-09-09 12:46:21 +00:00
|
|
|
|
2013-09-30 22:09:16 +00:00
|
|
|
chmod +x $RPM_BUILD_ROOT%{_libexecdir}/sudo/*.so # for stripping, reset in %%files
|
2013-02-28 12:19:12 +00:00
|
|
|
|
2012-07-24 18:48:31 +00:00
|
|
|
# Remove execute permission on this script so we don't pull in perl deps
|
2013-09-30 22:09:16 +00:00
|
|
|
chmod -x $RPM_BUILD_ROOT%{_pkgdocdir}/sudoers2ldif
|
2012-07-24 18:48:31 +00:00
|
|
|
|
2014-08-05 15:04:25 +00:00
|
|
|
# Don't package LICENSE as a doc
|
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_pkgdocdir}/LICENSE
|
|
|
|
|
|
2011-11-10 09:22:56 +00:00
|
|
|
%find_lang sudo
|
|
|
|
|
%find_lang sudoers
|
|
|
|
|
|
|
|
|
|
cat sudo.lang sudoers.lang > sudo_all.lang
|
|
|
|
|
rm sudo.lang sudoers.lang
|
|
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/pam.d
|
|
|
|
|
cat > $RPM_BUILD_ROOT/etc/pam.d/sudo << EOF
|
2013-02-28 12:19:12 +00:00
|
|
|
#%%PAM-1.0
|
2007-02-26 19:23:08 +00:00
|
|
|
auth include system-auth
|
|
|
|
|
account include system-auth
|
|
|
|
|
password include system-auth
|
|
|
|
|
session optional pam_keyinit.so revoke
|
|
|
|
|
session required pam_limits.so
|
2014-09-30 13:45:25 +00:00
|
|
|
session include system-auth
|
2006-07-16 22:37:37 +00:00
|
|
|
EOF
|
|
|
|
|
|
|
|
|
|
cat > $RPM_BUILD_ROOT/etc/pam.d/sudo-i << EOF
|
2013-02-28 12:19:12 +00:00
|
|
|
#%%PAM-1.0
|
2007-02-26 19:23:08 +00:00
|
|
|
auth include sudo
|
|
|
|
|
account include sudo
|
|
|
|
|
password include sudo
|
|
|
|
|
session optional pam_keyinit.so force revoke
|
2014-09-30 13:45:25 +00:00
|
|
|
session include sudo
|
2004-09-09 12:46:21 +00:00
|
|
|
EOF
|
2004-09-09 12:51:15 +00:00
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
%clean
|
2004-09-09 12:46:21 +00:00
|
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
|
|
2011-11-10 09:22:56 +00:00
|
|
|
%files -f sudo_all.lang
|
2004-09-09 12:46:21 +00:00
|
|
|
%defattr(-,root,root)
|
2004-09-09 12:47:27 +00:00
|
|
|
%attr(0440,root,root) %config(noreplace) /etc/sudoers
|
2010-01-12 13:17:31 +00:00
|
|
|
%attr(0750,root,root) %dir /etc/sudoers.d/
|
2004-09-09 12:46:21 +00:00
|
|
|
%config(noreplace) /etc/pam.d/sudo
|
2006-07-16 22:37:37 +00:00
|
|
|
%config(noreplace) /etc/pam.d/sudo-i
|
2010-09-07 14:49:47 +00:00
|
|
|
%dir /var/db/sudo
|
2004-09-09 12:46:21 +00:00
|
|
|
%attr(4111,root,root) %{_bindir}/sudo
|
2005-04-12 12:19:47 +00:00
|
|
|
%attr(4111,root,root) %{_bindir}/sudoedit
|
2010-09-07 14:28:31 +00:00
|
|
|
%attr(0111,root,root) %{_bindir}/sudoreplay
|
2004-09-09 12:46:21 +00:00
|
|
|
%attr(0755,root,root) %{_sbindir}/visudo
|
2014-01-25 18:15:33 +00:00
|
|
|
%dir %{_libexecdir}/sudo
|
2013-09-30 22:09:16 +00:00
|
|
|
%attr(0755,root,root) %{_libexecdir}/sudo/sesh
|
|
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/sudo_noexec.so
|
|
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/sudoers.so
|
|
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/group_file.so
|
|
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/system_group.so
|
2014-09-30 13:45:25 +00:00
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/libsudo_util.so.*
|
2004-09-09 12:46:21 +00:00
|
|
|
%{_mandir}/man5/sudoers.5*
|
2010-04-14 13:49:58 +00:00
|
|
|
%{_mandir}/man5/sudoers.ldap.5*
|
2013-09-30 22:09:16 +00:00
|
|
|
%{_mandir}/man5/sudo.conf.5*
|
2004-09-09 12:46:21 +00:00
|
|
|
%{_mandir}/man8/sudo.8*
|
2005-04-12 12:19:47 +00:00
|
|
|
%{_mandir}/man8/sudoedit.8*
|
2010-09-07 14:28:31 +00:00
|
|
|
%{_mandir}/man8/sudoreplay.8*
|
2004-09-09 12:46:21 +00:00
|
|
|
%{_mandir}/man8/visudo.8*
|
2013-09-30 22:09:16 +00:00
|
|
|
%dir %{_pkgdocdir}/
|
|
|
|
|
%{_pkgdocdir}/*
|
2014-08-05 15:04:25 +00:00
|
|
|
%{!?_licensedir:%global license %%doc}
|
|
|
|
|
%license doc/LICENSE
|
2014-05-31 23:24:08 +00:00
|
|
|
%exclude %{_pkgdocdir}/ChangeLog
|
2004-09-09 12:46:21 +00:00
|
|
|
|
2011-11-10 09:22:56 +00:00
|
|
|
|
2004-09-09 12:47:27 +00:00
|
|
|
# Make sure permissions are ok even if we're updating
|
|
|
|
|
%post
|
|
|
|
|
/bin/chmod 0440 /etc/sudoers || :
|
|
|
|
|
|
2011-07-12 11:20:39 +00:00
|
|
|
%files devel
|
|
|
|
|
%defattr(-,root,root,-)
|
2012-11-12 12:16:34 +00:00
|
|
|
%doc plugins/sample/sample_plugin.c
|
2011-07-12 11:20:39 +00:00
|
|
|
%{_includedir}/sudo_plugin.h
|
|
|
|
|
%{_mandir}/man8/sudo_plugin.8*
|
2014-09-30 13:45:25 +00:00
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/libsudo_util.so
|
|
|
|
|
%attr(0644,root,root) %{_libexecdir}/sudo/*.la
|
2011-07-12 11:20:39 +00:00
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
%changelog
|
2014-09-30 13:45:25 +00:00
|
|
|
* Tue Sep 30 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.11-1
|
|
|
|
|
- update to 1.8.11
|
|
|
|
|
- major changes & fixes:
|
|
|
|
|
- when running a command in the background, sudo will now forward
|
|
|
|
|
SIGINFO to the command
|
|
|
|
|
- the passwords in ldap.conf and ldap.secret may now be encoded in base64.
|
|
|
|
|
- SELinux role changes are now audited. For sudoedit, we now audit
|
|
|
|
|
the actual editor being run, instead of just the sudoedit command.
|
|
|
|
|
- it is now possible to match an environment variable's value as well as
|
|
|
|
|
its name using env_keep and env_check
|
|
|
|
|
- new files created via sudoedit as a non-root user now have the proper group id
|
|
|
|
|
- sudoedit now works correctly in conjunction with sudo's SELinux RBAC support
|
|
|
|
|
- it is now possible to disable network interface probing in sudo.conf by
|
|
|
|
|
changing the value of the probe_interfaces setting
|
|
|
|
|
- when listing a user's privileges (sudo -l), the sudoers plugin will now prompt
|
|
|
|
|
for the user's password even if the targetpw, rootpw or runaspw options are set.
|
|
|
|
|
- the new use_netgroups sudoers option can be used to explicitly enable or disable
|
|
|
|
|
netgroups support
|
|
|
|
|
- visudo can now export a sudoers file in JSON format using the new -x flag
|
|
|
|
|
- added patch to read ldap.conf more closely to nss_ldap
|
|
|
|
|
- require /usr/bin/vi instead of vim-minimal
|
|
|
|
|
- include pam.d/system-auth in PAM session phase from pam.d/sudo
|
|
|
|
|
- include pam.d/sudo in PAM session phase from pam.d/sudo-i
|
2014-08-18 04:03:38 +00:00
|
|
|
|
2014-08-05 15:04:25 +00:00
|
|
|
* Tue Aug 5 2014 Tom Callaway <spot@fedoraproject.org> - 1.8.8-6
|
|
|
|
|
- fix license handling
|
|
|
|
|
|
2014-06-08 07:26:52 +00:00
|
|
|
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.8-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
|
|
2014-05-31 23:24:08 +00:00
|
|
|
* Sat May 31 2014 Peter Robinson <pbrobinson@fedoraproject.org> 1.8.8-4
|
|
|
|
|
- Drop ChangeLog, we ship NEWS
|
|
|
|
|
|
2014-03-12 11:29:34 +00:00
|
|
|
* Mon Mar 10 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.8-3
|
|
|
|
|
- remove bundled copy of zlib before compilation
|
|
|
|
|
- drop the requiretty Defaults setting from sudoers
|
|
|
|
|
|
2014-01-25 18:15:33 +00:00
|
|
|
* Sat Jan 25 2014 Ville Skyttä <ville.skytta@iki.fi> - 1.8.8-2
|
|
|
|
|
- Own the %%{_libexecdir}/sudo dir.
|
|
|
|
|
|
2013-09-30 22:09:16 +00:00
|
|
|
* Mon Sep 30 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.8-1
|
|
|
|
|
- update to 1.8.8
|
|
|
|
|
- major changes & fixes:
|
|
|
|
|
- LDAP SASL support now works properly with Kerberos
|
|
|
|
|
- root may no longer change its SELinux role without entering a password
|
|
|
|
|
- user messages are now always displayed in the user's locale, even when
|
|
|
|
|
the same message is being logged or mailed in a different locale.
|
|
|
|
|
- log files created by sudo now explicitly have the group set to group
|
|
|
|
|
ID 0 rather than relying on BSD group semantics
|
|
|
|
|
- sudo now stores its libexec files in a sudo subdirectory instead of in
|
|
|
|
|
libexec itself
|
|
|
|
|
- system_group and group_file sudoers group provider plugins are now
|
|
|
|
|
installed by default
|
|
|
|
|
- the paths to ldap.conf and ldap.secret may now be specified as arguments
|
|
|
|
|
to the sudoers plugin in the sudo.conf file
|
|
|
|
|
- ...and many new features and settings. See the upstream ChangeLog for the
|
|
|
|
|
full list.
|
|
|
|
|
- several sssd support fixes
|
|
|
|
|
- added patch to make uid/gid specification parsing more strict (don't accept
|
|
|
|
|
an invalid number as uid/gid)
|
|
|
|
|
- use the _pkgdocdir macro
|
|
|
|
|
(see https://fedoraproject.org/wiki/Changes/UnversionedDocdirs)
|
|
|
|
|
- fixed several bugs found by the clang static analyzer
|
|
|
|
|
- added %%post dependency on chmod
|
|
|
|
|
|
2013-08-04 15:56:56 +00:00
|
|
|
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.6p7-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
* Thu Feb 28 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-1
|
|
|
|
|
- update to 1.8.6p7
|
|
|
|
|
- fixes CVE-2013-1775 and CVE-2013-1776
|
|
|
|
|
- fixed several packaging issues (thanks to ville.skytta@iki.fi)
|
|
|
|
|
- build with system zlib.
|
|
|
|
|
- let rpmbuild strip libexecdir/*.so.
|
|
|
|
|
- own the %%{_docdir}/sudo-* dir.
|
|
|
|
|
- fix some rpmlint warnings (spaces vs tabs, unescaped macros).
|
|
|
|
|
- fix bogus %%changelog dates.
|
|
|
|
|
|
2013-02-15 00:45:08 +00:00
|
|
|
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.6p3-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
|
|
|
2012-11-12 12:16:34 +00:00
|
|
|
* Mon Nov 12 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
|
|
|
|
|
- added upstream patch for a regression
|
|
|
|
|
- don't include arch specific files in the -devel subpackage
|
|
|
|
|
- ship only one sample plugin in the -devel subpackage
|
|
|
|
|
|
2012-09-25 10:37:55 +00:00
|
|
|
* Tue Sep 25 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
|
|
|
|
|
- update to 1.8.6p3
|
|
|
|
|
- drop -pipelist patch (fixed in upstream)
|
|
|
|
|
|
2012-09-06 12:41:27 +00:00
|
|
|
* Thu Sep 6 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6-1
|
|
|
|
|
- update to 1.8.6
|
|
|
|
|
|
2012-07-26 07:32:44 +00:00
|
|
|
* Thu Jul 26 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-4
|
|
|
|
|
- added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
|
|
|
|
|
- re-enabled SSSD support
|
|
|
|
|
- removed libsss_sudo dependency
|
|
|
|
|
|
2012-07-24 18:48:31 +00:00
|
|
|
* Tue Jul 24 2012 Bill Nottingham <notting@redhat.com> - 1.8.5-3
|
|
|
|
|
- flip sudoers2ldif executable bit after make install, not in setup
|
|
|
|
|
|
2012-07-21 21:34:41 +00:00
|
|
|
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.5-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
|
|
2012-05-17 10:51:44 +00:00
|
|
|
* Thu May 17 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-1
|
|
|
|
|
- update to 1.8.5
|
|
|
|
|
- fixed CVE-2012-2337
|
|
|
|
|
- temporarily disabled SSSD support
|
|
|
|
|
|
2012-02-29 09:21:41 +00:00
|
|
|
* Wed Feb 29 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-6
|
2012-02-29 09:20:33 +00:00
|
|
|
- fixed problems with undefined symbols (rhbz#798517)
|
|
|
|
|
|
2012-02-22 10:27:43 +00:00
|
|
|
* Wed Feb 22 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-5
|
|
|
|
|
- SSSD patch update
|
|
|
|
|
|
2012-02-07 11:25:11 +00:00
|
|
|
* Tue Feb 7 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-4
|
|
|
|
|
- added SSSD support
|
|
|
|
|
|
2012-01-26 14:36:37 +00:00
|
|
|
* Thu Jan 26 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-3
|
|
|
|
|
- added patch for CVE-2012-0809
|
|
|
|
|
|
2012-01-14 04:32:29 +00:00
|
|
|
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.3p1-2
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
* Thu Nov 10 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-1
|
2011-11-10 09:22:56 +00:00
|
|
|
- update to 1.8.3p1
|
|
|
|
|
- disable output word wrapping if the output is piped
|
|
|
|
|
|
2011-09-07 08:48:26 +00:00
|
|
|
* Wed Sep 7 2011 Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.1p2-2
|
|
|
|
|
- Remove execute bit from sample script in docs so we don't pull in perl
|
|
|
|
|
|
2011-07-12 11:20:39 +00:00
|
|
|
* Tue Jul 12 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.8.1p2-1
|
|
|
|
|
- rebase to 1.8.1p2
|
|
|
|
|
- removed .sudoi patch
|
|
|
|
|
- fixed typo: RELPRO -> RELRO
|
|
|
|
|
- added -devel subpackage for the sudo_plugin.h header file
|
|
|
|
|
- use default ldap configuration files again
|
|
|
|
|
|
2011-06-03 13:01:00 +00:00
|
|
|
* Fri Jun 3 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-4
|
2011-07-12 11:20:39 +00:00
|
|
|
- build with RELRO
|
2011-06-03 13:01:00 +00:00
|
|
|
|
2011-02-09 16:29:16 +00:00
|
|
|
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.4p5-3
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
|
|
2011-01-17 10:40:57 +00:00
|
|
|
* Mon Jan 17 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-2
|
2011-01-17 10:23:52 +00:00
|
|
|
- rebase to 1.7.4p5
|
|
|
|
|
- fixed sudo-1.7.4p4-getgrouplist.patch
|
|
|
|
|
- fixes CVE-2011-0008, CVE-2011-0010
|
|
|
|
|
|
2010-11-30 11:16:25 +00:00
|
|
|
* Tue Nov 30 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
|
|
|
|
|
- anybody in the wheel group has now root access (using password) (rhbz#656873)
|
|
|
|
|
- sync configuration paths with the nss_ldap package (rhbz#652687)
|
|
|
|
|
|
2010-09-29 08:26:02 +00:00
|
|
|
* Wed Sep 29 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-4
|
|
|
|
|
- added upstream patch to fix rhbz#638345
|
|
|
|
|
|
2010-09-20 06:38:07 +00:00
|
|
|
* Mon Sep 20 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-3
|
|
|
|
|
- added patch for #635250
|
|
|
|
|
- /var/run/sudo -> /var/db/sudo in .spec
|
|
|
|
|
|
2010-09-07 14:49:47 +00:00
|
|
|
* Tue Sep 7 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-2
|
|
|
|
|
- sudo now uses /var/db/sudo for timestamps
|
|
|
|
|
|
2010-09-07 14:28:31 +00:00
|
|
|
* Tue Sep 7 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
|
|
|
|
|
- update to new upstream version
|
|
|
|
|
- new command available: sudoreplay
|
|
|
|
|
- use native audit support
|
|
|
|
|
- corrected license field value: BSD -> ISC
|
|
|
|
|
|
2010-06-02 09:06:33 +00:00
|
|
|
* Wed Jun 2 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-2
|
|
|
|
|
- added patch that fixes insufficient environment sanitization issue (#598154)
|
|
|
|
|
|
2010-04-14 13:49:58 +00:00
|
|
|
* Wed Apr 14 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
|
|
|
|
|
- update to new upstream version
|
|
|
|
|
- merged .audit and .libaudit patch
|
|
|
|
|
- added sudoers.ldap.5* to files
|
|
|
|
|
|
2010-03-01 11:59:20 +00:00
|
|
|
* Mon Mar 1 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p5-2
|
2010-03-01 11:54:07 +00:00
|
|
|
- update to new upstream version
|
|
|
|
|
|
2010-02-16 22:27:13 +00:00
|
|
|
* Tue Feb 16 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
|
|
|
|
|
- fixed no valid sudoers sources found (#558875)
|
|
|
|
|
|
2010-02-10 15:52:05 +00:00
|
|
|
* Wed Feb 10 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
|
|
|
|
|
- audit related Makefile.in and configure.in corrections
|
|
|
|
|
- added --with-audit configure option
|
|
|
|
|
- removed call to libtoolize
|
|
|
|
|
|
2010-02-10 12:38:59 +00:00
|
|
|
* Wed Feb 10 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-3
|
|
|
|
|
- fixed segfault when #include directive is used in cycles (#561336)
|
|
|
|
|
|
2010-01-12 13:17:31 +00:00
|
|
|
* Fri Jan 8 2010 Ville Skyttä <ville.skytta@iki.fi> - 1.7.2p2-2
|
|
|
|
|
- Add /etc/sudoers.d dir and use it in default config (#551470).
|
|
|
|
|
- Drop *.pod man page duplicates from docs.
|
|
|
|
|
|
2010-01-07 15:24:53 +00:00
|
|
|
* Thu Jan 07 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
|
|
|
|
|
- new upstream version 1.7.2p2-1
|
|
|
|
|
- commented out unused aliases in sudoers to make visudo happy (#550239)
|
|
|
|
|
|
2009-08-21 11:19:03 +00:00
|
|
|
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.7.1-7
|
|
|
|
|
- rebuilt with new audit
|
|
|
|
|
|
2009-08-20 12:38:43 +00:00
|
|
|
* Thu Aug 20 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-6
|
|
|
|
|
- moved secure_path from compile-time option to sudoers file (#517428)
|
|
|
|
|
|
2009-07-27 04:58:19 +00:00
|
|
|
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.1-5
|
|
|
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
|
|
|
2009-07-09 13:29:34 +00:00
|
|
|
* Thu Jul 09 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
|
|
|
|
|
- moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
|
|
|
|
|
- epoch number sync
|
|
|
|
|
|
2009-06-22 14:27:32 +00:00
|
|
|
* Mon Jun 22 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-1
|
|
|
|
|
- updated sudo to version 1.7.1
|
|
|
|
|
- fixed small bug in configure.in (sudo-1.7.1-conffix.patch)
|
|
|
|
|
|
2009-02-24 15:49:07 +00:00
|
|
|
* Tue Feb 24 2009 Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
|
2009-02-24 15:24:58 +00:00
|
|
|
- fixed building with new libtool
|
|
|
|
|
- fix for incorrect handling of groups in Runas_User
|
|
|
|
|
- added /usr/local/sbin to secure-path
|
|
|
|
|
|
2009-01-13 17:09:02 +00:00
|
|
|
* Tue Jan 13 2009 Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-3
|
|
|
|
|
- build with sendmail installed
|
|
|
|
|
- Added /usr/local/bin to secure-path
|
|
|
|
|
|
2008-09-02 13:56:42 +00:00
|
|
|
* Tue Sep 02 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
|
|
|
|
|
- adjust audit patch, do not scream when kernel is
|
|
|
|
|
compiled without audit netlink support (#401201)
|
|
|
|
|
|
2008-07-04 14:13:33 +00:00
|
|
|
* Fri Jul 04 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
|
|
|
|
|
- upgrade
|
|
|
|
|
|
2008-06-18 09:52:34 +00:00
|
|
|
* Wed Jun 18 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-7
|
|
|
|
|
- build with newer autoconf-2.62 (#449614)
|
|
|
|
|
|
2008-05-13 12:42:02 +00:00
|
|
|
* Tue May 13 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-6
|
|
|
|
|
- compiled with secure path (#80215)
|
|
|
|
|
|
2008-05-05 11:53:04 +00:00
|
|
|
* Mon May 05 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-5
|
|
|
|
|
- fix path to updatedb in /etc/sudoers (#445103)
|
|
|
|
|
|
2008-03-31 14:08:45 +00:00
|
|
|
* Mon Mar 31 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-4
|
|
|
|
|
- include ldap files in rpm package (#439506)
|
|
|
|
|
|
2008-03-13 08:50:25 +00:00
|
|
|
* Thu Mar 13 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-3
|
|
|
|
|
- include [sudo] in password prompt (#437092)
|
|
|
|
|
|
2008-03-04 10:28:10 +00:00
|
|
|
* Tue Mar 04 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-2
|
|
|
|
|
- audit support improvement
|
|
|
|
|
|
2008-02-21 15:10:42 +00:00
|
|
|
* Thu Feb 21 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-1
|
|
|
|
|
- upgrade to the latest upstream release
|
|
|
|
|
|
2008-02-06 12:43:43 +00:00
|
|
|
* Wed Feb 06 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p12-1
|
|
|
|
|
- upgrade to the latest upstream release
|
|
|
|
|
- add selinux support
|
|
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
* Mon Feb 04 2008 Dennis Gilmore <dennis@ausil.us> 1.6.9p4-6
|
2008-02-04 08:30:14 +00:00
|
|
|
- sparc64 needs to be in the -fPIE list with s390
|
|
|
|
|
|
2008-01-07 18:31:40 +00:00
|
|
|
* Mon Jan 07 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-5
|
|
|
|
|
- fix complains about audit_log_user_command(): Connection
|
|
|
|
|
refused (#401201)
|
|
|
|
|
|
2007-12-05 22:17:51 +00:00
|
|
|
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.6.9p4-4
|
2008-01-07 18:31:40 +00:00
|
|
|
- Rebuild for deps
|
2007-12-05 22:17:51 +00:00
|
|
|
|
2007-12-05 19:29:30 +00:00
|
|
|
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.6.9p4-3
|
2008-01-07 18:31:40 +00:00
|
|
|
- Rebuild for openssl bump
|
2007-12-05 19:29:30 +00:00
|
|
|
|
2007-08-30 16:21:58 +00:00
|
|
|
* Thu Aug 30 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-2
|
|
|
|
|
- fix autotools stuff and add audit support
|
|
|
|
|
|
2007-08-20 12:11:21 +00:00
|
|
|
* Mon Aug 20 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-1
|
|
|
|
|
- upgrade to upstream release
|
|
|
|
|
|
2007-04-12 08:29:55 +00:00
|
|
|
* Thu Apr 12 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-14
|
|
|
|
|
- also use getgrouplist() to determine group membership (#235915)
|
|
|
|
|
|
2007-02-26 19:23:08 +00:00
|
|
|
* Mon Feb 26 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-13
|
|
|
|
|
- fix some spec file issues
|
|
|
|
|
|
2006-12-14 11:23:51 +00:00
|
|
|
* Thu Dec 14 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-12
|
|
|
|
|
- fix rpmlint issue
|
|
|
|
|
|
2006-10-26 09:14:04 +00:00
|
|
|
* Thu Oct 26 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
|
|
|
|
|
- fix typo in sudoers file (#212308)
|
|
|
|
|
|
2006-10-01 20:21:12 +00:00
|
|
|
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-10
|
|
|
|
|
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
|
|
|
|
|
|
2006-09-21 08:41:38 +00:00
|
|
|
* Thu Sep 21 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-9
|
|
|
|
|
- fix sudoers file, X apps didn't work (#206320)
|
|
|
|
|
|
2006-08-08 11:57:00 +00:00
|
|
|
* Tue Aug 08 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-8
|
|
|
|
|
- use Red Hat specific default sudoers file
|
|
|
|
|
|
2006-07-16 22:37:37 +00:00
|
|
|
* Sun Jul 16 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-7
|
|
|
|
|
- fix #198755 - make login processes (sudo -i) initialise session keyring
|
|
|
|
|
(thanks for PAM config files to David Howells)
|
|
|
|
|
- add IPv6 support (patch by Milan Zazrivec)
|
|
|
|
|
|
2006-07-12 08:19:37 +00:00
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-6.1
|
|
|
|
|
- rebuild
|
|
|
|
|
|
2006-05-29 12:51:22 +00:00
|
|
|
* Mon May 29 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-6
|
|
|
|
|
- fix #190062 - "ssh localhost sudo su" will show the password in clear
|
|
|
|
|
|
2006-05-23 14:27:14 +00:00
|
|
|
* Tue May 23 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-5
|
2006-05-23 14:40:10 +00:00
|
|
|
- add LDAP support (#170848)
|
2006-05-23 14:27:14 +00:00
|
|
|
|
2006-02-11 05:45:16 +00:00
|
|
|
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-4.1
|
|
|
|
|
- bump again for double-long bug on ppc(64)
|
|
|
|
|
|
2006-02-08 16:19:20 +00:00
|
|
|
* Wed Feb 8 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-4
|
|
|
|
|
- reset env. by default
|
|
|
|
|
|
2006-02-07 13:54:38 +00:00
|
|
|
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-3.1
|
|
|
|
|
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
|
|
|
2006-01-23 14:37:30 +00:00
|
|
|
* Mon Jan 23 2006 Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
|
|
|
|
|
- Remove selinux patch. It has been decided that the SELinux patch for sudo is
|
|
|
|
|
- no longer necessary. In tageted policy it had no effect. In strict/MLS policy
|
|
|
|
|
- We require the person using sudo to execute newrole before using sudo.
|
|
|
|
|
|
2005-12-09 22:43:21 +00:00
|
|
|
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2005-11-25 07:46:20 +00:00
|
|
|
* Fri Nov 25 2005 Karel Zak <kzak@redhat.com> 1.6.8p12-1
|
|
|
|
|
- new upstream version 1.6.8p12
|
|
|
|
|
|
2005-11-08 11:39:15 +00:00
|
|
|
* Tue Nov 8 2005 Karel Zak <kzak@redhat.com> 1.6.8p11-1
|
|
|
|
|
- new upstream version 1.6.8p11
|
|
|
|
|
|
2005-10-13 13:13:58 +00:00
|
|
|
* Thu Oct 13 2005 Tomas Mraz <tmraz@redhat.com> 1.6.8p9-6
|
|
|
|
|
- use include instead of pam_stack in pam config
|
|
|
|
|
|
2005-10-11 11:41:09 +00:00
|
|
|
* Tue Oct 11 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-5
|
|
|
|
|
- enable interfaces in selinux patch
|
|
|
|
|
- merge sudo-1.6.8p8-sesh-stopsig.patch to selinux patch
|
|
|
|
|
|
2005-09-19 18:03:10 +00:00
|
|
|
* Mon Sep 19 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-4
|
|
|
|
|
- fix debuginfo
|
|
|
|
|
|
2005-09-19 17:24:05 +00:00
|
|
|
* Mon Sep 19 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-3
|
|
|
|
|
- fix #162623 - sesh hangs when child suspends
|
|
|
|
|
|
2005-08-02 14:39:04 +00:00
|
|
|
* Mon Aug 1 2005 Dan Walsh <dwalsh@redhat.com> 1.6.8p9-2
|
|
|
|
|
- Add back in interfaces call, SELinux has been fixed to work around
|
|
|
|
|
|
2005-06-21 09:11:59 +00:00
|
|
|
* Tue Jun 21 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-1
|
|
|
|
|
- new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)
|
|
|
|
|
|
2005-05-24 14:52:13 +00:00
|
|
|
* Tue May 24 2005 Karel Zak <kzak@redhat.com> 1.6.8p8-2
|
2005-09-19 17:24:05 +00:00
|
|
|
- fix #154511 - sudo does not use limits.conf
|
2005-05-24 14:52:13 +00:00
|
|
|
|
2005-04-12 12:19:47 +00:00
|
|
|
* Mon Apr 4 2005 Thomas Woerner <twoerner@redhat.com> 1.6.8p8-1
|
|
|
|
|
- new version 1.6.8p8: new sudoedit and sudo_noexec
|
|
|
|
|
|
2005-02-09 17:31:08 +00:00
|
|
|
* Wed Feb 9 2005 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-31
|
|
|
|
|
- rebuild
|
|
|
|
|
|
2004-10-04 15:39:47 +00:00
|
|
|
* Mon Oct 4 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-30.1
|
|
|
|
|
- added missing BuildRequires for libselinux-devel (#132883)
|
|
|
|
|
|
2004-09-29 11:58:37 +00:00
|
|
|
* Wed Sep 29 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-30
|
|
|
|
|
- Fix missing param error in sesh
|
|
|
|
|
|
2004-09-27 19:10:49 +00:00
|
|
|
* Mon Sep 27 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-29
|
|
|
|
|
- Remove full patch check from sesh
|
|
|
|
|
|
2004-09-09 12:54:27 +00:00
|
|
|
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-28
|
|
|
|
|
- Fix selinux patch to switch to root user
|
|
|
|
|
|
2004-09-09 12:54:11 +00:00
|
|
|
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 12:54:05 +00:00
|
|
|
* Tue Apr 13 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-26
|
|
|
|
|
- Eliminate tty handling from selinux
|
|
|
|
|
|
|
|
|
|
* Thu Apr 1 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-25
|
|
|
|
|
- fixed spec file: sesh in file section with selinux flag (#119682)
|
|
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
* Tue Mar 30 2004 Colin Walters <walters@redhat.com> 1.6.7p5-24
|
2004-09-09 12:54:05 +00:00
|
|
|
- Enhance sesh.c to fork/exec children itself, to avoid
|
|
|
|
|
having sudo reap all domains.
|
|
|
|
|
- Only reinstall default signal handlers immediately before
|
|
|
|
|
exec of child with SELinux patch
|
|
|
|
|
|
2004-09-09 12:53:47 +00:00
|
|
|
* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-23
|
|
|
|
|
- change to default to sysadm_r
|
|
|
|
|
- Fix tty handling
|
|
|
|
|
|
|
|
|
|
* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-22
|
|
|
|
|
- Add /bin/sesh to run selinux code.
|
|
|
|
|
- replace /bin/bash -c with /bin/sesh
|
|
|
|
|
|
|
|
|
|
* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-21
|
|
|
|
|
- Hard code to use "/bin/bash -c" for selinux
|
|
|
|
|
|
|
|
|
|
* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-20
|
|
|
|
|
- Eliminate closing and reopening of terminals, to match su.
|
|
|
|
|
|
|
|
|
|
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-19
|
|
|
|
|
- SELinux fixes to make transitions work properly
|
|
|
|
|
|
|
|
|
|
* Fri Mar 5 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-18
|
|
|
|
|
- pied sudo
|
|
|
|
|
|
|
|
|
|
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
2004-09-09 12:51:15 +00:00
|
|
|
* Tue Jan 27 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-16
|
|
|
|
|
- Eliminate interfaces call, since this requires big SELinux privs
|
|
|
|
|
- and it seems to be useless.
|
|
|
|
|
|
|
|
|
|
* Tue Jan 27 2004 Karsten Hopp <karsten@redhat.de> 1.6.7p5-15
|
|
|
|
|
- visudo requires vim-minimal or setting EDITOR to something useful (#68605)
|
|
|
|
|
|
|
|
|
|
* Mon Jan 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-14
|
|
|
|
|
- Fix is_selinux_enabled call
|
|
|
|
|
|
|
|
|
|
* Tue Jan 13 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-13
|
|
|
|
|
- Clean up patch on failure
|
|
|
|
|
|
|
|
|
|
* Tue Jan 6 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-12
|
|
|
|
|
- Remove sudo.te for now.
|
|
|
|
|
|
|
|
|
|
* Fri Jan 2 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-11
|
|
|
|
|
- Fix usage message
|
|
|
|
|
|
|
|
|
|
* Mon Dec 22 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-10
|
|
|
|
|
- Clean up sudo.te to not blow up if pam.te not present
|
|
|
|
|
|
|
|
|
|
* Thu Dec 18 2003 Thomas Woerner <twoerner@redhat.com>
|
|
|
|
|
- added missing BuildRequires for groff
|
|
|
|
|
|
|
|
|
|
* Tue Dec 16 2003 Jeremy Katz <katzj@redhat.com> 1.6.7p5-9
|
|
|
|
|
- remove left-over debugging code
|
|
|
|
|
|
|
|
|
|
* Tue Dec 16 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-8
|
|
|
|
|
- Fix terminal handling that caused Sudo to exit on non selinux machines.
|
|
|
|
|
|
|
|
|
|
* Mon Dec 15 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-7
|
|
|
|
|
- Remove sudo_var_run_t which is now pam_var_run_t
|
|
|
|
|
|
|
|
|
|
* Fri Dec 12 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-6
|
|
|
|
|
- Fix terminal handling and policy
|
|
|
|
|
|
|
|
|
|
* Thu Dec 11 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-5
|
|
|
|
|
- Fix policy
|
|
|
|
|
|
|
|
|
|
* Thu Nov 13 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-4.sel
|
|
|
|
|
- Turn on SELinux support
|
|
|
|
|
|
|
|
|
|
* Tue Jul 29 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-3
|
|
|
|
|
- Add support for SELinux
|
|
|
|
|
|
2004-09-09 12:51:10 +00:00
|
|
|
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
* Mon May 19 2003 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-1
|
|
|
|
|
|
2004-09-09 12:50:37 +00:00
|
|
|
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
|
|
|
|
|
- rebuilt
|
|
|
|
|
|
|
|
|
|
* Tue Nov 12 2002 Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
|
|
|
|
|
- remove absolute path names from the PAM configuration, ensuring that the
|
|
|
|
|
right modules get used for whichever arch we're built for
|
|
|
|
|
- don't try to install the FAQ, which isn't there any more
|
|
|
|
|
|
2004-09-09 12:50:35 +00:00
|
|
|
* Thu Jun 27 2002 Bill Nottingham <notting@redhat.com> 1.6.6-1
|
|
|
|
|
- update to 1.6.6
|
|
|
|
|
|
2004-09-09 12:50:30 +00:00
|
|
|
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
|
|
|
|
- automated rebuild
|
|
|
|
|
|
|
|
|
|
* Thu May 23 2002 Tim Powers <timp@redhat.com>
|
|
|
|
|
- automated rebuild
|
|
|
|
|
|
2004-09-09 12:50:22 +00:00
|
|
|
* Thu Apr 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-2
|
|
|
|
|
- Fix bug #63768
|
|
|
|
|
|
2004-09-09 12:48:02 +00:00
|
|
|
* Thu Mar 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-1
|
|
|
|
|
- 1.6.5p2
|
|
|
|
|
|
|
|
|
|
* Fri Jan 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p1-1
|
|
|
|
|
- 1.6.5p1
|
|
|
|
|
- Hope this "a new release per day" madness stops ;)
|
|
|
|
|
|
|
|
|
|
* Thu Jan 17 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5-1
|
|
|
|
|
- 1.6.5
|
|
|
|
|
|
|
|
|
|
* Tue Jan 15 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4p1-1
|
|
|
|
|
- 1.6.4p1
|
|
|
|
|
|
2004-09-09 12:47:27 +00:00
|
|
|
* Mon Jan 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-1
|
|
|
|
|
- Update to 1.6.4
|
|
|
|
|
|
2004-09-09 12:47:05 +00:00
|
|
|
* Mon Jul 23 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.3p7-2
|
|
|
|
|
- Add build requirements (#49706)
|
|
|
|
|
- s/Copyright/License/
|
|
|
|
|
- bzip2 source
|
|
|
|
|
|
2004-09-09 12:46:51 +00:00
|
|
|
* Sat Jun 16 2001 Than Ngo <than@redhat.com>
|
|
|
|
|
- update to 1.6.3p7
|
|
|
|
|
- use %%{_tmppath}
|
|
|
|
|
|
2004-09-09 12:46:24 +00:00
|
|
|
* Fri Feb 23 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
- 1.6.3p6, fixes buffer overrun
|
|
|
|
|
|
|
|
|
|
* Tue Oct 10 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
- 1.6.3p5
|
|
|
|
|
|
2004-09-09 12:46:21 +00:00
|
|
|
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
|
|
|
|
|
- automatic rebuild
|
|
|
|
|
|
|
|
|
|
* Tue Jun 06 2000 Karsten Hopp <karsten@redhat.de>
|
|
|
|
|
- fixed owner of sudo and visudo
|
|
|
|
|
|
|
|
|
|
* Thu Jun 1 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
|
|
|
- modify PAM setup to use system-auth
|
|
|
|
|
- clean up buildrooting by using the makeinstall macro
|
|
|
|
|
|
|
|
|
|
* Tue Apr 11 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
|
|
|
- initial build in main distrib
|
|
|
|
|
- update to 1.6.3
|
|
|
|
|
- deal with compressed man pages
|
|
|
|
|
|
|
|
|
|
* Tue Dec 14 1999 Preston Brown <pbrown@redhat.com>
|
|
|
|
|
- updated to 1.6.1 for Powertools 6.2
|
|
|
|
|
- config files are now noreplace.
|
|
|
|
|
|
|
|
|
|
* Thu Jul 22 1999 Tim Powers <timp@redhat.com>
|
|
|
|
|
- updated to 1.5.9p2 for Powertools 6.1
|
|
|
|
|
|
|
|
|
|
* Wed May 12 1999 Bill Nottingham <notting@redhat.com>
|
|
|
|
|
- sudo is configured with pam. There's no pam.d file. Oops.
|
|
|
|
|
|
|
|
|
|
* Mon Apr 26 1999 Preston Brown <pbrown@redhat.com>
|
|
|
|
|
- upgraded to 1.59p1 for powertools 6.0
|
|
|
|
|
|
|
|
|
|
* Tue Oct 27 1998 Preston Brown <pbrown@redhat.com>
|
|
|
|
|
- fixed so it doesn't find /usr/bin/vi first, but instead /bin/vi (always installed)
|
|
|
|
|
|
2013-02-28 12:19:12 +00:00
|
|
|
* Thu Oct 08 1998 Michael Maher <mike@redhat.com>
|
2004-09-09 12:46:21 +00:00
|
|
|
- built package for 5.2
|
|
|
|
|
|
2007-02-26 19:23:08 +00:00
|
|
|
* Mon May 18 1998 Michael Maher <mike@redhat.com>
|
|
|
|
|
- updated SPEC file
|
2004-09-09 12:46:21 +00:00
|
|
|
|
|
|
|
|
* Thu Jan 29 1998 Otto Hammersmith <otto@redhat.com>
|
|
|
|
|
- updated to 1.5.4
|
|
|
|
|
|
|
|
|
|
* Tue Nov 18 1997 Otto Hammersmith <otto@redhat.com>
|
|
|
|
|
- built for glibc, no problems
|
|
|
|
|
|
|
|
|
|
* Fri Apr 25 1997 Michael Fulbright <msf@redhat.com>
|
|
|
|
|
- Fixed for 4.2 PowerTools
|
|
|
|
|
- Still need to be pamified
|
|
|
|
|
- Still need to move stmp file to /var/log
|
|
|
|
|
|
|
|
|
|
* Mon Feb 17 1997 Michael Fulbright <msf@redhat.com>
|
|
|
|
|
- First version for PowerCD.
|
|
|
|
|
|
