Changeset 5183155

Timestamp:

11/12/2023 05:14:13 PM (7 months ago)

Author:

Pierre Labastie <pierre.labastie@…>

Branches:

12.1, ken/TL2024, ken/tuningfonts, lazarus, plabs/newcss, python3.11, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18

Children:

0c29fa19

Parents:

2f1e634e

Message:

Update to sudo-1.9.15p2

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• packages.ent (modified) (1 diff)
• postlfs/security/sudo.xml (modified) (10 diffs)

introduction/welcome/changelog.xml

@@ -40 +40 @@
     -->
     <listitem>
+      <para>November 12th, 2023</para>
+      <itemizedlist>
+        <listitem>
+          <para>[pierre] - Update to sudo-1.9.15p2. Fixes
+          <ulink url="&blfs-ticket-root;18848">#18848</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
+    <listitem>
       <para>November 11th, 2023</para>
       <itemizedlist>

packages.ent

@@ -37 +37 @@
 <!ENTITY ssh-askpass-version          "&openssh-version;">
 <!ENTITY stunnel-version              "5.71">
-<!ENTITY sudo-version                 "1.9.15">
+<!ENTITY sudo-version                 "1.9.15p2">
 <!ENTITY tripwire-version             "2.4.3.7">
 <!--<!ENTITY volume_key-version           "0.3.12">-->

postlfs/security/sudo.xml

@@ -7 +7 @@
   <!ENTITY sudo-download-http "https://www.sudo.ws/dist/sudo-&sudo-version;.tar.gz">
   <!ENTITY sudo-download-ftp  " ">
-  <!ENTITY sudo-md5sum        "a9f266e6c0b7b2498dd474f3875b9631">
+  <!ENTITY sudo-md5sum        "ef31b7ef72b386618990cfef94042541">
   <!ENTITY sudo-size          "5.1 MB">
-  <!ENTITY sudo-buildsize     "53 MB (add 17 MB for tests)">
-  <!ENTITY sudo-time          "0.2 SBU (with parallelism=4; add 0.1 SBU for tests)">
+  <!ENTITY sudo-buildsize     "67 MB (add 19 MB for tests)">
+  <!ENTITY sudo-time          "0.3 SBU (with parallelism=4; add 0.1 SBU for tests)">
 ]>
 
@@ -79 +79 @@
       <xref linkend="server-mail"/> (that provides a
       <command>sendmail</command> command),
-      <ulink url="https://www.openafs.org/">AFS</ulink>, and
+      <ulink url="https://www.openafs.org/">AFS</ulink>,
 <!--  It seems dead for decades, nowhere to download source code
       <ulink url="https://www.fwtk.org/">FWTK</ulink>, and
 -->
-      <ulink url="&sourceforge-dl;/opie/">Opie</ulink>
+      <ulink url="https://github.com/linux-audit/audit-userspace">libaudit</ulink>,
+      <ulink url="&sourceforge-dl;/opie/">Opie</ulink>, and
+      <ulink url="https://sssd.io/">Sssd</ulink>
     </para>
 
@@ -101 +103 @@
             --libexecdir=/usr/lib      \
             --with-secure-path         \
-            --with-all-insults         \
             --with-env-editor          \
             --docdir=/usr/share/doc/sudo-&sudo-version; \
@@ -108 +109 @@
 
     <para>
-      To test the results, issue: <command>env LC_ALL=C make check 2&gt;&amp;1
-      | tee make-check.log</command>. Check the results with <command>grep
-      failed make-check.log</command>.
+      To test the results, issue:
+      <!-- line breaks in command tags confuse jhalfs -->
+      <command>env LC_ALL=C make check |&amp; tee make-check.log</command>.
+      Check the results with <command>grep failed make-check.log</command>.
     </para>
 
@@ -119 +121 @@
 <!-- for a DESTDIR install as normal user, use
     "make install INSTALL_OWNER= DESTDIR=<destdir>"-->
-<screen role="root"><userinput>make install &amp;&amp;
-ln -sfv libsudo_util.so.0.0.0 /usr/lib/sudo/libsudo_util.so.0</userinput></screen>
+<screen role="root"><userinput>make install</userinput></screen>
 
   </sect2>
@@ -142 +143 @@
 
     <para>
-      <parameter>--with-all-insults</parameter>: This switch includes all the
-      <application>sudo</application> insult sets.
-    </para>
-
-    <para>
       <parameter>--with-env-editor</parameter>: This switch enables use of the
       environment variable EDITOR for <command>visudo</command>.
@@ -161 +157 @@
       <application>Linux-PAM</application> is installed on the system.
     </para>
-<!-- See the developer note above before the configure command
-    <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
-      href="../../xincludes/static-libraries.xml"/>-->
+
+    <para>
+      <option>--with-all-insults</option>: This switch includes all the
+      sudo insult sets. Insults are printed if the user types a bad
+      password, and if enabled in <filename>/etc/sudoers</filename>. Use
+      <option>--with-insults</option> to have them enabled by default.
+      Various sets of insults can be selected with some other switches.
+    </para>
 
     <note>
@@ -172 +173 @@
       </para>
     </note>
-
+    <!-- Seems to be fixed
     <para>
       <command>ln -sfv libsudo_util...</command>: Works around a bug in the
@@ -178 +179 @@
       version (if there is one) instead of the new one.
     </para>
-
+    -->
   </sect2>
 
@@ -302 +303 @@
           libraries. Leaving them now, and updating the list, but I think
           they should not be listed. -->
-          audit_json.so, group_file.so, libsudo_util.so, sample_approval.so,
-          sudoers.so, sudo_noexec.so, and system_group.so
+          audit_json.so, group_file.so, libsudo_util.so,
+          sudoers.so, sudo_intercept.so, sudo_noexec.so, and system_group.so
         </seg>
         <seg>