bc4ccdaf4d
What's new in Sudo 1.7.7
* I/O logging is now supported for commands run in background mode
(using sudo's -b flag).
* Group ownership of the sudoers file is now only enforced when
the file mode on sudoers allows group readability or writability.
* Visudo now checks the contents of an alias and warns about cycles
when the alias is expanded.
* If the user specifes a group via sudo's -g option that matches
the target user's group in the password database, it is now
allowed even if no groups are present in the Runas_Spec.
* "sudo -i command" now works correctly with the bash version
2.0 and higher. Previously, the .bash_profile would not be
sourced prior to running the command unless bash was built with
NON_INTERACTIVE_LOGIN_SHELLS defined.
* Multi-factor authentication is now supported on AIX.
* Added support for non-RFC 4517 compliant LDAP servers that require
that seconds be present in a timestamp, such as Tivoli Directory Server.
* If the group vector is to be preserved, the PATH search for the
command is now done with the user's original group vector.
* For LDAP-based sudoers, the "runas_default" sudoOption now works
properly in a sudoRole that contains a sudoCommand.
* Spaces in command line arguments for "sudo -s" and "sudo -i" are
now escaped with a backslash when checking the sudoers file.
57 lines
1.7 KiB
Makefile
57 lines
1.7 KiB
Makefile
# $NetBSD: Makefile,v 1.131 2011/08/18 12:45:05 taca Exp $
|
|
#
|
|
|
|
DISTNAME= sudo-1.7.7
|
|
PKGNAME= sudo-1.7.7
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://www.courtesan.com/sudo/dist/ \
|
|
ftp://ftp.courtesan.com/pub/sudo/ \
|
|
ftp://ftp.uwsg.indiana.edu/pub/security/sudo/ \
|
|
ftp://ftp.twaren.net/Unix/Security/Sudo/ \
|
|
http://ftp.tux.org/pub/security/sudo/
|
|
|
|
MAINTAINER= kim@tac.nyc.ny.us
|
|
HOMEPAGE= http://www.courtesan.com/sudo/
|
|
COMMENT= Allow others to run commands as root
|
|
LICENSE= modified-bsd
|
|
|
|
PKG_INSTALLATION_TYPES= overwrite pkgviews
|
|
|
|
USE_LIBTOOL= yes
|
|
OWN_DIRS+= ${VARBASE}/run
|
|
GNU_CONFIGURE= yes
|
|
BUILD_DEFS+= VARBASE
|
|
PKG_DESTDIR_SUPPORT= user-destdir
|
|
PLIST_VARS+= ldap
|
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
# to always install man instead of cat
|
|
CONFIGURE_ENV+= NROFFPROG=${CAT:Q}
|
|
CONFIGURE_ENV+= mansectsu=8
|
|
CONFIGURE_ENV+= mansectform=5
|
|
CONFIGURE_ARGS+= --disable-root-mailer --with-ignore-dot
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR}
|
|
CONFIGURE_ARGS+= --with-timedir=${VARBASE}/run/sudo
|
|
CONFIGURE_ARGS+= --with-logpath=${VARBASE}/log/sudo.log
|
|
|
|
.include "options.mk"
|
|
|
|
CONFIGURE_ARGS+= --with-nbsdops --disable-path-info
|
|
|
|
DOCDIR= share/doc/${PKGBASE}
|
|
EGDIR= share/examples/${PKGBASE}
|
|
CONF_FILES_PERMS= ${EGDIR}/sudoers ${PKG_SYSCONFDIR}/sudoers \
|
|
${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 0440
|
|
OWN_DIRS+= ${PKG_SYSCONFDIR}/sudoers.d
|
|
SPECIAL_PERMS+= bin/sudo ${SETUID_ROOT_PERMS}
|
|
SPECIAL_PERMS+= bin/sudoreplay ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 511
|
|
|
|
INSTALLATION_DIRS+= ${DOCDIR} ${EGDIR}
|
|
|
|
post-install:
|
|
${INSTALL_DATA} ${WRKSRC}/UPGRADE ${DESTDIR}${PREFIX}/${DOCDIR}
|
|
${INSTALL_DATA} ${WRKSRC}/sudoers ${DESTDIR}${PREFIX}/${EGDIR}/sudoers
|
|
${INSTALL_DATA} ${WRKSRC}/README ${DESTDIR}${PREFIX}/${DOCDIR}
|
|
|
|
.include "../../mk/bsd.pkg.mk"
|