c0063cebde
fixed invalid sesh argument array construction
2016-05-12 09:33:11 +02:00
df8acf06e9
update to 1.8.16
2016-04-05 12:52:51 +02:00
8ef2445bcd
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-05 00:48:28 +00:00
2306938c7f
update to 1.8.15
...
- fixes CVE-2015-5602
2015-11-05 09:50:31 +01:00
2c03b0a9fd
Enable upstream test suite
2015-08-24 14:18:22 +02:00
c1ed913d71
Fix coverity scan outputs
...
- add patch that resolves initialization problem before call sudo_strsplit
- add patch that resolves deadcode in visudo.c
2015-08-24 11:50:05 +02:00
09c50775bb
Update to 1.8.14p3
2015-07-27 13:16:01 +02:00
febf08760c
update to 1.8.14p1
2015-07-21 14:59:30 +02:00
af884a422e
Add patch3 sudo.1.8.14b4-passexpire.patch that makes change in documentation about timestamp_time
...
Resolves: rhbz#1162070
2015-07-14 14:02:08 +02:00
9047d526fd
Update to 1.8.14b4
...
- Add own %{_tmpfilesdir}/sudo.conf
2015-07-13 10:01:05 +02:00
fb968d2c85
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-19 01:55:23 +00:00
200fa94028
update to 1.8.12
...
- fixes CVE-2014-9680
2015-02-18 10:32:39 +01:00
7719973d9b
update to 1.8.11p2
...
- added patch to fix upstream bug #671 -- exiting immediately
when audit is disabled
2014-11-03 13:23:04 +01:00
a5f9360d9a
update to 1.8.11
...
- major changes & fixes:
- when running a command in the background, sudo will now forward
SIGINFO to the command
- the passwords in ldap.conf and ldap.secret may now be encoded in base64.
- SELinux role changes are now audited. For sudoedit, we now audit
the actual editor being run, instead of just the sudoedit command.
- it is now possible to match an environment variable's value as well as
its name using env_keep and env_check
- new files created via sudoedit as a non-root user now have the proper group id
- sudoedit now works correctly in conjunction with sudo's SELinux RBAC support
- it is now possible to disable network interface probing in sudo.conf by
changing the value of the probe_interfaces setting
- when listing a user's privileges (sudo -l), the sudoers plugin will now prompt
for the user's password even if the targetpw, rootpw or runaspw options are set.
- the new use_netgroups sudoers option can be used to explicitly enable or disable
netgroups support
- visudo can now export a sudoers file in JSON format using the new -x flag
- added patch to read ldap.conf more closely to nss_ldap
- require /usr/bin/vi instead of vim-minimal
- include pam.d/system-auth in PAM session phase from pam.d/sudo
- include pam.d/sudo in PAM session phase from pam.d/sudo-i
2014-09-30 15:45:25 +02:00
71fccff302
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-18 04:03:38 +00:00
8f687c7bef
fix license handling
2014-08-05 11:04:25 -04:00
ed48f93a75
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-08 02:26:52 -05:00
824a03a3b1
Drop ChangeLog, we ship NEWS
2014-06-01 00:24:08 +01:00
cdc45918d3
Update sudoers source in the spec
2014-03-12 12:44:37 +01:00
fbec0ab1c9
Minor update
...
- remove bundled copy of zlib before compilation
- drop the requiretty Defaults setting from sudoers
2014-03-12 12:29:34 +01:00
0477581f3c
Own the %{_libexecdir}/sudo dir.
2014-01-25 20:15:33 +02:00
8729726fc1
update to 1.8.8
...
- major changes & fixes:
- LDAP SASL support now works properly with Kerberos
- root may no longer change its SELinux role without entering a password
- user messages are now always displayed in the user's locale, even when
the same message is being logged or mailed in a different locale.
- log files created by sudo now explicitly have the group set to group
ID 0 rather than relying on BSD group semantics
- sudo now stores its libexec files in a sudo subdirectory instead of in
libexec itself
- system_group and group_file sudoers group provider plugins are now
installed by default
- the paths to ldap.conf and ldap.secret may now be specified as arguments
to the sudoers plugin in the sudo.conf file
- ...and many new features and settings. See the upstream ChangeLog for the
full list.
- several sssd support fixes
- added patch to make uid/gid specification parsing more strict (don't accept
an invalid number as uid/gid)
- use the _pkgdocdir macro
(see https://fedoraproject.org/wiki/Changes/UnversionedDocdirs )
- fixed several bugs found by the clang static analyzer
- added %post dependency on chmod
2013-10-01 00:09:16 +02:00
d656fea480
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2013-08-04 10:56:56 -05:00
392812324b
update to 1.8.6p7
...
- fixes CVE-2013-1775 and CVE-2013-1776
- fixed several packaging issues (thanks to ville.skytta@iki.fi )
- build with system zlib.
- let rpmbuild strip libexecdir/*.so.
- own the %{_docdir}/sudo-* dir.
- fix some rpmlint warnings (spaces vs tabs, unescaped macros).
- fix bogus %changelog dates.
2013-02-28 13:47:01 +01:00
d201380f8e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
2013-02-14 18:45:08 -06:00
bbce9a9922
Fixed upstream regression and removed arch specific files
...
- added upstream patch for a regression
- don't include arch specific files in the -devel subpackage
- ship only one sample plugin in the -devel subpackage
2012-11-12 13:17:48 +01:00
a9963cd1b9
update to 1.8.6p3
...
- drop -pipelist patch (fixed in upstream)
2012-09-25 12:37:55 +02:00
41b07d49de
Update to 1.8.6
...
- dropped SSSD patches as they are now part of the upstream source code
- use the upstream version of -pipelist patch
2012-09-06 14:41:27 +02:00
049d9661dd
added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
...
- re-enabled SSSD support
- removed libsss_sudo dependency
2012-07-26 09:32:44 +02:00
0247beae71
Flip sudoers2ldif bit after make install, since it was making it executable again.
2012-07-24 14:48:31 -04:00
94079dc775
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-07-21 16:34:41 -05:00
86c7e6867b
update to 1.8.5
...
- fixed CVE-2012-2337
- temporarily disabled SSSD support
2012-05-17 12:51:44 +02:00
74fe5b93c4
Fixed a typo in the spec file
2012-02-29 10:21:41 +01:00
6b548c85a8
fixed problems with undefined symbols (rhbz#798517)
2012-02-29 10:20:33 +01:00
b27e499e8f
SSSD patch update
2012-02-22 11:27:43 +01:00
d415988861
added SSSD support
2012-02-07 12:25:11 +01:00
2c51203bb4
added patch for CVE-2012-0809
2012-01-26 15:36:37 +01:00
6a1e504d6b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
2012-01-13 22:32:29 -06:00
0894814a99
update to 1.8.3p1
...
disable output word wrapping if the output is piped
2011-11-10 10:22:56 +01:00
911d5c1fe9
Remove execute bit from sample script in docs so we don't pull in perl
2011-09-07 09:48:26 +01:00
269d3c7dce
rebase to 1.8.1p2
...
removed .sudoi patch
fixed typo: RELPRO -> RELRO
added -devel subpackage for the sudo_plugin.h header file
use default ldap configuration files again
2011-07-12 13:20:39 +02:00
c973b40001
build with RELPRO
2011-06-03 15:01:00 +02:00
ed2333e15c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2011-02-09 10:29:16 -06:00
e5db21ffd8
bump release number
2011-01-17 11:40:57 +01:00
142eb81e35
Corrected sudo.spec
2011-01-17 11:39:16 +01:00
92c68ba926
- rebase to 1.7.4p5
...
- fixed sudo-1.7.4p4-getgrouplist.patch
- fixes CVE-2011-0008, CVE-2011-0010
2011-01-17 11:23:52 +01:00
d12db81253
- anybody in the wheel group has now root access (using password) (rhbz#656873)
...
- sync configuration paths with the nss_ldap package (rhbz#652687)
2010-11-30 12:16:25 +01:00
ecddd163e2
- added upstream patch to fix rhbz#638345
2010-09-29 10:26:02 +02:00
9714d256ce
- added patch for #635250
...
- /var/run/sudo -> /var/db/sudo in .spec
2010-09-20 08:38:07 +02:00
e273750ee7
- sudo now uses /var/db/sudo for timestamps
2010-09-07 16:49:47 +02:00
520e07da9c
- update to new upstream version
...
- new command available: sudoreplay
- use native audit support
- corrected license field value: BSD -> ISC
2010-09-07 16:28:31 +02:00
4933b8941d
- added patch that fixes insufficient environment sanitization issue
...
(#598154 )
2010-06-02 09:06:33 +00:00
ac43db5783
- update to new upstream version
...
- merged .audit and .libaudit patch
- added sudoers.ldap.5* to files
2010-04-14 13:49:58 +00:00
d3f6d25f13
forgot to update sources...
2010-03-01 11:59:20 +00:00
cd64307f4c
update to new upstream version
2010-03-01 11:54:07 +00:00
0d6a144061
- fixed no valid sudoers sources found ( #558875 )
2010-02-16 22:27:13 +00:00
8e5b1df1b9
- audit related Makefile.in and configure.in corrections
...
- added --with-audit configure option
- removed call to libtoolize
2010-02-10 15:52:05 +00:00
46cc5da5fe
- fixed segfault when #include directive is used in cycles ( #561336 )
2010-02-10 12:38:59 +00:00
a9a317e7d0
- Add /etc/sudoers.d dir and use it in default config ( #551470 ).
...
- Drop *.pod man page duplicates from docs.
2010-01-12 13:17:31 +00:00
7a4ce764b3
- new upstream version 1.7.2p2-1
...
- commented out unused aliases in sudoers to make visudo happy (#550239 )
2010-01-07 15:24:53 +00:00
4e2470df23
- rebuilt with new audit
2009-08-21 11:19:03 +00:00
ea73fb27c7
cleanup
2009-08-20 13:01:46 +00:00
9bc07b3b72
moved secure_path from compile-time option to sudoers file ( #517428 )
2009-08-20 12:38:43 +00:00
bf223ad016
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2009-07-27 04:58:19 +00:00
0b7f70f9e1
- moved the closefrom() call before audit_help_open()
...
- epoch number sync
2009-07-09 13:29:34 +00:00
6a836e9aac
- updated sudo to version 1.7.1
...
- fixed small bug in configure.in (sudo-1.7.1-conffix.patch)
- reverted the value of secure-path configure option
2009-06-22 14:27:32 +00:00
db5280d0ec
Can't use -5, trying -6
2009-02-24 15:49:07 +00:00
9b190fb143
I hope this is the last commit today...
2009-02-24 15:43:30 +00:00
8e0d152bd4
typo
2009-02-24 15:34:40 +00:00
aefbd0093d
- fixed building with new libtool
...
- fix for incorrect handling of groups in Runas_User
- added /usr/local/sbin to secure-path
2009-02-24 15:24:58 +00:00
eca3e72bb0
- build with sendmail installed
...
- added /usr/local/bin to secure-path
2009-01-13 17:09:02 +00:00
83eef97412
spec file fix
2008-09-03 08:59:59 +00:00
5922acb089
- adjust audit patch, do not scream when kernel is compiled without audit
...
netlink support (#401201
2008-09-02 13:56:42 +00:00
f6d08872cc
upgrade
2008-07-04 14:13:33 +00:00
05534ca1d2
build with newer autoconf-2.62 ( #449614 )
2008-06-18 09:52:34 +00:00
2981ba32e0
- compiled with secure path ( #80215 )
2008-05-13 12:42:02 +00:00
e94854c079
fix path to updatedb in /etc/sudoers ( #445103 )
2008-05-05 11:53:04 +00:00
80df5ff713
include ldap files in rpm package ( #439506 )
2008-03-31 14:08:45 +00:00
475a962dfe
include [sudo] in password prompt
2008-03-13 08:50:25 +00:00
83dd2f4834
audit support improvement
2008-03-04 10:28:10 +00:00
0fe071d2e4
upgrade
2008-02-21 15:10:42 +00:00
7769b8ecbc
spec file fix
2008-02-06 13:39:49 +00:00
659ffd61f2
fix files section
2008-02-06 13:29:36 +00:00
2c73738be1
add buildrequires
2008-02-06 13:05:56 +00:00
6dfc39bc61
- upgrade to the latest upstream release
...
- add selinux support
2008-02-06 12:43:43 +00:00
eb965f4152
add sparc64 to the list of arches that need -fPIE
2008-02-04 08:30:14 +00:00
bb69e9d436
fix 401201: sudo complains: audit_log_user_command(): Connection refused
2008-01-07 18:31:40 +00:00
ebba253fbc
- Rebuild for deps
2007-12-05 22:17:51 +00:00
75b6ccbe62
- Rebuild for openssl bump
2007-12-05 19:29:30 +00:00
e25038bfb0
fix autotools stuff and add audit support
2007-08-30 16:21:58 +00:00
3b2065d554
- upgrade to upstream release
2007-08-20 12:11:21 +00:00
05db95fdf1
also use getgrouplist() to determine group membership ( #235915 )
2007-04-12 08:29:55 +00:00
e3e8515a40
fix some spec file issues
2007-02-26 19:23:08 +00:00
4940ab8619
fix rpmlint issue
2006-12-14 11:23:51 +00:00
8887e35d08
fix typo in sudoers file ( #212308 )
2006-10-26 09:14:04 +00:00
f9c44dec3c
bump for gcc bug
2006-10-01 20:21:12 +00:00
b0b9d355b3
fix sudoers file, X apps didn't work ( #206320 )
2006-09-21 08:41:38 +00:00
c386abaab0
use Red Hat specific default sudoers file
2006-08-08 11:57:00 +00:00
4616de0e31
IPv6 and keyring support
2006-07-16 22:37:37 +00:00
0778e3bc07
bumped for rebuild
2006-07-12 08:19:37 +00:00
Daniel Kopecek
Fedora Release Engineering
Radovan Sroka
Dennis Gilmore
Peter Robinson
Tom Callaway
Peter Robinson
Ville Skyttä
Bill Nottingham
dnk
Daniel Kopeček
Tomáš Mráz
Jesse Keating
Peter Vrabec
Dennis Gilmore
kzak