173 lines
4.9 KiB
RPMSpec
173 lines
4.9 KiB
RPMSpec
Summary: Allows restricted root access for specified users.
|
|
Name: sudo
|
|
Version: 1.6.6
|
|
Release: 1
|
|
License: BSD
|
|
Group: Applications/System
|
|
Source: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
|
|
Patch: sudo-1.6.5p3.patch
|
|
URL: http://www.courtesan.com/sudo/
|
|
BuildRoot: %{_tmppath}/%{name}-root
|
|
Requires: /etc/pam.d/system-auth
|
|
BuildRequires: pam-devel
|
|
|
|
%description
|
|
Sudo (superuser do) allows a system administrator to give certain
|
|
users (or groups of users) the ability to run some (or all) commands
|
|
as root while logging all commands and arguments. Sudo operates on a
|
|
per-command basis. It is not a replacement for the shell. Features
|
|
include: the ability to restrict what commands a user may run on a
|
|
per-host basis, copious logging of each command (providing a clear
|
|
audit trail of who did what), a configurable timeout of the sudo
|
|
command, and the ability to use the same configuration file (sudoers)
|
|
on many different machines.
|
|
|
|
%prep
|
|
%setup -q
|
|
%patch -p1 -b .sec
|
|
|
|
%build
|
|
%configure \
|
|
--prefix=%{_prefix} \
|
|
--sbindir=%{_sbindir} \
|
|
--with-logging=syslog \
|
|
--with-logfac=authpriv \
|
|
--with-pam \
|
|
--with-editor=/bin/vi \
|
|
--with-env-editor \
|
|
--with-ignore-dot \
|
|
--with-tty-tickets
|
|
make
|
|
|
|
%install
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
mkdir $RPM_BUILD_ROOT
|
|
%{makeinstall} install_uid=`id -u` install_gid=`id -g` sudoers_uid=`id -u` sudoers_gid=`id -g`
|
|
chmod 755 $RPM_BUILD_ROOT%{_bindir}/* $RPM_BUILD_ROOT%{_sbindir}/*
|
|
install -d -m 700 $RPM_BUILD_ROOT/var/run/sudo
|
|
|
|
mkdir -p $RPM_BUILD_ROOT/etc/pam.d
|
|
cat > $RPM_BUILD_ROOT/etc/pam.d/sudo << EOF
|
|
#%PAM-1.0
|
|
auth required /lib/security/pam_stack.so service=system-auth
|
|
account required /lib/security/pam_stack.so service=system-auth
|
|
password required /lib/security/pam_stack.so service=system-auth
|
|
session required /lib/security/pam_stack.so service=system-auth
|
|
EOF
|
|
|
|
%clean
|
|
rm -rf $RPM_BUILD_ROOT
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%doc BUGS CHANGES FAQ HISTORY README RUNSON TODO TROUBLESHOOTING *.pod
|
|
%attr(0440,root,root) %config(noreplace) /etc/sudoers
|
|
%config(noreplace) /etc/pam.d/sudo
|
|
%dir /var/run/sudo
|
|
%attr(4111,root,root) %{_bindir}/sudo
|
|
%attr(0755,root,root) %{_sbindir}/visudo
|
|
%{_mandir}/man5/sudoers.5*
|
|
%{_mandir}/man8/sudo.8*
|
|
%{_mandir}/man8/visudo.8*
|
|
|
|
# Make sure permissions are ok even if we're updating
|
|
%post
|
|
/bin/chmod 0440 /etc/sudoers || :
|
|
|
|
%changelog
|
|
* Thu Jun 27 2002 Bill Nottingham <notting@redhat.com> 1.6.6-1
|
|
- update to 1.6.6
|
|
|
|
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Thu May 23 2002 Tim Powers <timp@redhat.com>
|
|
- automated rebuild
|
|
|
|
* Thu Apr 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-2
|
|
- Fix bug #63768
|
|
|
|
* Thu Mar 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-1
|
|
- 1.6.5p2
|
|
|
|
* Fri Jan 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p1-1
|
|
- 1.6.5p1
|
|
- Hope this "a new release per day" madness stops ;)
|
|
|
|
* Thu Jan 17 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5-1
|
|
- 1.6.5
|
|
|
|
* Tue Jan 15 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4p1-1
|
|
- 1.6.4p1
|
|
|
|
* Mon Jan 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-1
|
|
- Update to 1.6.4
|
|
|
|
* Mon Jul 23 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.3p7-2
|
|
- Add build requirements (#49706)
|
|
- s/Copyright/License/
|
|
- bzip2 source
|
|
|
|
* Sat Jun 16 2001 Than Ngo <than@redhat.com>
|
|
- update to 1.6.3p7
|
|
- use %%{_tmppath}
|
|
|
|
* Fri Feb 23 2001 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 1.6.3p6, fixes buffer overrun
|
|
|
|
* Tue Oct 10 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- 1.6.3p5
|
|
|
|
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
|
|
- automatic rebuild
|
|
|
|
* Tue Jun 06 2000 Karsten Hopp <karsten@redhat.de>
|
|
- fixed owner of sudo and visudo
|
|
|
|
* Thu Jun 1 2000 Nalin Dahyabhai <nalin@redhat.com>
|
|
- modify PAM setup to use system-auth
|
|
- clean up buildrooting by using the makeinstall macro
|
|
|
|
* Tue Apr 11 2000 Bernhard Rosenkraenzer <bero@redhat.com>
|
|
- initial build in main distrib
|
|
- update to 1.6.3
|
|
- deal with compressed man pages
|
|
|
|
* Tue Dec 14 1999 Preston Brown <pbrown@redhat.com>
|
|
- updated to 1.6.1 for Powertools 6.2
|
|
- config files are now noreplace.
|
|
|
|
* Thu Jul 22 1999 Tim Powers <timp@redhat.com>
|
|
- updated to 1.5.9p2 for Powertools 6.1
|
|
|
|
* Wed May 12 1999 Bill Nottingham <notting@redhat.com>
|
|
- sudo is configured with pam. There's no pam.d file. Oops.
|
|
|
|
* Mon Apr 26 1999 Preston Brown <pbrown@redhat.com>
|
|
- upgraded to 1.59p1 for powertools 6.0
|
|
|
|
* Tue Oct 27 1998 Preston Brown <pbrown@redhat.com>
|
|
- fixed so it doesn't find /usr/bin/vi first, but instead /bin/vi (always installed)
|
|
|
|
* Fri Oct 08 1998 Michael Maher <mike@redhat.com>
|
|
- built package for 5.2
|
|
|
|
* Mon May 18 1998 Michael Maher <mike@redhat.com>
|
|
- updated SPEC file.
|
|
|
|
* Thu Jan 29 1998 Otto Hammersmith <otto@redhat.com>
|
|
- updated to 1.5.4
|
|
|
|
* Tue Nov 18 1997 Otto Hammersmith <otto@redhat.com>
|
|
- built for glibc, no problems
|
|
|
|
* Fri Apr 25 1997 Michael Fulbright <msf@redhat.com>
|
|
- Fixed for 4.2 PowerTools
|
|
- Still need to be pamified
|
|
- Still need to move stmp file to /var/log
|
|
|
|
* Mon Feb 17 1997 Michael Fulbright <msf@redhat.com>
|
|
- First version for PowerCD.
|
|
|