aboutsummaryrefslogtreecommitdiff
path: root/security/sudo
Commit message (Collapse)AuthorAgeFilesLines
* - Update to 1.6.9p14Tom McLaughlin2008-03-092-5/+5
| | | | | | | | | | * Check sudoers even if user is found in LDAP so Defaults can take effect. * Fix crash when pam_lastlog is (incorrectly) usesd in session section of PAM file. Notes: svn path=/head/; revision=208688
* Update to 1.6.9p12Tom McLaughlin2008-01-282-5/+5
| | | | | | | | | | | | | | | | Changes: - The ALL command in sudoers now implies SETENV permissions. - The command search is now performed using the target user's auxiliary group vector too. - Various LDAP code improvements. - Added passprompt_override flag to sudoers to cause sudo's prompt to be used in all cases. Also set when the -p flag is used. - New %p prompt escape that expands to the user whose password is being prompted, as specified by the rootpw, targetpw and runaspw sudoers flags. Notes: svn path=/head/; revision=206305
* - Make fetchable again. Add my MASTER_SITE_LOCAL to the mix and replaceTom McLaughlin2007-11-121-9/+7
| | | | | | | | | | a number of outdated sites. Notified by: Ferenc Gartner Approved by: portmgr (linimon, erwin) Notes: svn path=/head/; revision=202636
* Update to 1.6.9p6Tom McLaughlin2007-10-232-5/+5
| | | | | | | | - Sudo now only prints the password prompt if the process is in the foreground. Notes: svn path=/head/; revision=201776
* Update to 1.6.9p5:Tom McLaughlin2007-09-172-5/+5
| | | | | | | | | - Fixed a bug in the IP address matching introduced by the IPV6 merge. - Fixed sudoedit when used on a non-existent file. - Groups and netgroups are now valid in an LDAP sudoRunas statement. Notes: svn path=/head/; revision=199621
* Install schema.OpenLDAP into DOCSDIR.Tom McLaughlin2007-09-032-0/+2
| | | | | | | Prompted by: flz Notes: svn path=/head/; revision=198701
* Update to 1.6.9p4Tom McLaughlin2007-08-273-8/+23
| | | | | | | | | - IPv6 support added. - Added notes to default sudoers for handling environmental variables related to our pkg_* tools and portupgrade. Notes: svn path=/head/; revision=198399
* - Work around broken configure script and explicitly set location ofTom McLaughlin2007-08-132-4/+12
| | | | | | | | | | | | | | | | | sudo_noexec.so to unbreak NOEXEC option. [1] - Build using --with-secure-path if SUDO_SECURE_PATH is set when building the port. SUDO_SECURE_PATH should be set to a PATH string. [2] - Don't bother deleting sudo_noexec.la. Deleting the file after it's installed is ugly and since it's not harmful it's not worth patching the install. - Set CONFIGURE_TARGET. PR: 115442 [1], 115381 [2] Submitted by: vd [1], Janos Mohacsi [2] Notes: svn path=/head/; revision=197550
* Fix session stack in default pam file.Tom McLaughlin2007-08-032-1/+2
| | | | Notes: svn path=/head/; revision=196996
* Update to 1.6.9p3Tom McLaughlin2007-08-022-5/+5
| | | | | | | - Fixes bug related to supplemental group matching Notes: svn path=/head/; revision=196976
* Update to 1.6.9p2Tom McLaughlin2007-07-302-5/+5
| | | | | | | - Environment handling fix. Notes: svn path=/head/; revision=196722
* Fix PORTVERSIONTom McLaughlin2007-07-271-1/+1
| | | | | | | Noticed by: ume Notes: svn path=/head/; revision=196357
* - Update to 1.6.9p1Tom McLaughlin2007-07-264-22/+9
| | | | | | | | | | | | | * Worked around a bug in some PAM implementations that caused a crash when no tty was present. * Fixed a crash on some platforms in the error logging function. - Change default pam session stack to pam_permit like su does [1] - Grab maintainership Sugested by: des [1] Notes: svn path=/head/; revision=196325
* - Fix segfault when there is no TTY when executing. [1]Tom McLaughlin2007-07-233-1/+17
| | | | | | | | | | | | - Temporarilly disable session entry in default pam file because pam_lastlog causes users to appear as though they have logged out in system logs. [2] Reported by: yarodin@gmail.com [1], Paul Fraser <pfraser@gmail.com> [2] Submitted by: Todd Miller [1] Notes: svn path=/head/; revision=196093
* Update to 1.6.9Tom McLaughlin2007-07-215-23/+47
| | | | | | | | | | | | | | | | | Application changes: - PAM, since present, is used by default. - Environment variable handling has changed significantly. - Sudo checks the user's supplemental group vector so nsswitch order is no longer important for group based rules. (See UPGRADE and CHANGING under share/doc/sudo/ for more.) Port changes: - PAM file is no longer clobered on reinstall. - OPIE option has been removed due to PAM being used by default. - Selected documentation is now installed. Notes: svn path=/head/; revision=195970
* - Add an option to enable insultsAndrew Pantyukhin2007-05-021-0/+6
| | | | | | | Submitted by: Dan Casey <dcasey@debtresolve.com> Notes: svn path=/head/; revision=191418
* Install a PAM policy, rather than just suggesting that the admin do so.Dag-Erling Smørgrav2007-04-104-21/+20
| | | | Notes: svn path=/head/; revision=189667
* Reset mharo due to maintainer-timeouts and no response to PRs.Mark Linimon2007-03-231-1/+1
| | | | | | | Hat: portmgr Notes: svn path=/head/; revision=188084
* fix option textMichael Haro2006-07-281-1/+1
| | | | | | | Reported by: Nick Fishman <kwlogical@bellsouth.net> Notes: svn path=/head/; revision=168939
* - Add LDAP support (off by default)Sergey Matveychuk2006-04-282-1/+30
| | | | | | | | | | | | - OPTIONS'fy - Remove obsoleted USE_REINPLACE PR: ports/95598 Submitted by: Dmitriy Kirhlarov <dkirhlarov@localhost.oilspace.com> Approved by: maintainer timeout (2 weeks) Notes: svn path=/head/; revision=160670
* SHA256ifyEdwin Groothuis2006-01-241-0/+1
| | | | | | | Approved by: krion@ Notes: svn path=/head/; revision=154303
* - Remove etc/sudoers on deinstall if user haven't modified itPav Lucistnik2005-12-173-2/+5
| | | | | | | | PR: ports/69288 (based on) Approved by: maintainer timeout (mharo; year and a half) Notes: svn path=/head/; revision=151452
* Upgrade to 1.6.8.12Michael Haro2005-11-142-5/+4
| | | | | | | | PR: 88865 Submitted by: Phil Oleson <oz@nixil.net> Notes: svn path=/head/; revision=148199
* Security update to latest release: 1.6.8p9.Sergey A. Osokin2005-06-212-4/+4
| | | | | | | | | | | | | | | | | <Security Alert> Summary: A race condition in Sudo's command pathname handling prior to Sudo version 1.6.8p9 that could allow a user with Sudo privileges to run arbitrary commands. Sudo versions affected: Sudo versions 1.3.1 up to and including 1.6.8p8. </Security Alert> More information about this incident available at: http://www.sudo.ws/sudo/alerts/path_race.html Notes: svn path=/head/; revision=137811
* Upgrade to 1.6.8p8Michael Haro2005-04-152-4/+4
| | | | Notes: svn path=/head/; revision=133429
* update to 1.6.8p7Michael Haro2005-02-072-4/+4
| | | | Notes: svn path=/head/; revision=128239
* Upgrade to 1.6.8p6Michael Haro2005-01-082-4/+4
| | | | Notes: svn path=/head/; revision=125869
* Update to 1.6.8p5Michael Haro2004-11-302-4/+4
| | | | Notes: svn path=/head/; revision=122780
* Update to latest release of sudoMichael Haro2004-11-182-4/+4
| | | | Notes: svn path=/head/; revision=121841
* Update to sudo-1.6.3p8, which *really* includes the CDPATH fix, andPeter Pentchev2004-11-173-15/+5
| | | | | | | | | | another one that does not directly affect FreeBSD (our _PATH_VARTMP was fine before, too). Approved by: mharo (maintainer) Notes: svn path=/head/; revision=121805
* strip out CDPATHMichael Haro2004-11-162-1/+11
| | | | | | | Submitted by: Peter Pentchev <roam@ringlet.net> Notes: svn path=/head/; revision=121739
* Update to 1.6.8p2Michael Haro2004-11-122-4/+4
| | | | | | | | o Bash exported functions and the CDPATH variable are now stripped from the environment passed to the program to be executed. Notes: svn path=/head/; revision=121480
* Update to 1.6.8p1Michael Haro2004-09-192-4/+4
| | | | | | | | Submitted by: many people Approved by: portsmgr (marcus) Notes: svn path=/head/; revision=118290
* Update to 1.6.8Michael Haro2004-08-204-21/+9
| | | | Notes: svn path=/head/; revision=116736
* Undo yesterdays change after sysutils/porttools suddenly failed.Edwin Groothuis2004-07-203-7/+5
| | | | | | | | | Kris (bento (noh! pointyhat)) reported it PR: ports/58387 Notes: svn path=/head/; revision=114281
* [PATCH] security/sudo: Utilize EXAMPLESDIREdwin Groothuis2004-07-193-5/+7
| | | | | | | | | | | | | | | Utilize EXAMPLESDIR to improves layout; i.e., configuration file -> ${PREFIX}/etc sample configuration file -> ${PREFIX}/share/examples/${PORTNAME} This change helps if many configuration files and sample ones exist. PR: ports/58387 Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org> Notes: svn path=/head/; revision=114040
* Add SIZEMichael Haro2004-01-302-1/+2
| | | | Notes: svn path=/head/; revision=99459
* Add more MASTER_SITES and remove dead oneMichael Haro2003-12-171-2/+7
| | | | Notes: svn path=/head/; revision=96006
* Add another MASTER_SITEMichael Haro2003-12-161-0/+1
| | | | | | | Submitted by: "Michael Sharp" <ms@probsd.org> Notes: svn path=/head/; revision=95984
* Add WITH_SHELL_SETS_HOME knob to security/sudoMichael Haro2003-07-171-0/+4
| | | | | | | | PR: 47087 Submitted by: Stefan Farfeleder <stefan@fafoe.dyndns.org> Notes: svn path=/head/; revision=85019
* upgrade from 1.6.7.4 to 1.6.7.5Michael Haro2003-07-172-3/+3
| | | | | | | | PR: 52237 Submitted by: Sergey A. Osokin <osa@FreeBSD.org.ru> Notes: svn path=/head/; revision=85018
* update from 1.6.6 to 1.6.7p4Michael Haro2003-04-194-58/+16
| | | | | | | | PR: 51084 Submitted by: Sergey A. Osokin <osa@freebsd.org.ru> Notes: svn path=/head/; revision=79307
* Clear moonlight beckons.Ade Lovett2003-03-072-1/+1
| | | | | | | | | | Requiem mors pacem pkg-comment, And be calm ports tree. E Nomini Patri, E Fili, E Spiritu Sancti. Notes: svn path=/head/; revision=77045
* Add a patch from the Sudo CVS repository for proper handling ofPeter Pentchev2003-02-132-1/+48
| | | | | | | | | | the PAM transition from echoed to non-echoed input. PR: 46026 Approved by: mharo (maintainer) Notes: svn path=/head/; revision=75443
* don't depend on perlMichael Haro2002-09-141-1/+2
| | | | | | | Submitted by: David Yeske <dyeske@yahoo.com> Notes: svn path=/head/; revision=66307
* remove insults and allow root to use sudoMichael Haro2002-08-241-3/+0
| | | | Notes: svn path=/head/; revision=64935
* update to 1.6.6Michael Haro2002-04-253-6/+6
| | | | Notes: svn path=/head/; revision=58120
* revert change from this morningMichael Haro2002-04-222-4/+1
| | | | Notes: svn path=/head/; revision=58016
* Patch sudo 1.6.5.2 with GlobalInterSec's sudo patch.Michael Haro2002-04-222-1/+4
| | | | Notes: svn path=/head/; revision=57985
* update to 1.6.5p2Michael Haro2002-01-242-3/+3
| | | | Notes: svn path=/head/; revision=53667
generated by cgit v1.2.3 (git 2.25.1) at 2025-03-10 03:50:40 +0000