Sat Sep 14 14:45:45 2019 UTC ()
security/doas: Update to 6.2p1

Significant items from https://github.com/slicer69/doas/releases:
doas 6.2p1
* Fixes a crash on Linux systems when a specified user on the
  command line did not match a valid entry in the doas.conf file.
  In the past, doas would first try to find an exact username match
  when the "-u" flag was used and, if one could not be found, it
  would try to find a matching numeric UID.
  Now doas requires that an exact username be specified when
  "-u" is used. This avoids confusion (and, on Linux, fuzzy matches
  when a username begins with a number). This means "doas -u 0" can
  no longer be used to run a command as root, and "duas -u 1000" is
  not ambigious if there is a user with the name "1000" on the system.

doas 6.2
* Group permissions of the original user are now dropped on Linux.
  This prevents the original user's group access from interfering
  with the target user's owned files. Group permissions were already
  dropped on FreeBSD (and I believe) NetBSD, and this brings doas's
  Linux behaviour into line with the other systems.
* Fixed a couple of compiler warnings that get rid of either unneeded
  variables or introduce sanity checks on return functions.
  This should make doas more secure, across platforms/compilers.

doas 6.1p1
* ported to illumos, added support for SmartOS and
  OpenIndiana.
* Better pkgsrc integration.


(ng0)
diff -r1.2 -r1.3 pkgsrc/security/doas/Makefile
diff -r1.1 -r1.2 pkgsrc/security/doas/distinfo

cvs diff -r1.2 -r1.3 pkgsrc/security/doas/Makefile (expand / switch to unified diff)

--- pkgsrc/security/doas/Makefile 2019/08/24 15:46:59 1.2
+++ pkgsrc/security/doas/Makefile 2019/09/14 14:45:45 1.3
@@ -1,30 +1,30 @@ @@ -1,30 +1,30 @@
1# $NetBSD: Makefile,v 1.2 2019/08/24 15:46:59 ng0 Exp $ 1# $NetBSD: Makefile,v 1.3 2019/09/14 14:45:45 ng0 Exp $
2 2
3DISTNAME= doas-6.1 3DISTNAME= doas-6.2p1
4CATEGORIES= security 4CATEGORIES= security
5MASTER_SITES= ${MASTER_SITE_GITHUB:=slicer69/} 5MASTER_SITES= ${MASTER_SITE_GITHUB:=slicer69/}
6 6
7MAINTAINER= pkgsrc-users@NetBSD.org 7MAINTAINER= pkgsrc-users@NetBSD.org
8HOMEPAGE= https://github.com/slicer69/doas/ 8HOMEPAGE= https://github.com/slicer69/doas/
9COMMENT= Execute commands as another user 9COMMENT= Execute commands as another user
10LICENSE= 2-clause-bsd AND isc AND modified-bsd 10LICENSE= 2-clause-bsd AND isc AND modified-bsd
11 11
12USE_TOOLS+= gmake yacc 12USE_TOOLS+= gmake yacc
13 13
14# XXX: Upstream supports only NetBSD, FreeBSD, and Linux. 14# XXX: Upstream supports only NetBSD, FreeBSD, Linux,
 15# illumos, SmartOS, OpenIndiana.
15# Add any failing platforms as BROKEN_ON_PLATFORM. 16# Add any failing platforms as BROKEN_ON_PLATFORM.
16 17
17SUBST_CLASSES+= fix-paths 18SUBST_CLASSES+= fix-paths
18SUBST_STAGE.fix-paths= pre-install 19SUBST_STAGE.fix-paths= pre-install
19SUBST_MESSAGE.fix-paths= Fixing paths. 20SUBST_MESSAGE.fix-paths= Fixing paths.
20SUBST_FILES.fix-paths= Makefile 21SUBST_FILES.fix-paths= Makefile
21SUBST_SED.fix-paths+= -e 's,$${PREFIX}/etc,${PKG_SYSCONFDIR},g' 22SUBST_SED.fix-paths+= -e 's,$${PREFIX}/etc,${PKG_SYSCONFDIR},g'
22SUBST_SED.fix-paths+= -e 's,$$(PREFIX),$$(DESTDIR)$$(PREFIX),g' 
23SUBST_SED.fix-paths+= -e 's,/man/,/${PKGMANDIR}/,g' 23SUBST_SED.fix-paths+= -e 's,/man/,/${PKGMANDIR}/,g'
24 24
25SPECIAL_PERMS+= bin/doas ${SETUID_ROOT_PERMS} 25SPECIAL_PERMS+= bin/doas ${SETUID_ROOT_PERMS}
26 26
27INSTALLATION_DIRS= bin ${PKGMANDIR}/man1 ${PKGMANDIR}/man5 27INSTALLATION_DIRS= bin ${PKGMANDIR}/man1 ${PKGMANDIR}/man5
28 28
29.include "../../mk/pam.buildlink3.mk" 29.include "../../mk/pam.buildlink3.mk"
30.include "../../mk/bsd.pkg.mk" 30.include "../../mk/bsd.pkg.mk"

cvs diff -r1.1 -r1.2 pkgsrc/security/doas/distinfo (expand / switch to unified diff)

--- pkgsrc/security/doas/distinfo 2019/08/23 23:00:51 1.1
+++ pkgsrc/security/doas/distinfo 2019/09/14 14:45:45 1.2
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.1 2019/08/23 23:00:51 ng0 Exp $ 1$NetBSD: distinfo,v 1.2 2019/09/14 14:45:45 ng0 Exp $
2 2
3SHA1 (doas-6.1.tar.gz) = d9363d1102a92f8a6276684e98c736f49d3d2bfd 3SHA1 (doas-6.2p1.tar.gz) = cd1d7728b9b0491a2a453017359f4185bdcf3e90
4RMD160 (doas-6.1.tar.gz) = 62d5258e3e6beeb3afbe1b19eda6423106adcd6d 4RMD160 (doas-6.2p1.tar.gz) = 5db2e6deed45192ea4a4f2434e829d2b50201911
5SHA512 (doas-6.1.tar.gz) = 1397767416ec122170c0a07d0273473e019917c2555446865a5da45168fd81522c1d347ca5cd534ffbe74c5eb21b9f5817847260d8d37c91ffaf4b35ee992c2d 5SHA512 (doas-6.2p1.tar.gz) = 0b4e14c87cf5ff441a5262ca4a7316c3fb162ff9ee27b1231ef3f5ec5619245c1e18bf6b8df611718c3c7c81e05f1f32d577b1b3455d95aefd6a77cb2ab0570c
6Size (doas-6.1.tar.gz) = 19965 bytes 6Size (doas-6.2p1.tar.gz) = 24523 bytes