c74d8e4756
From the sudo announcment: Depending on your sudoers file configuration, the bug fixed in 1.8.18p1 may have a security impact. For more information, see https://www.sudo.ws/alerts/noexec_wordexp.html Approved by: garga@ (maintainer) MFH: 2016Q4 Differential Revision: D8363
98 lines
2.9 KiB
Makefile
98 lines
2.9 KiB
Makefile
# Created by: erich@rrnet.com
|
|
# $FreeBSD$
|
|
|
|
PORTNAME= sudo
|
|
PORTVERSION= 1.8.18p1
|
|
CATEGORIES= security
|
|
MASTER_SITES= SUDO
|
|
|
|
MAINTAINER= garga@FreeBSD.org
|
|
COMMENT= Allow others to run commands as root
|
|
|
|
LICENSE= sudo
|
|
LICENSE_NAME= Sudo license
|
|
LICENSE_FILE= ${WRKSRC}/doc/LICENSE
|
|
LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept
|
|
|
|
USES= cpe libtool
|
|
CPE_VENDOR= todd_miller
|
|
USE_LDCONFIG= yes
|
|
GNU_CONFIGURE= yes
|
|
LDFLAGS+= -lgcc
|
|
|
|
CONFIGURE_ARGS= --sysconfdir=${PREFIX}/etc \
|
|
--with-ignore-dot \
|
|
--with-tty-tickets \
|
|
--with-env-editor \
|
|
--with-logincap \
|
|
--with-long-otp-prompt
|
|
|
|
OPTIONS_DEFINE= LDAP INSULTS DISABLE_ROOT_SUDO DISABLE_AUTH NOARGS_SHELL \
|
|
AUDIT OPIE NLS SSSD DOCS
|
|
OPTIONS_DEFAULT= AUDIT
|
|
OPTIONS_SUB= yes
|
|
|
|
INSULTS_DESC= Enable insults on failures
|
|
DISABLE_ROOT_SUDO_DESC= Do not allow root to run sudo
|
|
DISABLE_AUTH_DESC= Do not require authentication by default
|
|
NOARGS_SHELL_DESC= Run a shell if no arguments are given
|
|
AUDIT_DESC= Enable BSM audit support
|
|
OPIE_DESC= Enable one-time passwords (no PAM support)
|
|
SSSD_DESC= Enable SSSD backend support.
|
|
|
|
LOGFAC?= authpriv
|
|
CONFIGURE_ARGS+= --with-logfac=${LOGFAC}
|
|
|
|
# This is intentionally not an option.
|
|
# SUDO_SECURE_PATH is a PATH string that will override the user's PATH.
|
|
# ex: make SUDO_SECURE_PATH="/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin"
|
|
.if defined(SUDO_SECURE_PATH)
|
|
CONFIGURE_ARGS+= --with-secure-path="${SUDO_SECURE_PATH}"
|
|
.endif
|
|
|
|
NLS_USES= gettext
|
|
NLS_CONFIGURE_ENABLE= nls
|
|
NLS_LDFLAGS= -L${LOCALBASE}/lib -lintl
|
|
NLS_CFLAGS= -I${LOCALBASE}/include
|
|
|
|
INSULTS_CONFIGURE_ON= --with-insults
|
|
INSULTS_CONFIGURE_ON+= --with-all-insults
|
|
|
|
LDAP_USE= OPENLDAP=yes
|
|
LDAP_CONFIGURE_ON= --with-ldap=${PREFIX}
|
|
SUDO_LDAP_CONF?= ldap.conf
|
|
LDAP_CONFIGURE_ON+= --with-ldap-conf-file=${PREFIX}/etc/${SUDO_LDAP_CONF}
|
|
|
|
DISABLE_ROOT_SUDO_CONFIGURE_ON= --disable-root-sudo
|
|
DISABLE_AUTH_CONFIGURE_ON= --disable-authentication
|
|
NOARGS_SHELL_CONFIGURE_ENABLE= noargs-shell
|
|
AUDIT_CONFIGURE_WITH= bsm-audit
|
|
OPIE_CONFIGURE_ON= --with-opie
|
|
OPIE_CONFIGURE_OFF= --with-pam
|
|
SSSD_CONFIGURE_ON= --with-sssd
|
|
SSSD_RUN_DEPENDS= sssd:security/sssd
|
|
|
|
.include <bsd.port.options.mk>
|
|
|
|
.if ${ARCH} == "arm"
|
|
CONFIGURE_ARGS+= --disable-pie
|
|
.endif
|
|
|
|
post-patch:
|
|
@${REINPLACE_CMD} -E '/install-(binaries|noexec):/,/^$$/ \
|
|
s/\$$\(INSTALL\)/& ${STRIP}/;s/-b\~/-b ~/' \
|
|
${WRKSRC}/src/Makefile.in
|
|
@${REINPLACE_CMD} -e 's,$$(srcdir)/sudoers2ldif $$(DESTDIR)$$(docdir),$$(srcdir)/sudoers2ldif $$(DESTDIR)$$(bindir),' \
|
|
${WRKSRC}/plugins/sudoers/Makefile.in
|
|
|
|
post-install:
|
|
${INSTALL_DATA} ${FILESDIR}/pam.conf ${STAGEDIR}${PREFIX}/etc/pam.d/sudo.default
|
|
${TOUCH} ${STAGEDIR}${PREFIX}/etc/sudoers.d/.keep-me
|
|
${MV} ${STAGEDIR}${PREFIX}/etc/sudoers ${STAGEDIR}${PREFIX}/etc/sudoers.sample
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/sudoreplay
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/sbin/visudo
|
|
.for f in group_file.so libsudo_util.so sudoers.so system_group.so
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/sudo/${f}
|
|
.endfor
|
|
|
|
.include <bsd.port.mk>
|