2009-12-20 08:46:32 +01:00
|
|
|
# $NetBSD: Makefile,v 1.117 2009/12/20 07:46:32 taca Exp $
|
1997-12-15 00:27:00 +01:00
|
|
|
#
|
|
|
|
|
|
2009-12-20 08:46:32 +01:00
|
|
|
DISTNAME= sudo-1.7.2p2
|
2000-12-06 07:33:39 +01:00
|
|
|
CATEGORIES= security
|
|
|
|
|
MASTER_SITES= http://www.courtesan.com/sudo/dist/ \
|
|
|
|
|
ftp://ftp.courtesan.com/pub/sudo/ \
|
2007-12-30 14:42:29 +01:00
|
|
|
ftp://ftp.uwsg.indiana.edu/pub/security/sudo/ \
|
|
|
|
|
ftp://ftp.twaren.net/Unix/Security/Sudo/ \
|
|
|
|
|
http://ftp.tux.org/pub/security/sudo/ \
|
|
|
|
|
http://netmirror.org/mirror/ftp.sudo.ws/ \
|
2007-07-27 19:28:48 +02:00
|
|
|
http://www.courtesan.com/sudo/dist/OLD/ \
|
2003-04-01 18:07:21 +02:00
|
|
|
http://www.courtesan.com/sudo/dist/beta/
|
2008-05-14 16:00:15 +02:00
|
|
|
DIST_SUBDIR= ${DISTNAME}-200805130
|
1997-12-15 00:27:00 +01:00
|
|
|
|
2003-11-03 23:43:37 +01:00
|
|
|
MAINTAINER= kim@tac.nyc.ny.us
|
2000-12-06 07:33:39 +01:00
|
|
|
HOMEPAGE= http://www.courtesan.com/sudo/
|
2001-02-17 18:42:09 +01:00
|
|
|
COMMENT= Allow others to run commands as root
|
2009-05-21 05:42:49 +02:00
|
|
|
LICENSE= modified-bsd
|
1999-08-31 21:26:40 +02:00
|
|
|
|
2004-01-05 12:28:07 +01:00
|
|
|
PKG_INSTALLATION_TYPES= overwrite pkgviews
|
|
|
|
|
|
2004-08-24 19:31:48 +02:00
|
|
|
USE_LIBTOOL= yes
|
2006-06-14 02:06:27 +02:00
|
|
|
OWN_DIRS+= ${VARBASE}/run
|
2003-01-28 23:03:00 +01:00
|
|
|
GNU_CONFIGURE= yes
|
2007-08-18 17:09:11 +02:00
|
|
|
BUILD_DEFS+= VARBASE
|
2007-10-28 03:05:44 +01:00
|
|
|
PKG_DESTDIR_SUPPORT= destdir
|
Update security/sudo package to 1.7.0.
* pkgsrc change: relax restriction to kerberos package.
What's new in Sudo 1.7.0?
* Rewritten parser that converts sudoers into a set of data structures.
This eliminates a number of ordering issues and makes it possible to
apply sudoers Defaults entries before searching for the command.
It also adds support for per-command Defaults specifications.
* Sudoers now supports a #include facility to allow the inclusion of other
sudoers-format files.
* Sudo's -l (list) flag has been enhanced:
o applicable Defaults options are now listed
o a command argument can be specified for testing whether a user
may run a specific command.
o a new -U flag can be used in conjunction with "sudo -l" to allow
root (or a user with "sudo ALL") list another user's privileges.
* A new -g flag has been added to allow the user to specify a
primary group to run the command as. The sudoers syntax has been
extended to include a group section in the Runas specification.
* A uid may now be used anywhere a username is valid.
* The "secure_path" run-time Defaults option has been restored.
* Password and group data is now cached for fast lookups.
* The file descriptor at which sudo starts closing all open files is now
configurable via sudoers and, optionally, the command line.
* Visudo will now warn about aliases that are defined but not used.
* The -i and -s command line flags now take an optional command
to be run via the shell. Previously, the argument was passed
to the shell as a script to run.
* Improved LDAP support. SASL authentication may now be used in
conjunction when connecting to an LDAP server. The krb5_ccname
parameter in ldap.conf may be used to enable Kerberos.
* Support for /etc/nsswitch.conf. LDAP users may now use nsswitch.conf
to specify the sudoers order. E.g.:
sudoers: ldap files
to check LDAP, then /etc/sudoers. The default is "files", even
when LDAP support is compiled in. This differs from sudo 1.6
where LDAP was always consulted first.
* Support for /etc/environment on AIX and Linux. If sudo is run
with the -i flag, the contents of /etc/environment are used to
populate the new environment that is passed to the command being
run.
* If no terminal is available or if the new -A flag is specified,
sudo will use a helper program to read the password if one is
configured. Typically, this is a graphical password prompter
such as ssh-askpass.
* A new Defaults option, "mailfrom" that sets the value of the
"From:" field in the warning/error mail. If unspecified, the
login name of the invoking user is used.
* A new Defaults option, "env_file" that refers to a file containing
environment variables to be set in the command being run.
* A new flag, -n, may be used to indicate that sudo should not
prompt the user for a password and, instead, exit with an error
if authentication is required.
* If sudo needs to prompt for a password and it is unable to disable
echo (and no askpass program is defined), it will refuse to run
unless the "visiblepw" Defaults option has been specified.
* Prior to version 1.7.0, hitting enter/return at the Password: prompt
would exit sudo. In sudo 1.7.0 and beyond, this is treated as
an empty password. To exit sudo, the user must press ^C or ^D
at the prompt.
* visudo will now check the sudoers file owner and mode in -c (check)
mode when the -s (strict) flag is specified.
2009-02-05 14:48:12 +01:00
|
|
|
PLIST_VARS+= ldap
|
1998-07-01 21:09:42 +02:00
|
|
|
|
1999-03-30 17:37:00 +02:00
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
|
|
2007-08-18 17:09:11 +02:00
|
|
|
# to always install man instead of cat
|
|
|
|
|
CONFIGURE_ENV+= NROFFPROG=${CAT:Q}
|
2007-07-04 22:37:50 +02:00
|
|
|
CONFIGURE_ENV+= mansectsu=8
|
|
|
|
|
CONFIGURE_ENV+= mansectform=5
|
Update security/sudo package to 1.7.0.
* pkgsrc change: relax restriction to kerberos package.
What's new in Sudo 1.7.0?
* Rewritten parser that converts sudoers into a set of data structures.
This eliminates a number of ordering issues and makes it possible to
apply sudoers Defaults entries before searching for the command.
It also adds support for per-command Defaults specifications.
* Sudoers now supports a #include facility to allow the inclusion of other
sudoers-format files.
* Sudo's -l (list) flag has been enhanced:
o applicable Defaults options are now listed
o a command argument can be specified for testing whether a user
may run a specific command.
o a new -U flag can be used in conjunction with "sudo -l" to allow
root (or a user with "sudo ALL") list another user's privileges.
* A new -g flag has been added to allow the user to specify a
primary group to run the command as. The sudoers syntax has been
extended to include a group section in the Runas specification.
* A uid may now be used anywhere a username is valid.
* The "secure_path" run-time Defaults option has been restored.
* Password and group data is now cached for fast lookups.
* The file descriptor at which sudo starts closing all open files is now
configurable via sudoers and, optionally, the command line.
* Visudo will now warn about aliases that are defined but not used.
* The -i and -s command line flags now take an optional command
to be run via the shell. Previously, the argument was passed
to the shell as a script to run.
* Improved LDAP support. SASL authentication may now be used in
conjunction when connecting to an LDAP server. The krb5_ccname
parameter in ldap.conf may be used to enable Kerberos.
* Support for /etc/nsswitch.conf. LDAP users may now use nsswitch.conf
to specify the sudoers order. E.g.:
sudoers: ldap files
to check LDAP, then /etc/sudoers. The default is "files", even
when LDAP support is compiled in. This differs from sudo 1.6
where LDAP was always consulted first.
* Support for /etc/environment on AIX and Linux. If sudo is run
with the -i flag, the contents of /etc/environment are used to
populate the new environment that is passed to the command being
run.
* If no terminal is available or if the new -A flag is specified,
sudo will use a helper program to read the password if one is
configured. Typically, this is a graphical password prompter
such as ssh-askpass.
* A new Defaults option, "mailfrom" that sets the value of the
"From:" field in the warning/error mail. If unspecified, the
login name of the invoking user is used.
* A new Defaults option, "env_file" that refers to a file containing
environment variables to be set in the command being run.
* A new flag, -n, may be used to indicate that sudo should not
prompt the user for a password and, instead, exit with an error
if authentication is required.
* If sudo needs to prompt for a password and it is unable to disable
echo (and no askpass program is defined), it will refuse to run
unless the "visiblepw" Defaults option has been specified.
* Prior to version 1.7.0, hitting enter/return at the Password: prompt
would exit sudo. In sudo 1.7.0 and beyond, this is treated as
an empty password. To exit sudo, the user must press ^C or ^D
at the prompt.
* visudo will now check the sudoers file owner and mode in -c (check)
mode when the -s (strict) flag is specified.
2009-02-05 14:48:12 +01:00
|
|
|
CONFIGURE_ARGS+= --disable-root-mailer --with-ignore-dot
|
2009-12-20 08:46:32 +01:00
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
|
|
|
CONFIGURE_ARGS+= --with-timedir=${VARBASE}/run/sudo
|
|
|
|
|
CONFIGURE_ARGS+= --with-logpath=${VARBASE}/log/sudo.log
|
2001-11-19 18:27:22 +01:00
|
|
|
|
2004-08-23 23:15:17 +02:00
|
|
|
.include "options.mk"
|
1999-09-13 15:24:48 +02:00
|
|
|
|
2000-12-06 07:33:39 +01:00
|
|
|
CONFIGURE_ARGS+= --with-nbsdops --disable-path-info
|
1999-12-30 23:51:28 +01:00
|
|
|
|
2007-10-28 03:05:44 +01:00
|
|
|
DOCDIR= share/doc/${PKGBASE}
|
|
|
|
|
EGDIR= share/examples/${PKGBASE}
|
2008-04-02 17:06:07 +02:00
|
|
|
CONF_FILES_PERMS= ${EGDIR}/sudoers ${PKG_SYSCONFDIR}/sudoers \
|
|
|
|
|
${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 0440
|
2007-03-13 10:46:00 +01:00
|
|
|
SPECIAL_PERMS+= bin/sudo ${SETUID_ROOT_PERMS}
|
2001-07-13 09:09:17 +02:00
|
|
|
|
2007-10-28 03:05:44 +01:00
|
|
|
INSTALLATION_DIRS+= ${DOCDIR} ${EGDIR}
|
|
|
|
|
|
1997-12-15 00:38:21 +01:00
|
|
|
post-install:
|
2007-10-28 03:05:44 +01:00
|
|
|
${INSTALL_DATA} ${WRKSRC}/UPGRADE ${DESTDIR}${PREFIX}/${DOCDIR}
|
|
|
|
|
${INSTALL_DATA} ${WRKSRC}/sudoers ${DESTDIR}${PREFIX}/${EGDIR}/sudoers
|
|
|
|
|
${INSTALL_DATA} ${WRKSRC}/README* ${DESTDIR}${PREFIX}/${DOCDIR}
|
1997-12-15 00:38:21 +01:00
|
|
|
|
1998-04-15 12:38:15 +02:00
|
|
|
.include "../../mk/bsd.pkg.mk"
|
