Commit Graph

232 Commits

Author SHA1 Message Date
Daniel Kopecek 8729726fc1 update to 1.8.8
- major changes & fixes:
  - LDAP SASL support now works properly with Kerberos
  - root may no longer change its SELinux role without entering a password
  - user messages are now always displayed in the user's locale, even when
    the same message is being logged or mailed in a different locale.
  - log files created by sudo now explicitly have the group set to group
    ID 0 rather than relying on BSD group semantics
  - sudo now stores its libexec files in a sudo subdirectory instead of in
    libexec itself
  - system_group and group_file sudoers group provider plugins are now
    installed by default
  - the paths to ldap.conf and ldap.secret may now be specified as arguments
    to the sudoers plugin in the sudo.conf file
  - ...and many new features and settings. See the upstream ChangeLog for the
    full list.
- several sssd support fixes
- added patch to make uid/gid specification parsing more strict (don't accept
  an invalid number as uid/gid)
- use the _pkgdocdir macro
  (see https://fedoraproject.org/wiki/Changes/UnversionedDocdirs)
- fixed several bugs found by the clang static analyzer
- added %post dependency on chmod
2013-10-01 00:09:16 +02:00
Daniel Kopecek 42f0c7e726 Removed unused patches 2013-10-01 00:05:52 +02:00
Dennis Gilmore d656fea480 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 10:56:56 -05:00
Daniel Kopecek 392812324b update to 1.8.6p7
- fixes CVE-2013-1775 and CVE-2013-1776
- fixed several packaging issues (thanks to ville.skytta@iki.fi)
  - build with system zlib.
  - let rpmbuild strip libexecdir/*.so.
  - own the %{_docdir}/sudo-* dir.
  - fix some rpmlint warnings (spaces vs tabs, unescaped macros).
  - fix bogus %changelog dates.
2013-02-28 13:47:01 +01:00
Dennis Gilmore d201380f8e - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild 2013-02-14 18:45:08 -06:00
Daniel Kopecek bbce9a9922 Fixed upstream regression and removed arch specific files
- added upstream patch for a regression
 - don't include arch specific files in the -devel subpackage
 - ship only one sample plugin in the -devel subpackage
2012-11-12 13:17:48 +01:00
Daniel Kopecek a9963cd1b9 update to 1.8.6p3
- drop -pipelist patch (fixed in upstream)
2012-09-25 12:37:55 +02:00
Daniel Kopecek 41b07d49de Update to 1.8.6
- dropped SSSD patches as they are now part of the upstream source code
 - use the upstream version of -pipelist patch
2012-09-06 14:41:27 +02:00
Daniel Kopecek 049d9661dd added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
- re-enabled SSSD support
- removed libsss_sudo dependency
2012-07-26 09:32:44 +02:00
Bill Nottingham 0247beae71 Flip sudoers2ldif bit after make install, since it was making it executable again. 2012-07-24 14:48:31 -04:00
Dennis Gilmore 94079dc775 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-21 16:34:41 -05:00
Daniel Kopecek a03aed0f10 Updated sources 2012-05-17 14:20:22 +02:00
Daniel Kopecek 86c7e6867b update to 1.8.5
- fixed CVE-2012-2337
- temporarily disabled SSSD support
2012-05-17 12:51:44 +02:00
Daniel Kopecek 74fe5b93c4 Fixed a typo in the spec file 2012-02-29 10:21:41 +01:00
Daniel Kopecek 6b548c85a8 fixed problems with undefined symbols (rhbz#798517) 2012-02-29 10:20:33 +01:00
Daniel Kopecek b27e499e8f SSSD patch update 2012-02-22 11:27:43 +01:00
Daniel Kopecek d415988861 added SSSD support 2012-02-07 12:25:11 +01:00
Daniel Kopecek 2c51203bb4 added patch for CVE-2012-0809 2012-01-26 15:36:37 +01:00
Dennis Gilmore 6a1e504d6b - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 22:32:29 -06:00
Daniel Kopecek 0894814a99 update to 1.8.3p1
disable output word wrapping if the output is piped
2011-11-10 10:22:56 +01:00
Peter Robinson 911d5c1fe9 Remove execute bit from sample script in docs so we don't pull in perl 2011-09-07 09:48:26 +01:00
Daniel Kopecek 269d3c7dce rebase to 1.8.1p2
removed .sudoi patch
fixed typo: RELPRO -> RELRO
added -devel subpackage for the sudo_plugin.h header file
use default ldap configuration files again
2011-07-12 13:20:39 +02:00
Daniel Kopecek c973b40001 build with RELPRO 2011-06-03 15:01:00 +02:00
Dennis Gilmore ed2333e15c - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild 2011-02-09 10:29:16 -06:00
Daniel Kopecek e5db21ffd8 bump release number 2011-01-17 11:40:57 +01:00
Daniel Kopecek 142eb81e35 Corrected sudo.spec 2011-01-17 11:39:16 +01:00
Daniel Kopecek 92c68ba926 - rebase to 1.7.4p5
- fixed sudo-1.7.4p4-getgrouplist.patch
- fixes CVE-2011-0008, CVE-2011-0010
2011-01-17 11:23:52 +01:00
Daniel Kopecek d12db81253 - anybody in the wheel group has now root access (using password) (rhbz#656873)
- sync configuration paths with the nss_ldap package (rhbz#652687)
2010-11-30 12:16:25 +01:00
Daniel Kopecek ecddd163e2 - added upstream patch to fix rhbz#638345 2010-09-29 10:26:02 +02:00
Daniel Kopecek 9714d256ce - added patch for #635250
- /var/run/sudo -> /var/db/sudo in .spec
2010-09-20 08:38:07 +02:00
Daniel Kopecek 574273529d Cleanup 2010-09-07 17:19:29 +02:00
Daniel Kopecek e273750ee7 - sudo now uses /var/db/sudo for timestamps 2010-09-07 16:49:47 +02:00
dnk 520e07da9c - update to new upstream version
- new command available: sudoreplay
- use native audit support
- corrected license field value: BSD -> ISC
2010-09-07 16:28:31 +02:00
Fedora Release Engineering c9cd6fce71 dist-git conversion 2010-07-29 13:19:36 +00:00
Daniel Kopeček 4933b8941d - added patch that fixes insufficient environment sanitization issue
(#598154)
2010-06-02 09:06:33 +00:00
Daniel Kopeček ac43db5783 - update to new upstream version
- merged .audit and .libaudit patch
- added sudoers.ldap.5* to files
2010-04-14 13:49:58 +00:00
Daniel Kopeček d3f6d25f13 forgot to update sources... 2010-03-01 11:59:20 +00:00
Daniel Kopeček cd64307f4c update to new upstream version 2010-03-01 11:54:07 +00:00
Daniel Kopeček 0d6a144061 - fixed no valid sudoers sources found (#558875) 2010-02-16 22:27:13 +00:00
Daniel Kopeček 8e5b1df1b9 - audit related Makefile.in and configure.in corrections
- added --with-audit configure option
- removed call to libtoolize
2010-02-10 15:52:05 +00:00
Daniel Kopeček 46cc5da5fe - fixed segfault when #include directive is used in cycles (#561336) 2010-02-10 12:38:59 +00:00
Daniel Kopeček a9a317e7d0 - Add /etc/sudoers.d dir and use it in default config (#551470).
- Drop *.pod man page duplicates from docs.
2010-01-12 13:17:31 +00:00
Daniel Kopeček 7a4ce764b3 - new upstream version 1.7.2p2-1
- commented out unused aliases in sudoers to make visudo happy (#550239)
2010-01-07 15:24:53 +00:00
Bill Nottingham 1362d08ffc Fix typo that causes a failure to update the common directory. (releng
#2781)
2009-11-25 23:15:39 +00:00
Tomáš Mráz 4e2470df23 - rebuilt with new audit 2009-08-21 11:19:03 +00:00
Daniel Kopeček ea73fb27c7 cleanup 2009-08-20 13:01:46 +00:00
Daniel Kopeček 1c09726f73 new sources 2009-08-20 12:46:32 +00:00
Daniel Kopeček 9bc07b3b72 moved secure_path from compile-time option to sudoers file (#517428) 2009-08-20 12:38:43 +00:00
Jesse Keating bf223ad016 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-27 04:58:19 +00:00
Daniel Kopeček 0b7f70f9e1 - moved the closefrom() call before audit_help_open()
- epoch number sync
2009-07-09 13:29:34 +00:00