ports/security/sudo, branch 2023Q4

security/sudo: Update to 1.9.15p4

2023-12-19T00:27:38Z

Major changes between sudo 1.9.15p4 and 1.9.15p3: * Fixed a bug introduced in sudo 1.9.15 that could prevent a user's privileges from being listed by "sudo -l" if the sudoers entry in /etc/nsswitch.conf contains "[SUCCESS=return]". This did not affect the ability to run commands via sudo. Bug #1063. PR: 275788 Approved by: garga (maintainer) MFH: 2023Q4 (cherry picked from commit fb89252c2f3e07499ec865910e9c6645e5f1a13d)

security/sudo: Update to 1.9.15p3

2023-12-14T14:00:00Z

Major changes between sudo 1.9.15p3 and 1.9.15p2: * Always disable core dumps when sudo sends itself a fatal signal. Fixes a problem where sudo could potentially dump core dump when it re-sends the fatal signal to itself. This is only an issue if the command received a signal that would normally result in a core dump but the command did not actually dump core. * Fixed a bug matching a command with a relative path name when the sudoers rule uses shell globbing rules for the path name. Bug #1062. * Permit visudo to be run even if the local host name is not set. GitHub issue #332. * Fixed an editing error introduced in sudo 1.9.15 that could prevent sudoreplay from replaying sessions correctly. GitHub issue #334. * Fixed a bug introduced in sudo 1.9.15 where "sudo -l > /dev/null" could hang on Linux systems. GitHub issue #335. * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified in sudoers were not applied to the command being run. PR: 275754 Approved by: garga (maintainer) (cherry picked from commit 003e8e2292ca05aadc4c4f03b82207337e644e15)

security/sudo: Update to 1.9.15p2

2023-11-09T18:00:51Z

* Fixed a bug on BSD systems where sudo would not restore the terminal settings on exit if the terminal had parity enabled. GitHub issue #326. Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit d4203eed6617d3378821d165d72fbce4aa5cb74c)

security/sudo: Update to 1.9.15p1

2023-11-08T11:19:27Z

* Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based sudoers from being able to read the ldap.conf file. GitHub issue #325. PR: 274960 Reported by: Daniel Porsch Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit 2c9adde974c38bfec592ce77ed23aeba0887cc5e)

security/sudo: Update to 1.9.15

2023-11-06T18:13:54Z

While here: - Prevent combination of SSSD and GSSAPI_HEIMDAL because sssd port requires MIT kerberos and it will conflict with heimdal - Removed SSSD_DEVEL option because sssd-devel port requires sudo and it creates a circular dependency - Fix OPIE on FreeBSD versions after it was removed from base Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit dd773c1540388b14692001643e323a556ed2d445)

security/sudo: Fix build with openssl from ports

2023-11-01T12:08:44Z

Since SSL support is being changed and sudo can be built without it, add a new SSL option, on by default. When option is enabled, use --enable-openssl=${OPENSSLBASE} to make sure it consumes desired OpenSSL implementation. Also add pkgconfig dependency because configure script rely on it to detect openssl details. PR: 274753 Reported by: tburns@hrsd.com Sponsored by: Rubicon Communications, LLC ("Netgate") (cherry picked from commit dbc4e4daf752173acb868fc595ae9fa42f972aef)

security/sudo: Update to 1.9.14p3

2023-07-25T13:44:22Z

Major changes between sudo 1.9.14p3 and 1.9.14p2: * Fixed a crash with Python 3.12 when the sudo Python python is unloaded. This only affects "make check" for the Python plugin. * Adapted the sudo Python plugin test output to match Python 3.12. PR: 272707 Approved by: garga (maintainer) MFH: 2023Q3

security/sudo: Update to 1.9.14p2

2023-07-17T14:20:56Z

Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: add sssd-devel option

2023-07-14T13:06:49Z

security/sudo already allows for the use of security/sssd (SSSD) This patch allows for selecting security/sssd-devel (SSSD_DEVEL) instead. PR: 272488

security/sudo: Update to 1.9.14p1

2023-07-12T12:46:27Z

Major changes between sudo 1.9.14p1 and 1.9.14: * Fixed an "invalid free" bug in sudo_logsrvd that was introduced in version 1.9.14 which could cause sudo_logsrvd to crash. * The sudoers plugin no longer tries to send the terminal name to the log server when no terminal is present. This bug was introduced in version 1.9.14. PR: 272456 Approved by: garga (maintainer) MFH: 2023Q3