| Commit History - (may be incomplete: see SVNWeb link above for full details) |
| Date | By | Description |
04 May 2013 22:30:31
1.8.6.p8
|
wxs  |
Disable PIE on ARM. This was causing a crash at runtime.
Submitted by: Lukasz Siemiradzki |
24 Apr 2013 18:10:32
1.8.6.p8
|
ak  |
- Convert USE_GETTEXT to USES (part 3)
Approved by: portmgr (bapt) |
16 Apr 2013 15:30:52
1.8.6.p8
|
wxs  |
Update to 1.8.6p8.
Feature safe: yes |
01 Mar 2013 01:57:29
1.8.6.p7
|
wxs  |
Update to 1.8.6p7.
VuXML entry coming in the next day or two tops. |
24 Jan 2013 18:16:38
1.8.6.p5  |
wxs  |
Update to 1.8.6p5. |
16 Jan 2013 15:42:07
1.8.6.p4  |
wxs  |
Update to 1.8.6.p4.
Trim header.
Remove ia64 fix, included upstream. |
01 Jan 2013 20:33:52
1.8.6.p3_1  |
wxs  |
Disable PIE on ia64. This was causing a run-time failure.
Submitted by: Anton Shterenlikht, Todd Miller |
11 Oct 2012 13:36:47
1.8.6.p3_1  |
wxs  |
If OPIE option is on we can not pass --with-pam in CONFIGURE_ARGS. Make it
so that OPIE will pass --with-opie and if it is off we pass --with-pam. [1]
No functional changes with this, just a build fix.
While here use tabs where appropriate and cleanup pkg-descr. [2]
Feature safe: yes |
27 Sep 2012 13:44:02
1.8.6.p3_1  |
wxs  |
Fix the temporary workaround by passing the appropriate flag in
LDFLAGS. Since I want to ensure those who built it on i386 with this
workaround will rebuild it now that it is fixed bump PORTREVISION. |
27 Sep 2012 02:57:50
1.8.6.p3  |
wxs  |
Fix build on i386 by disabling hardening measures. This is a temporary
fix until I can figure out what is really going on. |
26 Sep 2012 01:49:52
1.8.6.p3  |
wxs  |
Update to 1.8.6p3
PR: ports/171837
Submitted by: cy@ |
17 Aug 2012 18:25:23
1.8.5.p3  |
wxs  |
Update to 1.8.5p3 |
21 Jun 2012 13:01:13
1.8.5.p2  |
wxs  |
Fix typo.
PR: ports/169284
Submitted by: From: Bryan Drewery <bryan@shatow.net> |
19 Jun 2012 01:38:09
1.8.5.p2  |
wxs  |
Add option to enable OPIE support (off by default). [1]
While here, convert to new-style options.
PR: ports/168812 [1]
Submitted by: Zak Blacher <zblacher@sandvine.com> [1] |
03 Jun 2012 20:21:46
1.8.5.p2  |
wxs  |
Update to 1.8.5p2. |
21 May 2012 15:39:02
1.8.5.p1  |
wxs  |
Update to 1.8.5p1.
Changes: http://www.sudo.ws/sudo/stable.html#1.8.5p1 |
16 May 2012 14:26:34
1.8.4_2  |
wxs  |
Update to 1.8.4p5
Security: b3435b68-9ee8-11e1-997c-002354ed89bc |
13 Mar 2012 15:25:11
1.8.4_1  |
wxs  |
Update to 1.8.4p4
Changes from 1.8.4p2 through 1.8.4p4 are here:
http://www.sudo.ws/sudo/stable.html#1.8.4p4
Feature safe: yes |
01 Mar 2012 02:06:48
1.8.4  |
wxs  |
Update to 1.8.4p2
PR: ports/165528
Submitted by: rea@ |
06 Feb 2012 02:47:25
1.8.3_2  |
wxs  |
If you used LDAP and NOPORTDOCS then the documentation directory would be
left behind on install. The upstream Makefile would create the directory
and put sudoers2ldif there, but pkg-plist would not register it properly.
This fix moves sudoers2ldif to 'bin' since it isn't really documentation.
It's installation is still controlled by the LDAP knob though.
Spotted by: scheidell@ |
30 Jan 2012 16:37:25
1.8.3_2  |
wxs  |
Update to 1.8.3p2
Security: 7c920bb7-4b5f-11e1-9f47-00e0815b8da8 |
09 Nov 2011 17:18:44
1.8.3_1  |
wxs  |
Switch to using MASTER_SITE_SUDO. |
09 Nov 2011 15:26:04
1.8.3_1  |
miwi  |
- Remove WITH_FBSD10_FIX, is no longer needed |
01 Nov 2011 14:13:05
1.8.3_1  |
wxs  |
- Use DISTNAME instead of DISTFILES and remove WRKSRC.
Submitted by: sunpoet@ |
30 Oct 2011 14:24:02
1.8.3_1  |
wxs  |
Fix version number going backwards.
Noticed by: erwin@ |
30 Oct 2011 02:49:59
1.8.3.p1  |
wxs  |
- Update to 1.8.3p1 |
29 Oct 2011 10:31:51
1.8.3  |
kwm  |
Fix build on FreeBSD 10
Approved by: portmgr (miwi) |
23 Oct 2011 15:00:38
1.8.3  |
wxs  |
- Update to 1.8.3. |
23 Sep 2011 22:26:39
1.8.2  |
amdmi3  |
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead
PR: 157936
Submitted by: myself
Exp-runs by: pav
Approved by: pav |
07 Sep 2011 01:30:26
1.8.2  |
wxs  |
- Switch to using bsd.port.options.mk. |
06 Sep 2011 18:07:33
1.8.2  |
wxs  |
- Update to 1.8.2
- Now depend on gettext
- While here, use DISTVERSION. |
02 Aug 2011 21:35:36
1.8.1_5  |
wxs  |
- Remove dead MASTER_SITES.
Noticed by: The Distilator |
22 May 2011 19:33:13
1.8.1_5  |
wxs  |
Update to 1.8.1p2 |
13 May 2011 14:30:35
1.8.1_4  |
wxs  |
Add an AUDIT option, which is off by default for now. I will turn it on
with the next significant bump.
Submitted by: Mike Kelly (private mail) |
17 Apr 2011 13:50:10
1.8.1_4  |
wxs  |
Update to 1.8.1p1.
No longer need to worry about etc/sudoers.d problem, as it is no longer
a fatal error. |
12 Apr 2011 03:42:45
1.8.1_3  |
wxs  |
Fix a typo in pkg-install. Should use -m and not -M for install(1).
Noticed by: sunpoet@ |
11 Apr 2011 19:43:39
1.8.1_3  |
wxs  |
The install process checks the validity of sudoers before installing
etc/sudoers.d. If you have an sudoers with the includedir directive the
install will fail. Fix this by creating the directory in a pre-install
target.
This should fix "The Great sudo Debacle of 2011" once and for all.
Tested by: dougb@ |
11 Apr 2011 16:50:19
1.8.1_2  |
wxs  |
Revert the removal of sudoers.d. It is a POLA violation. While here remove
the UPDATING entry as it no longer applies. |
11 Apr 2011 12:47:00
1.8.1_1  |
wxs  |
We don't install a sudoers.d, remove that from the default sudoers file.
PR: ports/156305
Submitted by: Helmut Schneider <jumper99@gmx.de>
Anatoly Borodin <anatoly.borodin@gmail.com> |
10 Apr 2011 01:39:49
1.8.1  |
wxs  |
Update to 1.8.1. There are a lot of behind-the-scenes changes in this port,
including a plugin system now.
While here, do some whitespace fixes. |
19 Jan 2011 18:32:50
1.7.4.6  |
wxs  |
Update to 1.7.4p6.
"This release fixes a bug in the I/O logging support that could cause visual
artifacts in full-screen programs such as text editors. This bug was listed as
fixed in sudo 1.7.4p5 but the fix was merged incorrectly."
Feature safe: yes |
13 Jan 2011 20:00:11
1.7.4.5  |
wxs  |
Update to 1.7.4p5.
Special thanks to rea@ for commiting the appropriate VuXML for me. :)
PR: ports/153939
Submitted by: rea@
Security: 908f4cf2-1e8b-11e0-a587-001b77d09812
Feature safe: yes |
24 Oct 2010 23:34:12
1.7.4.4_1  |
wxs  |
Work around annoying, but harmless, bug with install(1) using "-b~" by changing
it to use "-b ~".
While here also strip libsudo_noexec.so.
Submitted by: John Hein (private mail) |
17 Oct 2010 01:51:08
1.7.4.4_1  |
wxs  |
Add a bunch of new mirrors and remove dead ones. The mirror list now matches
http://www.sudo.ws/sudo/download_mirrors.html.
Noticed by: The Distilator |
14 Sep 2010 15:24:30
1.7.4.4_1  |
wxs  |
Add two missing files when LDAP knob is on. No need to bump PORTREVISION as it
defaults to off. |
14 Sep 2010 00:25:14
1.7.4.4_1  |
wxs  |
Remove SHELL_SETS_HOME knob since as far as I can tell it doesn't do anything
anymore. The configure script still supports it but the behavior is now
controlled by a setting in the configuration file "Defaults env_keep += HOME". |
13 Sep 2010 20:46:01
1.7.4.4_1  |
wxs  |
Fix packaging.
PR: ports/150371
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>, dim@ |
07 Sep 2010 18:13:23
1.7.4.4  |
wxs  |
Update to 1.7.4p4 to address a couple of minor bugs and Runas group
vulnerability.
While I'm here also cleanup files/patch-Makefile.in.
Security: 67b514c3-ba8f-11df-8f6e-000c29a67389 |
05 Sep 2010 21:33:42
1.7.4.3_1  |
wxs  |
Fix package installation by correcting usage of %B and installing a file
to make sure the empty directory is created.
PR: ports/149912
Submitted by: Alexey V.Degtyarev <alexey@renatasystems.org> |
22 Aug 2010 12:32:26
1.7.4.3  |
wxs  |
Strip the binaries by default. No need to bump PORTREVISION for such a
minor change.
PR: ports/149135
Submitted by: Anonymous <swell.k@gmail.com> |
22 Aug 2010 01:58:33
1.7.4.3  |
wxs  |
Update to 1.7.4p3
Install etc/pam.d/sudo and etc/pam.d/sudo.default |
16 Aug 2010 13:06:02
1.7.4.2_1  |
wxs  |
Fix problems when upgrading using packages:
- Always install sudoers.sample.
- There is no need for pkg-install anymore.
- Bump PORTREVISION. |
16 Aug 2010 02:16:26
1.7.4.2  |
wxs  |
Update to 1.7.4p2. |
05 Jul 2010 16:34:02
1.7.3  |
wxs  |
Remove unsupported argument to configure.
PR: ports/148378
Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com>
Feature safe: yes |
04 Jul 2010 18:56:44
1.7.3  |
wxs  |
Update to 1.7.3
Feature safe: yes |
03 Jun 2010 00:11:49
1.7.2.7  |
wxs  |
Update to 1.7.2p7.
Security: d42e5b66-6ea0-11df-9c8d-00e0815b8da8 |
15 Apr 2010 20:55:39
1.7.2.6  |
wxs  |
- Update to 1.7.2p6 (security fix).
Security: 1a9f678d-48ca-11df-85f8-000c29a67389 |
01 Mar 2010 17:48:13
1.7.2.5  |
wxs  |
- Update to 1.7.2p5. Security fix (1.7.2p4) and general bug fixes beyond that.
Security: 018a84d0-2548-11df-b4a3-00e0815b8da8
Feature safe: yes |
05 Jan 2010 14:57:17
1.7.2.2  |
wxs  |
- Fix options screen to have a shorter description.
Noticed by: garga@ |
04 Jan 2010 21:28:22
1.7.2.2  |
wxs  |
- Update to 1.7.2.2
- Mark jobs safe
- Cleanup whitespace in OPTIONS
- [1] Add ability to specify syslog facility at build time (defaults to local2,
no functional change)
- [2] Add ability to specify ldap configuration file (defaults to
${PREFIX}/etc/ldap.conf, no functional change)
PR: [2]: ports/127822
Submitted by: [1]: skreuzer@ (private mail)
[2]: Sergey Skvortsov <skv@freebsd.org> |
12 Oct 2009 17:55:26
1.6.9.20  |
wxs  |
- Take maintainer. Thanks Tom for all your hard work on this.
Approved by: tmclaugh |
12 Jun 2009 00:46:49
1.6.9.20  |
tmclaugh  |
Add OPTIONS for WITH_DISABLE_ROOT_SUDO, WITH_DISABLE_AUTH, and
WITH_NOARGS_SHELL
Submitted by: Scott Fultz |
06 Feb 2009 19:35:47
1.6.9.20  |
tmclaugh  |
Security update for sudo to 1.6.9p20 for CVE 2009-0034
Changes:
- Only use the cached supplementory group vector when matching groups
for the invoking user. (security)
- When setting the umask, use the union of the user's umask and the
default value set in sudoers so that we never lower the user's umask
when running a command.
- Sudo now operates in the C locale again when doing a match against
sudoers.
PR: 131446
Submitted by: Eygene Ryabinkin
Security: vid:13d6d997-f455-11dd-8516-001b77d09812 |
11 Oct 2008 20:39:03
1.6.9.17  |
tmclaugh  |
- Add FTP_PASSIVE_MODE to example env_keep line for pkg utilities and fetch.
Suggested by: koitsu |
21 Aug 2008 06:18:49
1.6.9.17  |
rafan  |
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.
To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.
To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.
Changes to Mk/*:
- Add runtime detection magic in bsd.port.mk (Only the first 15 lines of the commit message are shown above ) |
06 Jul 2008 23:20:05
1.6.9.17  |
tmclaugh  |
- Update to 1.6.9p17
* the -i flag implies resetting the environment as it did prior to
1.6.9. The -i and -E flags are now mutually-exclusive. |
10 Apr 2008 14:00:22
1.6.9.15_1  |
tmclaugh  |
- Fix pkg-plist, libtool archive is no longer installed.
Prompted by: pavmail |
09 Apr 2008 16:44:28
1.6.9.15  |
tmclaugh  |
- Update to 1.6.9p15
* The HOME environment variable is once again preserved by default, as per
the documentation.
- Finally remember to fix the $FreeBSD$ line in pam file. |
09 Mar 2008 20:51:31
1.6.9.14  |
tmclaugh  |
- Update to 1.6.9p14
* Check sudoers even if user is found in LDAP so Defaults can take
effect.
* Fix crash when pam_lastlog is (incorrectly) usesd in session section
of PAM file. |
28 Jan 2008 06:29:03
1.6.9.12  |
tmclaugh  |
Update to 1.6.9p12
Changes:
- The ALL command in sudoers now implies SETENV permissions.
- The command search is now performed using the target user's auxiliary
group vector too.
- Various LDAP code improvements.
- Added passprompt_override flag to sudoers to cause sudo's prompt to be
used in all cases. Also set when the -p flag is used.
- New %p prompt escape that expands to the user whose password is being
prompted, as specified by the rootpw, targetpw and runaspw sudoers
flags. |
12 Nov 2007 01:21:20
1.6.9.6  |
tmclaugh  |
- Make fetchable again. Add my MASTER_SITE_LOCAL to the mix and replace
a number of outdated sites.
Notified by: Ferenc Gartner
Approved by: portmgr (linimon, erwin) |
23 Oct 2007 00:46:45
1.6.9.6  |
tmclaugh  |
Update to 1.6.9p6
- Sudo now only prints the password prompt if the process is in the
foreground. |
17 Sep 2007 14:55:13
1.6.9.5  |
tmclaugh  |
Update to 1.6.9p5:
- Fixed a bug in the IP address matching introduced by the IPV6 merge.
- Fixed sudoedit when used on a non-existent file.
- Groups and netgroups are now valid in an LDAP sudoRunas statement. |
03 Sep 2007 17:13:29
1.6.9.4  |
tmclaugh  |
Install schema.OpenLDAP into DOCSDIR.
Prompted by: flz |
27 Aug 2007 19:40:48
1.6.9.4  |
tmclaugh  |
Update to 1.6.9p4
- IPv6 support added.
- Added notes to default sudoers for handling environmental variables
related to our pkg_* tools and portupgrade. |
13 Aug 2007 00:14:15
1.6.9.3_1  |
tmclaugh  |
- Work around broken configure script and explicitly set location of
sudo_noexec.so to unbreak NOEXEC option. [1]
- Build using --with-secure-path if SUDO_SECURE_PATH is set when
building the port. SUDO_SECURE_PATH should be set to a PATH string.
[2]
- Don't bother deleting sudo_noexec.la. Deleting the file after it's
installed is ugly and since it's not harmful it's not worth patching
the install.
- Set CONFIGURE_TARGET.
PR: 115442 [1], 115381 [2]
Submitted by: vd [1], Janos Mohacsi [2] |
03 Aug 2007 00:56:01
1.6.9.3_1  |
tmclaugh  |
Fix session stack in default pam file. |
02 Aug 2007 17:25:19
1.6.9.3  |
tmclaugh  |
Update to 1.6.9p3
- Fixes bug related to supplemental group matching |
30 Jul 2007 15:01:47
1.6.9.2  |
tmclaugh  |
Update to 1.6.9p2
- Environment handling fix. |
27 Jul 2007 01:00:56
1.6.9.1  |
tmclaugh  |
Fix PORTVERSION
Noticed by: ume |
26 Jul 2007 15:53:40
1.6.9.p1  |
tmclaugh  |
- Update to 1.6.9p1
* Worked around a bug in some PAM implementations that caused a crash
when no tty was present.
* Fixed a crash on some platforms in the error logging function.
- Change default pam session stack to pam_permit like su does [1]
- Grab maintainership
Sugested by: des [1] |
23 Jul 2007 03:54:05
1.6.9_1  |
tmclaugh  |
- Fix segfault when there is no TTY when executing. [1]
- Temporarilly disable session entry in default pam file because
pam_lastlog causes users to appear as though they have logged out in
system logs. [2]
Reported by: yarodin@gmail.com [1], Paul Fraser <pfraser@gmail.com> [2]
Submitted by: Todd Miller [1] |
21 Jul 2007 03:15:13
1.6.9  |
tmclaugh  |
Update to 1.6.9
Application changes:
- PAM, since present, is used by default.
- Environment variable handling has changed significantly.
- Sudo checks the user's supplemental group vector so nsswitch order is
no longer important for group based rules.
(See UPGRADE and CHANGING under share/doc/sudo/ for more.)
Port changes:
- PAM file is no longer clobered on reinstall.
- OPIE option has been removed due to PAM being used by default.
- Selected documentation is now installed. |
02 May 2007 18:47:17
1.6.8.12_2  |
sat  |
- Add an option to enable insults
Submitted by: Dan Casey <dcasey@debtresolve.com> |
10 Apr 2007 12:47:09
1.6.8.12_2  |
des  |
Install a PAM policy, rather than just suggesting that the admin do so. |
23 Mar 2007 09:47:31
1.6.8.12_1  |
linimon  |
Reset mharo due to maintainer-timeouts and no response to PRs.
Hat: portmgr |
28 Jul 2006 06:54:29
1.6.8.12_1  |
mharo  |
fix option text
Reported by: Nick Fishman <kwlogical@bellsouth.net> |
28 Apr 2006 19:34:09
1.6.8.12_1  |
sem  |
- Add LDAP support (off by default)
- OPTIONS'fy
- Remove obsoleted USE_REINPLACE
PR: ports/95598
Submitted by: Dmitriy Kirhlarov <dkirhlarov@localhost.oilspace.com>
Approved by: maintainer timeout (2 weeks) |
24 Jan 2006 01:03:33
1.6.8.12_1  |
edwin  |
SHA256ify
Approved by: krion@ |
17 Dec 2005 22:12:42
1.6.8.12_1  |
pav  |
- Remove etc/sudoers on deinstall if user haven't modified it
PR: ports/69288 (based on)
Approved by: maintainer timeout (mharo; year and a half) |
14 Nov 2005 04:20:02
1.6.8.12  |
mharo  |
Upgrade to 1.6.8.12
PR: 88865
Submitted by: Phil Oleson <oz@nixil.net> |
21 Jun 2005 12:52:01
1.6.8.9  |
osa  |
Security update to latest release: 1.6.8p9.
<Security Alert>
Summary:
A race condition in Sudo's command pathname handling prior
to Sudo version 1.6.8p9 that could allow a user with Sudo
privileges to run arbitrary commands.
Sudo versions affected:
Sudo versions 1.3.1 up to and including 1.6.8p8.
</Security Alert>
More information about this incident available at:
http://www.sudo.ws/sudo/alerts/path_race.html |
15 Apr 2005 15:06:09
1.6.8.8  |
mharo  |
Upgrade to 1.6.8p8 |
07 Feb 2005 18:46:42
1.6.8.7  |
mharo  |
update to 1.6.8p7 |
08 Jan 2005 19:56:10
1.6.8.6  |
mharo  |
Upgrade to 1.6.8p6 |
30 Nov 2004 01:22:23
1.6.8.5  |
mharo  |
Update to 1.6.8p5 |
18 Nov 2004 02:17:47
1.6.8.4  |
mharo  |
Update to latest release of sudo |
17 Nov 2004 11:50:07
1.6.8.3  |
roam  |
Update to sudo-1.6.3p8, which *really* includes the CDPATH fix, and
another one that does not directly affect FreeBSD (our _PATH_VARTMP
was fine before, too).
Approved by: mharo (maintainer) |
16 Nov 2004 08:38:38
1.6.8.2_1  |
mharo  |
strip out CDPATH
Submitted by: Peter Pentchev <roam@ringlet.net> |
12 Nov 2004 21:19:00
1.6.8.2  |
mharo  |
Update to 1.6.8p2
o Bash exported functions and the CDPATH variable are now stripped from
the environment passed to the program to be executed. |