linux/poky.git/meta/recipes-extended/sudo, branch zeus

sudo: specify where target tools are

2020-02-11T23:05:13+00:00

sudo uses AC_PATH_PROG to find target paths, which means at best potential host-contamination (and reproducible issues) and at worst it thinks sh is at /your/build/path/hosttools/sh. Solve this by explicitly passing the correct paths to configure. (From OE-Core rev: 61650dd8498a093f3bfa93202c9cd2e9a7fb7834) (From OE-Core rev: 6e809474ab686fba6924d8b46fd0b9eab5c66c06) (From OE-Core rev: 232430bdee74bb266ded6ccf2fb3842caad06181) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: Set vardir deterministically

2020-02-11T23:05:12+00:00

Without setting this it will vary depending on which directories are present on the host. [YOCTO #13775] (From OE-Core rev: 39fe849b56d70689846262c31ab7c182c8443923) (From OE-Core rev: 51274c9b195ad00dd6362f352ad9bbf7e9a3e098) (From OE-Core rev: 89f517c2775338db92874484c28b4224d670ec1f) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: Fix fetching sources

2019-11-13T22:02:15+00:00

It looks like https://www.sudo.ws/download.html changed certificate and directory structure. This breaks fetching sources. (From OE-Core rev: f02e9f46ce54fed3c7ddfad7d1003a2fb7ba3a67) Signed-off-by: Ferry Toth Signed-off-by: Ross Burton Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: fix CVE-2019-14287

2019-10-29T09:08:18+00:00

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. (From OE-Core rev: b7b6d39565f8fad61f2347a3fe31c9ee77a4da15) Signed-off-by: Changqing Li Signed-off-by: Richard Purdie (cherry picked from commit 4e11cd561f2bdaa6807cf02ee7c9870881826308) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

sudo: Fix BSD license file checksum

2019-08-21T20:52:59+00:00

BSD license files must include the copyright notice. (From OE-Core rev: f5cfcaa79fd3a2cfd9299f2c8e7686b502e52551) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

sudo: correct SRC_URI

2019-08-14T16:33:49+00:00

The old URI returns 404, and has an invalid TLS certificate. (From OE-Core rev: 73ff6aba0a53ffc3ee0a5859a3ad4c8021be4de0) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

sudo: use nonarch_libdir instead of libdir for tmpfiles.d

2019-07-26T07:41:39+00:00

In case of multilib, /usr/lib64/tmpfiles.d is not a path that will be searched. So we need to use nonarch_libdir. (From OE-Core rev: 2623d9d2f243128e50be9ed6fb5bb222b3fe9fa0) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.27

2019-02-20T11:30:35+00:00

License-Update: copyright years updated (From OE-Core rev: 53b5629cf5010f8fee79d82260e291b418cbef7c) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

sudo: upgrade to 1.8.26

2018-12-05T22:30:19+00:00

License-Update: include more files to check, but license remains the same. (From OE-Core rev: ad0f26263eb51cda4cf96cd2fe7f6e7f950b9e8e) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

sudo: Add missing dep on virtual/crypt

2018-09-05T17:00:24+00:00

Ensure we have virtual/crypt even if building without PAM; fixes: sudo: error in /etc/sudo.conf, line 0 while loading plugin "sudoers_policy" sudo: unable to load /usr/libexec/sudo/sudoers.so: /usr/libexec/sudo/sudoers.so: undefined symbol: crypt sudo: fatal error, unable to load plugins (From OE-Core rev: f863713ae255bf5b6619c98ecd36aacbda352bbb) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie