summaryrefslogtreecommitdiff
path: root/security/sudo
Commit message (Collapse)AuthorAgeFilesLines
* Add OPTIONS for WITH_DISABLE_ROOT_SUDO, WITH_DISABLE_AUTH, andTom McLaughlin2009-06-121-1/+16
| | | | | | | | | WITH_NOARGS_SHELL Submitted by: Scott Fultz Notes: svn path=/head/; revision=235610
* Security update for sudo to 1.6.9p20 for CVE 2009-0034Tom McLaughlin2009-02-062-5/+5
| | | | | | | | | | | | | | | | | | Changes: - Only use the cached supplementory group vector when matching groups for the invoking user. (security) - When setting the umask, use the union of the user's umask and the default value set in sudoers so that we never lower the user's umask when running a command. - Sudo now operates in the C locale again when doing a match against sudoers. PR: 131446 Submitted by: Eygene Ryabinkin Security: vid:13d6d997-f455-11dd-8516-001b77d09812 Notes: svn path=/head/; revision=227734
* - Add FTP_PASSIVE_MODE to example env_keep line for pkg utilities and fetch.Tom McLaughlin2008-10-111-8/+7
| | | | | | | Suggested by: koitsu Notes: svn path=/head/; revision=221444
* Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.Rong-En Fan2008-08-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases. To workaround this issue, many ports hack the CONFIGURE_TARGET variable so that it contains the ``--build='' prefix. To solve this issue, under the fact that some ports still have configure script generated by the old autoconf, we use runtime detection in the do-configure target so that the proper argument can be used. Changes to Mk/*: - Add runtime detection magic in bsd.port.mk - Remove CONFIGURE_TARGET hack in various bsd.*.mk - USE_GNOME=gnometarget is now an no-op Changes to individual ports, other than removing the CONFIGURE_TARGET hack: = pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables) - comms/gnuradio - science/abinit - science/elmer-fem - science/elmer-matc - science/elmer-meshgen2d - science/elmerfront - science/elmerpost = use x86_64 as ARCH - devel/g-wrap = other changes - print/magicfilter GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf Total # of ports modified: 1,027 Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes) PR: 126524 (obsoletes 52917) Submitted by: rafan Tested on: two pointyhat 7-amd64 exp runs (by pav) Approved by: portmgr (pav) Notes: svn path=/head/; revision=218938
* - Update to 1.6.9p17Tom McLaughlin2008-07-062-6/+5
| | | | | | | | * the -i flag implies resetting the environment as it did prior to 1.6.9. The -i and -E flags are now mutually-exclusive. Notes: svn path=/head/; revision=216420
* - Fix pkg-plist, libtool archive is no longer installed.Tom McLaughlin2008-04-102-1/+1
| | | | | | | Prompted by: pavmail Notes: svn path=/head/; revision=211011
* - Update to 1.6.9p15Tom McLaughlin2008-04-093-6/+6
| | | | | | | | | | * The HOME environment variable is once again preserved by default, as per the documentation. - Finally remember to fix the $FreeBSD$ line in pam file. Notes: svn path=/head/; revision=210944
* - Update to 1.6.9p14Tom McLaughlin2008-03-092-5/+5
| | | | | | | | | | * Check sudoers even if user is found in LDAP so Defaults can take effect. * Fix crash when pam_lastlog is (incorrectly) usesd in session section of PAM file. Notes: svn path=/head/; revision=208688
* Update to 1.6.9p12Tom McLaughlin2008-01-282-5/+5
| | | | | | | | | | | | | | | | Changes: - The ALL command in sudoers now implies SETENV permissions. - The command search is now performed using the target user's auxiliary group vector too. - Various LDAP code improvements. - Added passprompt_override flag to sudoers to cause sudo's prompt to be used in all cases. Also set when the -p flag is used. - New %p prompt escape that expands to the user whose password is being prompted, as specified by the rootpw, targetpw and runaspw sudoers flags. Notes: svn path=/head/; revision=206305
* - Make fetchable again. Add my MASTER_SITE_LOCAL to the mix and replaceTom McLaughlin2007-11-121-9/+7
| | | | | | | | | | a number of outdated sites. Notified by: Ferenc Gartner Approved by: portmgr (linimon, erwin) Notes: svn path=/head/; revision=202636
* Update to 1.6.9p6Tom McLaughlin2007-10-232-5/+5
| | | | | | | | - Sudo now only prints the password prompt if the process is in the foreground. Notes: svn path=/head/; revision=201776
* Update to 1.6.9p5:Tom McLaughlin2007-09-172-5/+5
| | | | | | | | | - Fixed a bug in the IP address matching introduced by the IPV6 merge. - Fixed sudoedit when used on a non-existent file. - Groups and netgroups are now valid in an LDAP sudoRunas statement. Notes: svn path=/head/; revision=199621
* Install schema.OpenLDAP into DOCSDIR.Tom McLaughlin2007-09-032-0/+2
| | | | | | | Prompted by: flz Notes: svn path=/head/; revision=198701
* Update to 1.6.9p4Tom McLaughlin2007-08-273-8/+23
| | | | | | | | | - IPv6 support added. - Added notes to default sudoers for handling environmental variables related to our pkg_* tools and portupgrade. Notes: svn path=/head/; revision=198399
* - Work around broken configure script and explicitly set location ofTom McLaughlin2007-08-132-4/+12
| | | | | | | | | | | | | | | | | sudo_noexec.so to unbreak NOEXEC option. [1] - Build using --with-secure-path if SUDO_SECURE_PATH is set when building the port. SUDO_SECURE_PATH should be set to a PATH string. [2] - Don't bother deleting sudo_noexec.la. Deleting the file after it's installed is ugly and since it's not harmful it's not worth patching the install. - Set CONFIGURE_TARGET. PR: 115442 [1], 115381 [2] Submitted by: vd [1], Janos Mohacsi [2] Notes: svn path=/head/; revision=197550
* Fix session stack in default pam file.Tom McLaughlin2007-08-032-1/+2
| | | | Notes: svn path=/head/; revision=196996
* Update to 1.6.9p3Tom McLaughlin2007-08-022-5/+5
| | | | | | | - Fixes bug related to supplemental group matching Notes: svn path=/head/; revision=196976
* Update to 1.6.9p2Tom McLaughlin2007-07-302-5/+5
| | | | | | | - Environment handling fix. Notes: svn path=/head/; revision=196722
* Fix PORTVERSIONTom McLaughlin2007-07-271-1/+1
| | | | | | | Noticed by: ume Notes: svn path=/head/; revision=196357
* - Update to 1.6.9p1Tom McLaughlin2007-07-264-22/+9
| | | | | | | | | | | | | * Worked around a bug in some PAM implementations that caused a crash when no tty was present. * Fixed a crash on some platforms in the error logging function. - Change default pam session stack to pam_permit like su does [1] - Grab maintainership Sugested by: des [1] Notes: svn path=/head/; revision=196325
* - Fix segfault when there is no TTY when executing. [1]Tom McLaughlin2007-07-233-1/+17
| | | | | | | | | | | | - Temporarilly disable session entry in default pam file because pam_lastlog causes users to appear as though they have logged out in system logs. [2] Reported by: yarodin@gmail.com [1], Paul Fraser <pfraser@gmail.com> [2] Submitted by: Todd Miller [1] Notes: svn path=/head/; revision=196093
* Update to 1.6.9Tom McLaughlin2007-07-215-23/+47
| | | | | | | | | | | | | | | | | Application changes: - PAM, since present, is used by default. - Environment variable handling has changed significantly. - Sudo checks the user's supplemental group vector so nsswitch order is no longer important for group based rules. (See UPGRADE and CHANGING under share/doc/sudo/ for more.) Port changes: - PAM file is no longer clobered on reinstall. - OPIE option has been removed due to PAM being used by default. - Selected documentation is now installed. Notes: svn path=/head/; revision=195970
* - Add an option to enable insultsAndrew Pantyukhin2007-05-021-0/+6
| | | | | | | Submitted by: Dan Casey <dcasey@debtresolve.com> Notes: svn path=/head/; revision=191418
* Install a PAM policy, rather than just suggesting that the admin do so.Dag-Erling Smørgrav2007-04-104-21/+20
| | | | Notes: svn path=/head/; revision=189667
* Reset mharo due to maintainer-timeouts and no response to PRs.Mark Linimon2007-03-231-1/+1
| | | | | | | Hat: portmgr Notes: svn path=/head/; revision=188084
* fix option textMichael Haro2006-07-281-1/+1
| | | | | | | Reported by: Nick Fishman <kwlogical@bellsouth.net> Notes: svn path=/head/; revision=168939
* - Add LDAP support (off by default)Sergey Matveychuk2006-04-282-1/+30
| | | | | | | | | | | | - OPTIONS'fy - Remove obsoleted USE_REINPLACE PR: ports/95598 Submitted by: Dmitriy Kirhlarov <dkirhlarov@localhost.oilspace.com> Approved by: maintainer timeout (2 weeks) Notes: svn path=/head/; revision=160670
* SHA256ifyEdwin Groothuis2006-01-241-0/+1
| | | | | | | Approved by: krion@ Notes: svn path=/head/; revision=154303
* - Remove etc/sudoers on deinstall if user haven't modified itPav Lucistnik2005-12-173-2/+5
| | | | | | | | PR: ports/69288 (based on) Approved by: maintainer timeout (mharo; year and a half) Notes: svn path=/head/; revision=151452
* Upgrade to 1.6.8.12Michael Haro2005-11-142-5/+4
| | | | | | | | PR: 88865 Submitted by: Phil Oleson <oz@nixil.net> Notes: svn path=/head/; revision=148199
* Security update to latest release: 1.6.8p9.Sergey A. Osokin2005-06-212-4/+4
| | | | | | | | | | | | | | | | | <Security Alert> Summary: A race condition in Sudo's command pathname handling prior to Sudo version 1.6.8p9 that could allow a user with Sudo privileges to run arbitrary commands. Sudo versions affected: Sudo versions 1.3.1 up to and including 1.6.8p8. </Security Alert> More information about this incident available at: http://www.sudo.ws/sudo/alerts/path_race.html Notes: svn path=/head/; revision=137811
* Upgrade to 1.6.8p8Michael Haro2005-04-152-4/+4
| | | | Notes: svn path=/head/; revision=133429
* update to 1.6.8p7Michael Haro2005-02-072-4/+4
| | | | Notes: svn path=/head/; revision=128239
* Upgrade to 1.6.8p6Michael Haro2005-01-082-4/+4
| | | | Notes: svn path=/head/; revision=125869
* Update to 1.6.8p5Michael Haro2004-11-302-4/+4
| | | | Notes: svn path=/head/; revision=122780
* Update to latest release of sudoMichael Haro2004-11-182-4/+4
| | | | Notes: svn path=/head/; revision=121841
* Update to sudo-1.6.3p8, which *really* includes the CDPATH fix, andPeter Pentchev2004-11-173-15/+5
| | | | | | | | | | another one that does not directly affect FreeBSD (our _PATH_VARTMP was fine before, too). Approved by: mharo (maintainer) Notes: svn path=/head/; revision=121805
* strip out CDPATHMichael Haro2004-11-162-1/+11
| | | | | | | Submitted by: Peter Pentchev <roam@ringlet.net> Notes: svn path=/head/; revision=121739
* Update to 1.6.8p2Michael Haro2004-11-122-4/+4
| | | | | | | | o Bash exported functions and the CDPATH variable are now stripped from the environment passed to the program to be executed. Notes: svn path=/head/; revision=121480
* Update to 1.6.8p1Michael Haro2004-09-192-4/+4
| | | | | | | | Submitted by: many people Approved by: portsmgr (marcus) Notes: svn path=/head/; revision=118290
* Update to 1.6.8Michael Haro2004-08-204-21/+9
| | | | Notes: svn path=/head/; revision=116736
* Undo yesterdays change after sysutils/porttools suddenly failed.Edwin Groothuis2004-07-203-7/+5
| | | | | | | | | Kris (bento (noh! pointyhat)) reported it PR: ports/58387 Notes: svn path=/head/; revision=114281
* [PATCH] security/sudo: Utilize EXAMPLESDIREdwin Groothuis2004-07-193-5/+7
| | | | | | | | | | | | | | | Utilize EXAMPLESDIR to improves layout; i.e., configuration file -> ${PREFIX}/etc sample configuration file -> ${PREFIX}/share/examples/${PORTNAME} This change helps if many configuration files and sample ones exist. PR: ports/58387 Submitted by: Hideyuki KURASHINA <rushani@FreeBSD.org> Notes: svn path=/head/; revision=114040
* Add SIZEMichael Haro2004-01-302-1/+2
| | | | Notes: svn path=/head/; revision=99459
* Add more MASTER_SITES and remove dead oneMichael Haro2003-12-171-2/+7
| | | | Notes: svn path=/head/; revision=96006
* Add another MASTER_SITEMichael Haro2003-12-161-0/+1
| | | | | | | Submitted by: "Michael Sharp" <ms@probsd.org> Notes: svn path=/head/; revision=95984
* Add WITH_SHELL_SETS_HOME knob to security/sudoMichael Haro2003-07-171-0/+4
| | | | | | | | PR: 47087 Submitted by: Stefan Farfeleder <stefan@fafoe.dyndns.org> Notes: svn path=/head/; revision=85019
* upgrade from 1.6.7.4 to 1.6.7.5Michael Haro2003-07-172-3/+3
| | | | | | | | PR: 52237 Submitted by: Sergey A. Osokin <osa@FreeBSD.org.ru> Notes: svn path=/head/; revision=85018
* update from 1.6.6 to 1.6.7p4Michael Haro2003-04-194-58/+16
| | | | | | | | PR: 51084 Submitted by: Sergey A. Osokin <osa@freebsd.org.ru> Notes: svn path=/head/; revision=79307
* Clear moonlight beckons.Ade Lovett2003-03-072-1/+1
| | | | | | | | | | Requiem mors pacem pkg-comment, And be calm ports tree. E Nomini Patri, E Fili, E Spiritu Sancti. Notes: svn path=/head/; revision=77045
generated by cgit v1.3 (git 2.53.0) at 2026-09-02 13:57:42 +0000