Sun Dec 15 18:42:10 2019 UTC ()
sudo: updated to 1.8.29

Major changes between version 1.8.29 and 1.8.28p1:

The cvtsudoers command will now reject non-LDIF input when converting from LDIF format to sudoers or JSON formats.
The new log_allowed and log_denied sudoers settings make it possible to disable logging and auditing of allowed and/or denied commands.
The umask is now handled differently on systems with PAM or login.conf. If the umask is explicitly set in sudoers, that value is used regardless of what PAM or login.conf may specify. However, if the umask is not explicitly set in sudoers, PAM or login.conf may now override the default sudoers umask.
For make install, the sudoers file is no longer checked for syntax errors when DESTDIR is set. The default sudoers file includes the contents of /etc/sudoers.d which may not be readable as non-root.
Sudo now sets most resource limits to their maximum value to avoid problems caused by insufficient resources, such as an inability to allocate memory or open files and pipes.
Fixed a regression introduced in sudo 1.8.28 where sudo would refuse to run if the parent process was not associated with a session. This was due to sudo passing a session ID of -1 to the plugin.


(adam)
diff -r1.170 -r1.171 pkgsrc/security/sudo/Makefile
diff -r1.103 -r1.104 pkgsrc/security/sudo/distinfo
diff -r1.1 -r1.2 pkgsrc/security/sudo/patches/patch-plugins_sudoers_Makefile.in
diff -r1.1 -r1.2 pkgsrc/security/sudo/patches/patch-plugins_sudoers_starttime.c

cvs diff -r1.170 -r1.171 pkgsrc/security/sudo/Makefile (expand / switch to unified diff)

--- pkgsrc/security/sudo/Makefile 2019/10/31 14:43:13 1.170
+++ pkgsrc/security/sudo/Makefile 2019/12/15 18:42:09 1.171
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.170 2019/10/31 14:43:13 triaxx Exp $ 1# $NetBSD: Makefile,v 1.171 2019/12/15 18:42:09 adam Exp $
2 2
3DISTNAME= sudo-1.8.28 3DISTNAME= sudo-1.8.29
4PKGREVISION= 2 
5CATEGORIES= security 4CATEGORIES= security
6MASTER_SITES= https://www.sudo.ws/dist/ 5MASTER_SITES= https://www.sudo.ws/dist/
7MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/ 6MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/
8MASTER_SITES+= ftp://ftp.uwsg.indiana.edu/pub/security/sudo/ 7MASTER_SITES+= ftp://ftp.uwsg.indiana.edu/pub/security/sudo/
9MASTER_SITES+= ftp://ftp.twaren.net/Unix/Security/Sudo/ 8MASTER_SITES+= ftp://ftp.twaren.net/Unix/Security/Sudo/
10MASTER_SITES+= http://ftp.tux.org/pub/security/sudo/ 9MASTER_SITES+= http://ftp.tux.org/pub/security/sudo/
11 10
12MAINTAINER= pkgsrc-users@NetBSD.org 11MAINTAINER= pkgsrc-users@NetBSD.org
13HOMEPAGE= https://www.sudo.ws/ 12HOMEPAGE= https://www.sudo.ws/
14COMMENT= Allow others to run commands as root 13COMMENT= Allow others to run commands as root
15LICENSE= isc AND modified-bsd 14LICENSE= isc AND modified-bsd
16 15
17USE_LIBTOOL= yes 16USE_LIBTOOL= yes

cvs diff -r1.103 -r1.104 pkgsrc/security/sudo/distinfo (expand / switch to unified diff)

--- pkgsrc/security/sudo/distinfo 2019/10/16 20:25:21 1.103
+++ pkgsrc/security/sudo/distinfo 2019/12/15 18:42:10 1.104
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1$NetBSD: distinfo,v 1.103 2019/10/16 20:25:21 maya Exp $ 1$NetBSD: distinfo,v 1.104 2019/12/15 18:42:10 adam Exp $
2 2
3SHA1 (sudo-1.8.28.tar.gz) = c0a6ccb124b4cef58255ee9ca3179c52db07910b 3SHA1 (sudo-1.8.29.tar.gz) = fdce342856f1803478eb549479190370001dca95
4RMD160 (sudo-1.8.28.tar.gz) = 5104faf846b59a0c04045e2f464ffeae3ddf95c2 4RMD160 (sudo-1.8.29.tar.gz) = 706c7c8ec2a90b2e464e138384335b7de91d1c25
5SHA512 (sudo-1.8.28.tar.gz) = 09e589cdfd18d7c43b0859a0e11c008b3cb995ae4f8c89c717c5242db9e5696361eb574ebe74a0b5316afffb3a8037f7a7f3c249176e8ed9caffeb4cd860ddc7 5SHA512 (sudo-1.8.29.tar.gz) = ea780922b2afb47df4df4b533fb355fd916cb18a6bfd13c7ca36a25b03ef585d805648c6fa85692bea363b1f83664ac3bc622f99bcd149b3a86f70522eb4d340
6Size (sudo-1.8.28.tar.gz) = 3309744 bytes 6Size (sudo-1.8.29.tar.gz) = 3338260 bytes
7SHA1 (patch-Makefile.in) = 279c7ad0f7f85ea7bc2d4beb5aa21abdf6237a7c 7SHA1 (patch-Makefile.in) = 279c7ad0f7f85ea7bc2d4beb5aa21abdf6237a7c
8SHA1 (patch-configure) = 460b9575346c263b944535aa8e2408e959840c77 8SHA1 (patch-configure) = 460b9575346c263b944535aa8e2408e959840c77
9SHA1 (patch-include_sudo__compat.h) = 4f9b021ebdd507949f13e289deabdb6090ab334c 9SHA1 (patch-include_sudo__compat.h) = 4f9b021ebdd507949f13e289deabdb6090ab334c
10SHA1 (patch-include_sudo__event.h) = 4d0787a45c2c7d4a7d3ae3111ccb3a4a4b84d083 10SHA1 (patch-include_sudo__event.h) = 4d0787a45c2c7d4a7d3ae3111ccb3a4a4b84d083
11SHA1 (patch-lib_util_sig2str.c) = e5636d9e414fc9354cd238751fa4a00026320dd3 11SHA1 (patch-lib_util_sig2str.c) = e5636d9e414fc9354cd238751fa4a00026320dd3
12SHA1 (patch-lib_util_str2sig.c) = e04aa67cab901e1be10d59bd1b0ee740aa1295b8 12SHA1 (patch-lib_util_str2sig.c) = e04aa67cab901e1be10d59bd1b0ee740aa1295b8
13SHA1 (patch-plugins_sudoers_Makefile.in) = d8612ac7bf2f5a892d9720c4df91810ca807f4ed 13SHA1 (patch-plugins_sudoers_Makefile.in) = 46bbee9c51664357099dc6d6871341de3e3fcc6f
14SHA1 (patch-plugins_sudoers_logging.c) = 700ac9540a82bea4f3106cea941b785e5bd31203 14SHA1 (patch-plugins_sudoers_logging.c) = 700ac9540a82bea4f3106cea941b785e5bd31203
15SHA1 (patch-plugins_sudoers_starttime.c) = ab051d327a2b01736ab9ceefe7e6f03e0e2f1ee6 15SHA1 (patch-plugins_sudoers_starttime.c) = acec2f8a96041381582acff4928233568411f2c6
16SHA1 (patch-src_Makefile.in) = cc6398a810dc394d8e4b50f2b2412cda839c0ca9 16SHA1 (patch-src_Makefile.in) = cc6398a810dc394d8e4b50f2b2412cda839c0ca9

cvs diff -r1.1 -r1.2 pkgsrc/security/sudo/patches/patch-plugins_sudoers_Makefile.in (expand / switch to unified diff)

--- pkgsrc/security/sudo/patches/patch-plugins_sudoers_Makefile.in 2016/01/01 17:00:49 1.1
+++ pkgsrc/security/sudo/patches/patch-plugins_sudoers_Makefile.in 2019/12/15 18:42:10 1.2
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: patch-plugins_sudoers_Makefile.in,v 1.1 2016/01/01 17:00:49 spz Exp $ 1$NetBSD: patch-plugins_sudoers_Makefile.in,v 1.2 2019/12/15 18:42:10 adam Exp $
2 2
3* don't install the sudoers file to etc 3Do not install the sudoers file to etc.
4 4
5--- plugins/sudoers/Makefile.in.orig 2015-10-31 23:35:25.000000000 +0000 5--- plugins/sudoers/Makefile.in.orig 2019-10-28 12:28:53.000000000 +0000
6+++ plugins/sudoers/Makefile.in 6+++ plugins/sudoers/Makefile.in
7@@ -305,7 +305,7 @@ pre-install: 7@@ -394,7 +394,7 @@ pre-install:
8 ./visudo -c -f $(DESTDIR)$(sudoersdir)/sudoers; \ 8 ./visudo -c -f $(sudoersdir)/sudoers; \
9 fi 9 fi
10  10
11-install: install-plugin install-binaries install-sudoers install-doc 11-install: install-plugin install-binaries install-sudoers install-doc
12+install: install-plugin install-binaries install-doc 12+install: install-plugin install-binaries install-doc
13  13
14 install-dirs: 14 install-dirs:
15 $(SHELL) $(top_srcdir)/mkinstalldirs $(DESTDIR)$(plugindir) \ 15 $(SHELL) $(top_srcdir)/mkinstalldirs $(DESTDIR)$(plugindir) \

cvs diff -r1.1 -r1.2 pkgsrc/security/sudo/patches/Attic/patch-plugins_sudoers_starttime.c (expand / switch to unified diff)

--- pkgsrc/security/sudo/patches/Attic/patch-plugins_sudoers_starttime.c 2018/08/14 13:18:38 1.1
+++ pkgsrc/security/sudo/patches/Attic/patch-plugins_sudoers_starttime.c 2019/12/15 18:42:10 1.2
@@ -1,15 +1,15 @@ @@ -1,15 +1,15 @@
1$NetBSD: patch-plugins_sudoers_starttime.c,v 1.1 2018/08/14 13:18:38 adam Exp $ 1$NetBSD: patch-plugins_sudoers_starttime.c,v 1.2 2019/12/15 18:42:10 adam Exp $
2 2
3Fix typo. 3Fix a typo.
4 4
5--- plugins/sudoers/starttime.c.orig 2018-08-14 13:09:35.389271668 +0000 5--- plugins/sudoers/starttime.c.orig 2019-10-28 12:28:52.000000000 +0000
6+++ plugins/sudoers/starttime.c 6+++ plugins/sudoers/starttime.c
7@@ -24,7 +24,7 @@ 7@@ -31,7 +31,7 @@
8  8
9 #include <sys/types.h> 9 #include <sys/types.h>
10 #include <sys/stat.h> 10 #include <sys/stat.h>
11-#if defined(HAVE_KINFO_PROC_44BSD) || defined (HAVE_KINFO_PROC_OPENBSD) || defined(HAVE_KINFO_PROC2_NETBSD2) 11-#if defined(HAVE_KINFO_PROC_44BSD) || defined (HAVE_KINFO_PROC_OPENBSD) || defined(HAVE_KINFO_PROC2_NETBSD2)
12+#if defined(HAVE_KINFO_PROC_44BSD) || defined (HAVE_KINFO_PROC_OPENBSD) || defined(HAVE_KINFO_PROC2_NETBSD) 12+#if defined(HAVE_KINFO_PROC_44BSD) || defined (HAVE_KINFO_PROC_OPENBSD) || defined(HAVE_KINFO_PROC2_NETBSD)
13 # include <sys/sysctl.h> 13 # include <sys/sysctl.h>
14 #elif defined(HAVE_KINFO_PROC_FREEBSD) 14 #elif defined(HAVE_KINFO_PROC_FREEBSD)
15 # include <sys/sysctl.h> 15 # include <sys/param.h>