linux/poky.git/meta/recipes-extended/sudo, branch yocto-2.7.2

sudo: fix CVE-2019-14287

2019-10-30T13:47:54+00:00

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. (From OE-Core rev: 650dd9486d6e5410665d5376be30732c7625396d) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie (cherry picked from commit 4e11cd561f2bdaa6807cf02ee7c9870881826308) Signed-off-by: Armin Kuster (cherry picked from commit b1e0149c41e3c344a0496e64ab3b0c9dd4685ea4) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.27

2019-02-20T11:30:35+00:00

License-Update: copyright years updated (From OE-Core rev: 53b5629cf5010f8fee79d82260e291b418cbef7c) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.26

2018-12-05T22:30:19+00:00

License-Update: include more files to check, but license remains the same. (From OE-Core rev: ad0f26263eb51cda4cf96cd2fe7f6e7f950b9e8e) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

sudo: Add missing dep on virtual/crypt

2018-09-05T17:00:24+00:00

Ensure we have virtual/crypt even if building without PAM; fixes: sudo: error in /etc/sudo.conf, line 0 while loading plugin "sudoers_policy" sudo: unable to load /usr/libexec/sudo/sudoers.so: /usr/libexec/sudo/sudoers.so: undefined symbol: crypt sudo: fatal error, unable to load plugins (From OE-Core rev: f863713ae255bf5b6619c98ecd36aacbda352bbb) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie

sudo: add PACKAGECONFIG for pam-wheel

2018-08-02T08:30:11+00:00

The pam_wheel PAM module is used to enforce the so-called wheel group. By default it permits root access to the system if the applicant user is a member of the wheel group. Add PACKAGECONFIG to enable pam_wheel module for sudo. (From OE-Core rev: 7a46ca79b18527a56de470fcaaf95c870c097cf6) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.23

2018-05-15T09:56:50+00:00

Upgrade sudo to 1.8.23. The license checksum changes but the actual license does not. The /var/run/sudo directory has changed to /run/sudo, change do_install_append according to avoid error. (From OE-Core rev: abd809670ea4048551d20c11da95203536250001) Signed-off-by: Chen Qi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: 1.8.21P1 -> 1.8.22

2018-02-24T10:31:45+00:00

1.Upgrade sudo from 1.8.21P1 to 1.8.22. 2.Update the checksum of LIC_FILES_CHKSUM. The following content is appended to doc/LICENSE, plugins/sudoers/redblack.c. Todd C. Miller -> Todd C. Miller (From OE-Core rev: 05e8601dcbf6ba8500696d874c483f9ac8df71fa) Signed-off-by: Huang Qiyu Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: improve reproducibility

2017-11-30T10:49:21+00:00

Delete various build host references from the internally generated file sudo_usage.h. The references get compiled into executables, which leads to non-reproducible builds. The removed references (configure options) were only used as part of the sudo "usage", and even then only when ran as root. (From OE-Core rev: 090eb9efdb2204673b1d569582813ea8860c8570) Signed-off-by: Juro Bystricky Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.21p2

2017-11-21T13:06:12+00:00

(From OE-Core rev: a3eccc5b0f0e95c18b3d40cc82d576fbe45b4547) Signed-off-by: Chen Qi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.20p2

2017-07-27T21:36:53+00:00

The checksum for doc/LICENSE is changed, but the content only changes year from '2013' to '2017', so the license remains the same. (From OE-Core rev: e1d27852bf21be49db574ed207bc90d42c4bd898) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie