pkgsrc/security/sudo/options.mk, branch pkgsrc_2008Q2[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2008Q22008-03-11T15:52:51ZUpdate sudo package to 1.6.9p14.2008-03-11T15:52:51Ztacataca2008-03-11T15:52:51Zurn:sha1:488f4f2e96ffece02bead6a12adc75bfef47f097
pkgsrc changes:
- Explict to depends security/heimdal package when kerberos option is
specified. PR pkg/37999 should be fixed.
Change:
646) Sudo will now set the nproc resource limit to unlimited on Linux
systems to work around Linux's setuid() resource limit semantics.
On PAM systems the resource limits will be reset by pam_limits.so
before the command is executed.
647) SELinux support that can be used to implement role based access
control (RBAC). A role and (optional) type may be specified
in sudoers or on the command line. These are then used in the
security context that the command is run as.
648) Fixed a Kerberos 5 compilation problem with MIT Kerberos.
Sudo 1.6.9p13 released.
649) Fixed an invalid assumption in the PAM conversation function
introduced in version 1.6.9p9. The conversation function may
be called for non-password reading purposes as well.
650) Fixed freeing an uninitialized pointer in -l mode, introduced in
version 1.6.9p13.
651) Check /etc/sudoers after LDAP even if the user was found in LDAP.
This allows Defaults options in /etc/sudoers to take effect.
652) Add missing checks for enforcing mode in SELinux RBAC mode.
Sudo 1.6.9p14 released.
PKG_OPTIONS_OPTIONAL_GROUPS/PKG_OPTIONS_NONEMPTY_SETS have their respective2007-09-26T05:47:46Zbjsbjs2007-09-26T05:47:46Zurn:sha1:1dd639a347270d4e498135a4cae3a5c43dc1c243
options added to PKG_SUPPORTED_OPTIONS automagically. Duplicate options
removed.
Update sudo package to 1.6.9p4.2007-08-18T15:09:11Ztacataca2007-08-18T15:09:11Zurn:sha1:ebd3413f0a6b7543bf007ddcf5db5c36c1ced2d0
pkgsrc change:
Make these options mutual exclusive: kerberos pam skey.
(Really, combinations of kerberos and pam, pam and skey are conflicts.)
CHANGES:
609) Worked around a bug ins some PAM implementations that caused a crash
when no tty was present.
610) Fixed a crash on some platforms in the error logging function.
611) Documentation improvements.
Sudo 1.6.9p1 released.
612) Fixed updating of the saved environment when the environ pointer
gets changed out from underneath us.
Sudo 1.6.9p2 released.
613) Fixed a bug related to supplemental group matching introduced
in 1.6.9.
Sudo 1.6.9p3 released.
614) Added IPv6 support from YOSHIFUJI Hideaki.
615) Fixed sudo_noexec installation path.
616) Fixed a K&R compilation error.
Sudo 1.6.9p4 released.
Update sudo to 1.6.9. We don't take the new default of PAM and no other2007-07-23T16:38:36Ztlstls2007-07-23T16:38:36Zurn:sha1:b383956e20f2de9b532dddf82da9f6f4205c25c4
authentication; that can be enabled by adding pam to the package options
if users desire.
The databases/openldap package has been split in -client and -server component2006-05-31T18:22:23Zghenghen2006-05-31T18:22:23Zurn:sha1:6a34cac762bbf82e27b9e03d66f87e4ef2add238
packages. Convert LDAP-based applications to depend on openldap-client, and
bump PKGREVISION for those that depend on it by default.
check for /usr/include/skey.h on NetBSD - in case dist with MKSKEY=no2005-08-22T10:20:33Zabsabs2005-08-22T10:20:33Zurn:sha1:9c8e9544f4f8e2cb27fd91064fd7cfa49e8bf16fUpdate PKG_OPTIONS variable "PAM" to "pam".2005-06-22T10:30:12Ztacataca2005-06-22T10:30:12Zurn:sha1:3231cce5141b3ddf9469fde3124a1f99bbdf7ad3Packages have no business modifying PKG_DEFAULT_OPTIONS -- it's a2005-05-31T10:01:36Zdillodillo2005-05-31T10:01:36Zurn:sha1:3d75323aa5391188ab027b2688faacf8286ace0c
user settable variable. Set PKG_SUGGESTED_OPTIONS instead. Also,
make use of PKG_OPTIONS_LEGACY_VARS.
Reviewed by wiz.
Create a pam.buildlink3.mk file that is used by PAM-using packages.2005-01-14T05:15:39Zjlamjlam2005-01-14T05:15:39Zurn:sha1:e7b0a8edd99fc8377a8c8877bd0b5aea28fe5479
It includes the correct buildlink3.mk file from either Linux-PAM
(security/PAM) or OpenPAM (security/openpam) and eventually will
support solaris-pam. pam.buildlink3.mk will:
* set PAMBASE to the base directory of the PAM files;
* set PAM_TYPE to the PAM implementation used.
There are two variables that can be used to tweak the selection of
the PAM implementation:
PAM_DEFAULT is a user-settable variable whose value is the default
PAM implementation to use.
PAM_ACCEPTED is a package-settable list of PAM implementations
that may be used by the package.
Modify most packages that include PAM/buildlink3.mk to include
pam.buildlink3.mk instead.
Allow building sudo without S/Key support on NetBSD. Patch from2004-12-22T04:36:32Zjlamjlam2004-12-22T04:36:32Zurn:sha1:c49b38644de6c44c74c9e9b5253de2fe991cb83d
PR pkg/28743 by Jukka Salmi with minor changes by me.