linux/poky.git/meta/recipes-extended/sudo, branch krogoth-next

sudo: CVE-2015-8239

2016-09-23T14:27:04+00:00

Fixes race condition when checking digests in sudoers. Reference: http://seclists.org/oss-sec/2015/q4/327 Reference to upstream fixes: https://www.sudo.ws/repos/sudo/raw-rev/397722cdd7ec https://www.sudo.ws/repos/sudo/raw-rev/0cd3cc8fa195 (From OE-Core rev: 3564999bd987b08188e2e0eead59a49bebbc5e32) Signed-off-by: Sona Sarmadi Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: fix pam config on systemd systems

2016-04-13T09:12:52+00:00

Pam_keyinit revoke causes issues on systemd systems. Make its use optional. This brings it in line with Fedora 23 and Centos 7. (From OE-Core rev: 36825c7b14b92434705a58aa4c22b8c1710a9760) Signed-off-by: Dan McGregor Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.15

2015-12-12T23:42:53+00:00

1. upgrade to 1.8.15 2. delete patch file due to the bug has been fixed in sudo 1.8.15 (http://bugzilla.sudo.ws/show_bug.cgi?id=708) (From OE-Core rev: 2180280e63aece8fb45686e1b5dd01430ce478fe) Signed-off-by: Fan Xin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: remove libdir INSANE_SKIP

2015-12-12T23:42:53+00:00

Now that the libdir check allows libraries in libexecdir, remove INSANE_SKIP. (From OE-Core rev: a760d550b099a9287b188b8376ef2f0787cc85fc) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: handle libexecdir != libdir/PN.

2015-12-08T10:20:50+00:00

sudo has somewhat special file installation logic and installs the modules and libraries to $libexecdir/sudo, with special handling for the case when libexecdir already contains /sudo (which it does by default in current oe-core where libexecdir=$libdir/$PN). As setting libexecdir to /usr/libexec should work, add both possibilities to FILES to be sure the right files are captured, and add INSANE_SKIP for the libdir warning that libraries are outside of /usr/lib/ (arguably, this should be fixed in insane). (From OE-Core rev: 431ad7a268fc07c367ce830c4f69dba515f44b4e) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: fix file permission for /etc/pam.d/sudo

2015-10-21T21:56:04+00:00

The file permission should be 0644 instead of 0664. (From OE-Core rev: 86c80f6d51b3700e090c70067808ea405d5a0b20) Signed-off-by: Chen Qi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: Disable rsize_t deliberately

2015-09-12T21:48:41+00:00

gcc does not have it but clang does, problem happens when host compiler is gcc and cross compiler is clang, because autoconf detects it with clang and slaps it to host compiler as well (From OE-Core rev: c70d915bcc3054120e7ad06b9bcfef57f2d15371) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: Include sys/types.h for id_t definition

2015-09-12T21:48:37+00:00

This is exposed by musl, on glibc sys/types.h comes as indirect include from other include myriad. (From OE-Core rev: 7a55d298376b83248a4a35f3c01f3fd163908046) Signed-off-by: Khem Raj Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.14p3

2015-07-27T11:28:00+00:00

The licence checksum is modified according to the change of doc/LICENCE. In specific, file://lib/util/reallocarray.c is added to LIC_FILES_CHECKSUM. Fix out of tree builds, and explicitly enable/disable tmpfiles.d support based on the systemd DISTRO_FEATURE to avoid non-deterministic packaging. Based on a patch by Chen Qi (From OE-Core rev: ef2a842d06b3a9ee6036af06247c7c022f8c720d) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: Disable hardening for musl

2015-04-13T21:33:23+00:00

musl does not yet enable ssp Change-Id: If40ab0a54b17d5528676b1268182b6c7e7ef5761 (From OE-Core rev: a583f81d9bc6ae984699d9aba7a53019ff0afc23) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie