ports/security/sudo, branch release/13.3.0

security/sudo: Update to 1.9.15p5

2024-01-02T14:17:41Z

Major changes between sudo 1.9.15p5 and 1.9.15p4: * Fixed evaluation of the "lecture", "listpw", "verifypw", and "fdexec" sudoers Defaults settings when used without an explicit value. Previously, if specified without a value they were evaluated as boolean "false", even when the negation operator ('!') was not present. * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries using the NETGROUP_BASE setting from being performed. * Sudo will now transparently rename a user's lecture file from the older name-based path to the newer user-ID-based path. GitHub issue #342. * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066. PR: 276032 Approved by: garga (maintainer) MFH: 2024Q1

security/sudo: Update to 1.9.15p4

2023-12-19T00:25:52Z

Major changes between sudo 1.9.15p4 and 1.9.15p3: * Fixed a bug introduced in sudo 1.9.15 that could prevent a user's privileges from being listed by "sudo -l" if the sudoers entry in /etc/nsswitch.conf contains "[SUCCESS=return]". This did not affect the ability to run commands via sudo. Bug #1063. PR: 275788 Approved by: garga (maintainer) MFH: 2023Q4

security/sudo: Update to 1.9.15p3

2023-12-14T13:53:26Z

Major changes between sudo 1.9.15p3 and 1.9.15p2: * Always disable core dumps when sudo sends itself a fatal signal. Fixes a problem where sudo could potentially dump core dump when it re-sends the fatal signal to itself. This is only an issue if the command received a signal that would normally result in a core dump but the command did not actually dump core. * Fixed a bug matching a command with a relative path name when the sudoers rule uses shell globbing rules for the path name. Bug #1062. * Permit visudo to be run even if the local host name is not set. GitHub issue #332. * Fixed an editing error introduced in sudo 1.9.15 that could prevent sudoreplay from replaying sessions correctly. GitHub issue #334. * Fixed a bug introduced in sudo 1.9.15 where "sudo -l > /dev/null" could hang on Linux systems. GitHub issue #335. * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified in sudoers were not applied to the command being run. PR: 275754 Approved by: garga (maintainer) MFH: 2023Q4

security/sudo: Update to 1.9.15p2

2023-11-09T18:00:28Z

* Fixed a bug on BSD systems where sudo would not restore the terminal settings on exit if the terminal had parity enabled. GitHub issue #326. Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: Update to 1.9.15p1

2023-11-08T11:19:05Z

* Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based sudoers from being able to read the ldap.conf file. GitHub issue #325. PR: 274960 Reported by: Daniel Porsch Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: Update to 1.9.15

2023-11-06T18:13:29Z

While here: - Prevent combination of SSSD and GSSAPI_HEIMDAL because sssd port requires MIT kerberos and it will conflict with heimdal - Removed SSSD_DEVEL option because sssd-devel port requires sudo and it creates a circular dependency - Fix OPIE on FreeBSD versions after it was removed from base Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: Fix build with openssl from ports

2023-11-01T12:00:24Z

Since SSL support is being changed and sudo can be built without it, add a new SSL option, on by default. When option is enabled, use --enable-openssl=${OPENSSLBASE} to make sure it consumes desired OpenSSL implementation. Also add pkgconfig dependency because configure script rely on it to detect openssl details. PR: 274753 Reported by: tburns@hrsd.com Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: Update to 1.9.14p3

2023-07-25T13:44:22Z

Major changes between sudo 1.9.14p3 and 1.9.14p2: * Fixed a crash with Python 3.12 when the sudo Python python is unloaded. This only affects "make check" for the Python plugin. * Adapted the sudo Python plugin test output to match Python 3.12. PR: 272707 Approved by: garga (maintainer) MFH: 2023Q3

security/sudo: Update to 1.9.14p2

2023-07-17T14:20:56Z

Sponsored by: Rubicon Communications, LLC ("Netgate")

security/sudo: add sssd-devel option

2023-07-14T13:06:49Z

security/sudo already allows for the use of security/sssd (SSSD) This patch allows for selecting security/sssd-devel (SSSD_DEVEL) instead. PR: 272488