security/doas: Update to 6.2p1 Significant items from https://github.com/slicer69/doas/releases: doas 6.2p1 * Fixes a crash on Linux systems when a specified user on the command line did not match a valid entry in the doas.conf file. In the past, doas would first try to find an exact username match when the "-u" flag was used and, if one could not be found, it would try to find a matching numeric UID. Now doas requires that an exact username be specified when "-u" is used. This avoids confusion (and, on Linux, fuzzy matches when a username begins with a number). This means "doas -u 0" can no longer be used to run a command as root, and "duas -u 1000" is not ambigious if there is a user with the name "1000" on the system. doas 6.2 * Group permissions of the original user are now dropped on Linux. This prevents the original user's group access from interfering with the target user's owned files. Group permissions were already dropped on FreeBSD (and I believe) NetBSD, and this brings doas's Linux behaviour into line with the other systems. * Fixed a couple of compiler warnings that get rid of either unneeded variables or introduce sanity checks on return functions. This should make doas more secure, across platforms/compilers. doas 6.1p1 * ported to illumos, added support for SmartOS and OpenIndiana. * Better pkgsrc integration.diff -r1.2 -r1.3 pkgsrc/security/doas/Makefile
(ng0)
@@ -1,30 +1,30 @@ | @@ -1,30 +1,30 @@ | |||
1 | # $NetBSD: Makefile,v 1.2 2019/08/24 15:46:59 ng0 Exp $ | 1 | # $NetBSD: Makefile,v 1.3 2019/09/14 14:45:45 ng0 Exp $ | |
2 | 2 | |||
3 | DISTNAME= doas-6.1 | 3 | DISTNAME= doas-6.2p1 | |
4 | CATEGORIES= security | 4 | CATEGORIES= security | |
5 | MASTER_SITES= ${MASTER_SITE_GITHUB:=slicer69/} | 5 | MASTER_SITES= ${MASTER_SITE_GITHUB:=slicer69/} | |
6 | 6 | |||
7 | MAINTAINER= pkgsrc-users@NetBSD.org | 7 | MAINTAINER= pkgsrc-users@NetBSD.org | |
8 | HOMEPAGE= https://github.com/slicer69/doas/ | 8 | HOMEPAGE= https://github.com/slicer69/doas/ | |
9 | COMMENT= Execute commands as another user | 9 | COMMENT= Execute commands as another user | |
10 | LICENSE= 2-clause-bsd AND isc AND modified-bsd | 10 | LICENSE= 2-clause-bsd AND isc AND modified-bsd | |
11 | 11 | |||
12 | USE_TOOLS+= gmake yacc | 12 | USE_TOOLS+= gmake yacc | |
13 | 13 | |||
14 | # XXX: Upstream supports only NetBSD, FreeBSD, and Linux. | 14 | # XXX: Upstream supports only NetBSD, FreeBSD, Linux, | |
15 | # illumos, SmartOS, OpenIndiana. | |||
15 | # Add any failing platforms as BROKEN_ON_PLATFORM. | 16 | # Add any failing platforms as BROKEN_ON_PLATFORM. | |
16 | 17 | |||
17 | SUBST_CLASSES+= fix-paths | 18 | SUBST_CLASSES+= fix-paths | |
18 | SUBST_STAGE.fix-paths= pre-install | 19 | SUBST_STAGE.fix-paths= pre-install | |
19 | SUBST_MESSAGE.fix-paths= Fixing paths. | 20 | SUBST_MESSAGE.fix-paths= Fixing paths. | |
20 | SUBST_FILES.fix-paths= Makefile | 21 | SUBST_FILES.fix-paths= Makefile | |
21 | SUBST_SED.fix-paths+= -e 's,$${PREFIX}/etc,${PKG_SYSCONFDIR},g' | 22 | SUBST_SED.fix-paths+= -e 's,$${PREFIX}/etc,${PKG_SYSCONFDIR},g' | |
22 | SUBST_SED.fix-paths+= -e 's,$$(PREFIX),$$(DESTDIR)$$(PREFIX),g' | |||
23 | SUBST_SED.fix-paths+= -e 's,/man/,/${PKGMANDIR}/,g' | 23 | SUBST_SED.fix-paths+= -e 's,/man/,/${PKGMANDIR}/,g' | |
24 | 24 | |||
25 | SPECIAL_PERMS+= bin/doas ${SETUID_ROOT_PERMS} | 25 | SPECIAL_PERMS+= bin/doas ${SETUID_ROOT_PERMS} | |
26 | 26 | |||
27 | INSTALLATION_DIRS= bin ${PKGMANDIR}/man1 ${PKGMANDIR}/man5 | 27 | INSTALLATION_DIRS= bin ${PKGMANDIR}/man1 ${PKGMANDIR}/man5 | |
28 | 28 | |||
29 | .include "../../mk/pam.buildlink3.mk" | 29 | .include "../../mk/pam.buildlink3.mk" | |
30 | .include "../../mk/bsd.pkg.mk" | 30 | .include "../../mk/bsd.pkg.mk" |
@@ -1,6 +1,6 @@ | @@ -1,6 +1,6 @@ | |||
1 | $NetBSD: distinfo,v 1.1 2019/08/23 23:00:51 ng0 Exp $ | 1 | $NetBSD: distinfo,v 1.2 2019/09/14 14:45:45 ng0 Exp $ | |
2 | 2 | |||
3 | SHA1 (doas-6.1.tar.gz) = d9363d1102a92f8a6276684e98c736f49d3d2bfd | 3 | SHA1 (doas-6.2p1.tar.gz) = cd1d7728b9b0491a2a453017359f4185bdcf3e90 | |
4 | RMD160 (doas-6.1.tar.gz) = 62d5258e3e6beeb3afbe1b19eda6423106adcd6d | 4 | RMD160 (doas-6.2p1.tar.gz) = 5db2e6deed45192ea4a4f2434e829d2b50201911 | |
5 | SHA512 (doas-6.1.tar.gz) = 1397767416ec122170c0a07d0273473e019917c2555446865a5da45168fd81522c1d347ca5cd534ffbe74c5eb21b9f5817847260d8d37c91ffaf4b35ee992c2d | 5 | SHA512 (doas-6.2p1.tar.gz) = 0b4e14c87cf5ff441a5262ca4a7316c3fb162ff9ee27b1231ef3f5ec5619245c1e18bf6b8df611718c3c7c81e05f1f32d577b1b3455d95aefd6a77cb2ab0570c | |
6 | Size (doas-6.1.tar.gz) = 19965 bytes | 6 | Size (doas-6.2p1.tar.gz) = 24523 bytes |