Commit Graph

226 Commits

Author SHA1 Message Date
Renato Botelho
c7fc4a2213 Update security/sudo to 1.8.21p2
PR:		222194
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
Sponsored by:	Rubicon Communications, LLC (Netgate)
2017-09-18 16:47:40 +00:00
Renato Botelho
c5beee7821 Update security/sudo to 1.8.21p1 2017-09-05 17:15:29 +00:00
Renato Botelho
ce8d8102a0 - Update security/sudo to 1.8.21
PR:		221874
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
		bdrewery (SIGINFO fix)
Sponsored by:	Rubicon Communications, LLC (Netgate)
2017-08-29 10:30:33 +00:00
Bryan Drewery
3adb452fd9 - Fix sudo sending a 2nd SIGINFO on ^T to processes, which is already
handled by the kernel sending it to the entire controlling terminal's
  process group.
  - This fixes ^T with 'sudo poudriere ...' showing a status log twice.
  - This is intended to be upstreamed.

Approved by:	garga (maintainer)
Tested by:	swills, bdrewery
Reviewed/Discussed with:	kib
Reported by:	kwm, swills, bapt, dim, kib, many others
MFH:		2017Q3
2017-08-11 18:32:57 +00:00
Renato Botelho
f2988cfe1d Fix the way ${PREFIX}/etc/sudoers.d is handled removing the workaround added in
r260609 and using @dir

PR:		220234
Submitted by:	Jose Luis Duran <jlduran@gmail.com>
Sponsored by:	Rubicon Communications (Netgate)
2017-06-27 13:49:53 +00:00
Mathieu Arnold
b9cb22153d Starting in 1.8.20, the sample sudoers file has been installed twice,
once as sudoers.sample and once as sudoers.dist. Remove one of them.

PR:		219708
Submitted by:	mat
Approved by:	maintainer timeout
Sponsored by:	Absolight
2017-06-15 11:01:34 +00:00
Renato Botelho
d6fd754a7f Update security/sudo to 1.8.20p2
Sponsored by:	Rubicon Communications (Netgate)
2017-06-10 14:10:26 +00:00
Cy Schubert
18cb1bab42 Update 1.8.20 --> 1.8.20p1
This release fixes a potential security issue that may allow a user to
bypass the "tty_ticket" constraints or overwrite an arbitrary file.
The issue is reported to only be present on Linux systems but I don't
think it hurts to update the FreeBSD port at this time.

Approved by:		garga@ (maintainer)
MFH:			2017Q2
Differential Revision:	D10997
2017-05-31 12:42:02 +00:00
Renato Botelho
ca7395b72b Update security/sudo to 1.8.20
Sponsored by:	Rubicon Communications (Netgate)
2017-05-11 17:03:08 +00:00
Cy Schubert
6c6846afca Update 1.8.19p1 --> 1.8.19p2.
Major changes between sudo 1.8.19p2 and 1.8.19p1:

 * Fixed a crash in visudo introduced in sudo 1.8.9 when an IP address
   or network is used in a host-based Defaults entry.  Bug #766

 * Added a missing check for the ignore_iolog_errors flag when
   the sudoers plugin generates the I/O log file path name.

 * Fixed a typo in sudo's vsyslog() replacement that resulted in
   garbage being logged to syslog.

Approved by:	garga (maintainer)
MFH:		2917Q1
Differential Revision:	D9181
2017-01-16 13:38:38 +00:00
Cy Schubert
7e5d948e38 Update 1.8.19 --> 1.8.19p1
As per sudo announcement:

 * Fixed a bug introduced in sudo 1.8.19 that resulted in the wrong
   syslog priority and facility being used.

PR:		215447
Submitted by:	myself (in pr 215447)
Approved by:	garga (maintainer)
2016-12-20 21:11:07 +00:00
Cy Schubert
57e9d95647 Update 1.8.18p1 --> 1.8.19.
PR:		215434
Submitted by:	cy
Reviewed by:	garga (maintainer)
2016-12-19 23:59:23 +00:00
Cy Schubert
c74d8e4756 Update 1.8.18 --> 1.8.18p1
From the sudo announcment:

Depending on your sudoers file configuration, the bug fixed in
1.8.18p1 may have a security impact.  For more information, see
https://www.sudo.ws/alerts/noexec_wordexp.html

Approved by:		garga@ (maintainer)
MFH:			2016Q4
Differential Revision:	D8363
2016-10-28 12:16:32 +00:00
Renato Botelho
4f642cfeee Update security/sudo to 1.8.18
Sponsored by:	Rubicon Communications (Netgate)
2016-09-21 13:45:45 +00:00
Renato Botelho
89ace70eb9 Update security/sudo to 1.8.17p1
MFH:		2016Q2
Sponsored by:	Rubicon Communications (Netgate)
2016-06-23 00:55:19 +00:00
Cy Schubert
becd50be04 Update 1.8.16 --> 1.8.17
PR:		210407
Submitted by:	cy@
Approved by:	garga@
MFH:		2016Q2
2016-06-20 14:03:03 +00:00
Renato Botelho
050bdc9f2f Add a patch to fix sudo bug #743 that causes a bug where it dereference
a NULL pointer when it looks up a negative cached entry which is stored
as a NULL passwd or group struct pointer

PR:		208198
Submitted by:	Fredrik Eriksson <fredrik.eriksson@loopia.se>
Obtained from:	https://www.sudo.ws/repos/sudo/rev/1d13341d53ec
Sponsored by:	Rubicon Communications (Netgate)
2016-06-11 20:39:38 +00:00
Renato Botelho
eb1a24b70d - Stop forcing -lssp_nonshared since libc already include it in every link.
It should fix build when world is built with WITHOUT_SSP
- Bump PORTREVISION

PR:		203380
Submitted by:	Kenneth Salerno <kennethsalerno@yahoo.com>
Sponsored by:	Rubicon Communications (Netgate)
2016-06-11 20:11:14 +00:00
Mathieu Arnold
597afc47ba Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat:	portmgr
Sponsored by:	Absolight
2016-04-01 14:25:16 +00:00
Renato Botelho
a0d598d98d - Update security/sudo to 1.8.16 [1]
- Pet portlint using (pre|post)[un]exec items in plist

PR:		208111 [1]
Submitted by:	cy [1]
Sponsored by:	Rubicon Communications (Netgate)
2016-03-18 12:15:26 +00:00
Renato Botelho
5ebc099a79 - Update security/sudo to 1.8.15
- Remove patch-plugins__sudoers__Makefile.in, unnecessary on stagedir days
- Remove patch-plugins__sudoers__audit.c, sudo_gettext.h is already included
  by sudoers.h
- Rework patch-plugins__sudoers__sudoers.in to replace pkg_* utilities by
  pkg on message
2015-11-03 09:44:23 +00:00
Renato Botelho
70d00a6e91 Update to 1.8.14p3 2015-07-22 13:34:15 +00:00
Renato Botelho
8c90f7f8fa Update to 1.8.14p2 2015-07-21 12:28:17 +00:00
Renato Botelho
bfb16b32ec - Fix installation with DOCS broken by my last commit
- Bump PORTREVISION

Pointyhat to:	garga
2015-07-20 13:13:01 +00:00
Renato Botelho
48fdd79071 - Replace DISTVERSION by PORTVERSION otherwise it ends up as 1.8.14.p1,
what is < 1.8.14. [1]
- While I'm here silence portlint warnings re-generating patches with
  make makepatch and removing unnecessary DOCS check

Reported by:	Robert Burmeister [1]
2015-07-20 12:30:54 +00:00
Renato Botelho
6499621583 Update to 1.8.14p1 2015-07-19 13:02:38 +00:00
Renato Botelho
c0ee37f355 Update to 1.8.14 2015-07-17 13:15:17 +00:00
Mathieu Arnold
60d1a83c2a MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight
2015-05-14 10:15:04 +00:00
Bartek Rutkowski
e5eb7c99ee security/sudo: add CPE info
PR:		199367
Submitted by:	Shun <shun.fbsd.pr@dropcut.net>
Approved by:	portmgr blanket
2015-04-15 10:00:31 +00:00
Renato Botelho
19476b3164 Update to 1.8.13 2015-03-23 11:39:48 +00:00
Renato Botelho
d226131547 Update to 1.8.12 2015-02-10 15:58:43 +00:00
Wesley Shields
68a065960e Over to garga@.
I don't have the cycles to handle these higher profile ports anymore.
2014-12-29 03:39:51 +00:00
Wesley Shields
9f1ff7d28f Update to 1.8.11p1
PR:		194259
Submitted by:	cy@ and Yasuhiro KIMURA <yasu@utahime.org>
2014-10-16 02:05:17 +00:00
Baptiste Daroussin
d285e5027c Simplify plist 2014-09-22 15:38:19 +00:00
Bryan Drewery
8df8b979ba Use @sample for sudoers 2014-09-11 23:17:12 +00:00
Tijl Coosemans
37f54e0f66 net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
2014-07-24 18:34:16 +00:00
Adam Weinberger
5d2373a092 Add DOCS to OPTIONS_DEFINE to ports that check for PORT_OPTIONS:MDOCS. 2014-07-15 16:57:39 +00:00
Wesley Shields
b56e991bc0 Update to 1.8.10p3. 2014-05-08 03:27:06 +00:00
Wesley Shields
dae8202efd Add option for sssd.
Submitted by:	petef@
2014-04-12 02:24:09 +00:00
Wesley Shields
42d597ff94 Update to 1.8.10p2.
PR:		ports/187567
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
2014-03-17 17:55:57 +00:00
Adam Weinberger
29b58ee53b Use OPTIONS helpers. 2014-03-04 01:10:17 +00:00
Wesley Shields
f72dc6cc4b Update to 1.8.9p5.
PR:		ports/185581
Submitted by:	Yasuhiro KIMURA <yasu@utahime.org>
2014-02-08 21:48:04 +00:00
Wesley Shields
2d0cea9c9b [1]: Update to 1.8.8.
[2]: Switch logging to authpriv.

PR:		[1] ports/182618
Submitted by:	[1] Yasuhiro KIMURA <yasu@utahime.org>
		[2] des@
2013-10-10 13:28:12 +00:00
Baptiste Daroussin
a65ed2e51b Add NO_STAGE all over the place in preparation for the staging support (cat: security) 2013-09-20 22:55:24 +00:00
Alex Kozlov
d4041784dc - Remove MAKE_JOBS_SAFE variable
Approved by:	portmgr (bdrewery)
2013-08-14 22:35:50 +00:00
Wesley Shields
efb1712107 Cleanup /var/db/sudo if it is empty. This eliminates leftovers when building
the package.
2013-07-17 13:36:10 +00:00
Wesley Shields
5256e84afb Fix missing include.
This was causing the "Undefined symbol '_'" message when hitting ^C or
entering an incorect command.

PR:		ports/180262
Submitted by:	Christophe Juniet <c.juniet@gmail.com>
2013-07-05 18:46:33 +00:00
Wesley Shields
0c40c664ed Update to 1.8.7. 2013-06-28 00:58:49 +00:00
Wesley Shields
56a69516d0 Disable PIE on ARM. This was causing a crash at runtime.
Submitted by:	Lukasz Siemiradzki
2013-05-04 22:30:31 +00:00
Alex Kozlov
e159824929 - Convert USE_GETTEXT to USES (part 3)
Approved by:	portmgr (bapt)
2013-04-24 18:10:30 +00:00