Blame SPECS/sudo.spec

e33993
Summary: Allows restricted root access for specified users
e33993
Name: sudo
e33993
Version: 1.8.23
e33993
Release: 7%{?dist}
e33993
License: ISC
e33993
Group: Applications/System
e33993
URL: http://www.courtesan.com/sudo/
e33993
Source0: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
e33993
Source1: sudoers
e33993
Source2: sudo-ldap.conf
e33993
Source3: sudo.conf
e33993
Requires: /etc/pam.d/system-auth
e33993
Requires: /usr/bin/vi
e33993
e33993
BuildRequires: /usr/sbin/sendmail
e33993
BuildRequires: autoconf
e33993
BuildRequires: automake
e33993
BuildRequires: bison
e33993
BuildRequires: flex
e33993
BuildRequires: gettext
e33993
BuildRequires: groff
e33993
BuildRequires: libtool
e33993
BuildRequires: audit-libs-devel
e33993
BuildRequires: libcap-devel
e33993
BuildRequires: libgcrypt-devel
e33993
BuildRequires: libgcrypt-devel
e33993
BuildRequires: libselinux-devel
e33993
BuildRequires: openldap-devel
e33993
BuildRequires: pam-devel
e33993
BuildRequires: zlib-devel
e33993
e33993
# don't strip
e33993
Patch1: sudo-1.6.7p5-strip.patch
e33993
# configure.in fix
e33993
Patch2: sudo-1.7.2p1-envdebug.patch
e33993
# 881258 - rpmdiff: added missing sudo-ldap.conf manpage
e33993
Patch3: sudo-1.8.23-sudoldapconfman.patch
e33993
# 1247591 - Sudo taking a long time when user information is stored externally.
e33993
Patch4: sudo-1.8.23-legacy-group-processing.patch
e33993
# 1135539 - sudo with ldap doesn't work with 'user id' in sudoUser option
e33993
Patch5: sudo-1.8.23-ldapsearchuidfix.patch
e33993
# 1312486 - RHEL7 sudo logs username "root" instead of realuser in /var/log/secure
e33993
Patch6: sudo-1.8.6p7-logsudouser.patch
e33993
# 840980 - sudo creates a new parent process
e33993
# Adds cmnd_no_wait Defaults option
e33993
Patch7: sudo-1.8.23-nowaitopt.patch
e33993
# 1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
e33993
#  This is fix of a regression in the referenced feature request. It was fixed
e33993
#  in newer versions of sudo and we backport it to prevent future regression
e33993
#  bz in RHEL. The feature itself was delivered via the rebase to 1.8.23.
e33993
Patch8: sudo-1.8.23-Ignore-PAM_NEW_AUTHTOK_REQD-and-PAM_AUTHTOK_EXPIRED.patch
e33993
# 1547974 - (sudo-rhel-7.6-rebase) Rebase sudo to latest stable upstream version
e33993
Patch9: sudo-1.8.23-fix-double-quote-parsing-for-Defaults-values.patch
e33993
e33993
# 1647678 - sudo access denied with pam_access and pts terminal configurations
e33993
# 1672876 - Backporting sudo bug with expired passwords - this is included in in this patch
e33993
Patch10: sudo-1.8.23-pam_access-and-terminals.patch
e33993
e33993
# 1665285 - Problem with sudo-1.8.23 and 'who am i'
e33993
Patch11: sudo-1.8.23-who-am-i.patch
e33993
e33993
# 1738841 - Crash in do_syslog() while doing sudoedit
e33993
Patch12: sudo-1.8.23-fix_empty_username_in_do_syslog.patch
e33993
e33993
%description
e33993
Sudo (superuser do) allows a system administrator to give certain
e33993
users (or groups of users) the ability to run some (or all) commands
e33993
as root while logging all commands and arguments. Sudo operates on a
e33993
per-command basis.  It is not a replacement for the shell.  Features
e33993
include: the ability to restrict what commands a user may run on a
e33993
per-host basis, copious logging of each command (providing a clear
e33993
audit trail of who did what), a configurable timeout of the sudo
e33993
command, and the ability to use the same configuration file (sudoers)
e33993
on many different machines.
e33993
e33993
%package        devel
e33993
Summary:        Development files for %{name}
e33993
Group:          Development/Libraries
e33993
Requires:       %{name} = %{version}-%{release}
e33993
e33993
%description    devel
e33993
The %{name}-devel package contains header files developing sudo
e33993
plugins that use %{name}.
e33993
e33993
%prep
e33993
%setup -q
e33993
e33993
%patch1 -p1 -b .strip
e33993
%patch2 -p1 -b .envdebug
e33993
%patch3 -p1 -b .sudoldapconfman
e33993
%patch4 -p1 -b .legacy-group-processing
e33993
%patch5 -p1 -b .ldapsearchuidfix
e33993
%patch6 -p1 -b .logsudouser
e33993
%patch7 -p1 -b .nowaitopt
e33993
%patch8 -p1 -b .pam-mgmt-ignore-errors
e33993
%patch9 -p1 -b .defaults-double-quote-fix
e33993
e33993
%patch10 -p1 -b .pam_access-and-terminals
e33993
e33993
%patch11 -p1 -b .who-am-i
e33993
%patch12 -p1 -b .do_syslog-username
e33993
e33993
%build
e33993
autoreconf -I m4 -fv --install
e33993
e33993
%ifarch s390 s390x sparc64
e33993
F_PIE=-fPIE
e33993
%else
e33993
F_PIE=-fpie
e33993
%endif
e33993
e33993
export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now" SHLIB_MODE=755
e33993
e33993
%configure \
e33993
        --prefix=%{_prefix} \
e33993
        --sbindir=%{_sbindir} \
e33993
        --libdir=%{_libdir} \
e33993
        --docdir=%{_datadir}/doc/%{name}-%{version} \
e33993
        --with-logging=syslog \
e33993
        --with-logfac=authpriv \
e33993
        --with-pam \
e33993
        --with-pam-login \
e33993
        --with-editor=/usr/bin/vi \
e33993
        --with-env-editor \
e33993
        --enable-gcrypt \
e33993
        --with-ignore-dot \
e33993
        --with-tty-tickets \
e33993
        --with-ldap \
e33993
        --with-ldap-conf-file="%{_sysconfdir}/sudo-ldap.conf" \
e33993
        --with-selinux \
e33993
        --with-passprompt="[sudo] password for %p: " \
e33993
        --with-linux-audit \
e33993
        --with-sssd
e33993
e33993
make
e33993
e33993
%check
e33993
make check
e33993
e33993
%install
e33993
rm -rf %{buildroot}
e33993
e33993
# Update README.LDAP (#736653)
e33993
sed -i 's|/etc/ldap\.conf|%{_sysconfdir}/sudo-ldap.conf|g' README.LDAP
e33993
e33993
make install DESTDIR="%{buildroot}" install_uid=`id -u` install_gid=`id -g` sudoers_uid=`id -u` sudoers_gid=`id -g`
e33993
e33993
chmod 755 %{buildroot}%{_bindir}/* %{buildroot}%{_sbindir}/*
e33993
install -p -d -m 700 %{buildroot}%{_localstatedir}/db/sudo
e33993
install -p -d -m 700 %{buildroot}%{_localstatedir}/db/sudo/lectured
e33993
install -p -d -m 750 %{buildroot}%{_sysconfdir}/sudoers.d
e33993
install -p -c -m 0440 %{SOURCE1} %{buildroot}%{_sysconfdir}/sudoers
e33993
install -p -c -m 0640 %{SOURCE3} %{buildroot}%{_sysconfdir}/sudo.conf
e33993
install -p -c -m 0640 %{SOURCE2} %{buildroot}%{_sysconfdir}/sudo-ldap.conf
e33993
e33993
# Remove upstream sudoers file
e33993
rm -f %{buildroot}%{_sysconfdir}/sudoers.dist
e33993
e33993
# Remove all .la files
e33993
find %{buildroot} -name '*.la' -exec rm -f {} ';'
e33993
e33993
%find_lang sudo
e33993
%find_lang sudoers
e33993
e33993
cat sudo.lang sudoers.lang > sudo_all.lang
e33993
rm sudo.lang sudoers.lang
e33993
e33993
mkdir -p %{buildroot}%{_sysconfdir}/pam.d
e33993
cat > %{buildroot}%{_sysconfdir}/pam.d/sudo << EOF
e33993
#%%PAM-1.0
e33993
auth       include      system-auth
e33993
account    include      system-auth
e33993
password   include      system-auth
e33993
session    optional     pam_keyinit.so revoke
e33993
session    include      system-auth
e33993
EOF
e33993
e33993
cat > %{buildroot}%{_sysconfdir}/pam.d/sudo-i << EOF
e33993
#%%PAM-1.0
e33993
auth       include      sudo
e33993
account    include      sudo
e33993
password   include      sudo
e33993
session    optional     pam_keyinit.so force revoke
e33993
session    include      sudo
e33993
EOF
e33993
e33993
%clean
e33993
rm -rf %{buildroot}
e33993
e33993
%files -f sudo_all.lang
e33993
%defattr(-,root,root)
e33993
%attr(0440,root,root) %config(noreplace) %{_sysconfdir}/sudoers
e33993
%attr(0640,root,root) %config(noreplace) %{_sysconfdir}/sudo.conf
e33993
%attr(0640,root,root) %config(noreplace) %{_sysconfdir}/sudo-ldap.conf
e33993
%attr(0750,root,root) %dir %{_sysconfdir}/sudoers.d/
e33993
%config(noreplace) %{_sysconfdir}/pam.d/sudo
e33993
%config(noreplace) %{_sysconfdir}/pam.d/sudo-i
e33993
%attr(0644,root,root) %{_tmpfilesdir}/sudo.conf
e33993
%dir %{_localstatedir}/db/sudo
e33993
%dir %{_localstatedir}/db/sudo/lectured
e33993
%attr(4111,root,root) %{_bindir}/sudo
e33993
%{_bindir}/sudoedit
e33993
%{_bindir}/cvtsudoers
e33993
%attr(0111,root,root) %{_bindir}/sudoreplay
e33993
%attr(0755,root,root) %{_sbindir}/visudo
e33993
%attr(0755,root,root) %{_libexecdir}/sudo/sesh
e33993
%attr(0644,root,root) %{_libexecdir}/sudo/sudo_noexec.so
e33993
%attr(0644,root,root) %{_libexecdir}/sudo/sudoers.so
e33993
%attr(0644,root,root) %{_libexecdir}/sudo/group_file.so
e33993
%attr(0644,root,root) %{_libexecdir}/sudo/system_group.so
e33993
%attr(0644,root,root) %{_libexecdir}/sudo/libsudo_util.so.?.?.?
e33993
%{_libexecdir}/sudo/libsudo_util.so.?
e33993
%{_libexecdir}/sudo/libsudo_util.so
e33993
%{_mandir}/man5/sudoers.5*
e33993
%{_mandir}/man5/sudoers.ldap.5*
e33993
%{_mandir}/man5/sudo-ldap.conf.5*
e33993
%{_mandir}/man5/sudo.conf.5*
e33993
%{_mandir}/man8/sudo.8*
e33993
%{_mandir}/man8/sudoedit.8*
e33993
%{_mandir}/man8/sudoreplay.8*
e33993
%{_mandir}/man8/visudo.8*
e33993
%{_mandir}/man1/cvtsudoers.1.gz
e33993
%{_mandir}/man5/sudoers_timestamp.5.gz
e33993
%dir %{_docdir}/sudo-%{version}
e33993
%{_docdir}/sudo-%{version}/*
e33993
e33993
# Make sure permissions are ok even if we're updating
e33993
%post
e33993
/bin/chmod 0440 %{_sysconfdir}/sudoers || :
e33993
e33993
%files devel
e33993
%defattr(-,root,root,-)
e33993
%doc plugins/sample/sample_plugin.c
e33993
%{_includedir}/sudo_plugin.h
e33993
%{_mandir}/man8/sudo_plugin.8*
e33993
e33993
%changelog
e33993
e33993
* Thu Aug 22 2019 Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-7
e33993
- RHEL-7.8 erratum
e33993
  Resolves: rhbz#1738841 Crash in do_syslog() while doing sudoedit
e33993
e33993
* Mon Aug 19 2019 Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-6
e33993
- RHEL-7.8 erratum
e33993
  Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations
e33993
e33993
* Mon Aug 12 2019 Marek Tamaskovic <mtamasko@redhat.com> 1.8.23-5
e33993
- RHEL-7.8 erratum
e33993
  Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries
e33993
e33993
* Wed Feb 20 2019 Radovan Sroka <rsroka@redhat.com> 1.8.23-4
e33993
- RHEL-7.7 erratum
e33993
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
e33993
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'
e33993
e33993
* Mon Sep 24 2018 Daniel Kopecek <dkopecek@redhat.com> 1.8.23-3
e33993
- RHEL-7.6 erratum
e33993
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version
e33993
e33993
* Fri Sep 21 2018 Daniel Kopecek <dkopecek@redhat.com> 1.8.23-2
e33993
- RHEL-7.6 erratum
e33993
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
e33993
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
e33993
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
e33993
e33993
* Thu Jun 28 2018 Daniel Kopecek <dkopecek@redhat.com> 1.8.23-1
e33993
- RHEL-7.6 erratum
e33993
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version (1.8.23)
e33993
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
e33993
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
e33993
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
e33993
  Resolves: rhbz#1548380 - RFE: Create flag to filter to sudo -l output
e33993
  Resolves: rhbz#1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
e33993
  Resolves: rhbz#1596032 - Why does sudo package depend on vim-minimal?
e33993
e33993
* Thu Nov 30 2017 Radovan Sroka <rsroka@redhat.com> 1.8.19p2-13
e33993
- RHEL 7.5 erratum
e33993
- Fixed sudo -l checking results whether user should be authenticated
e33993
- Enabled LDAP filter patch
e33993
- Fixed double free in sssd
e33993
e33993
  Resolves: rhbz#1505409
e33993
  Resolves: rhbz#1511850
e33993
  Resolves: rhbz#1518104
e33993
e33993
* Mon Oct 02 2017 Radovan Sroka <rsroka@redhat.com> 1.8.19p2-12
e33993
- RHEL 7.5 erratum
e33993
- Fixed exit codes for `sudo -l -U <user>`
e33993
- Fixed truncated output when log_output is enabled
e33993
- Updated use_pty and IO logging manpage
e33993
e33993
  Resolves: rhbz#1458696
e33993
  Resolves: rhbz#1454571
e33993
  Resolves: rhbz#1490358
e33993
e33993
- Fixed second pass LDAP filter expression in the sudoers ldap backend
e33993
  - inclomplete patch for rhbz#1485397
e33993
e33993
* Mon Aug 14 2017 Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-11
e33993
- Moved libsudo_util.so from the -devel sub-package to main package
e33993
  Resolves: rhbz#1481225
e33993
e33993
* Wed Jun 07 2017 Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-10
e33993
- RHEL 7.4 erratum
e33993
- Fix CVE-2017-1000368
e33993
  Resolves: rhbz#1459411
e33993
e33993
* Tue Jun 06 2017 Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-9
e33993
- RHEL 7.4 erratum
e33993
- removed patch for output truncation (1454571) which introduced regression
e33993
  Resolves: rhbz#1360687
e33993
e33993
* Thu May 25 2017 Jakub Jelen <jjelen@redhat.com> - 1.8.19p2-8
e33993
- RHEL 7.4 erratum
e33993
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
e33993
  Resolves: rhbz#1455402
e33993
e33993
* Tue May 23 2017 Daniel Kopecek <dkopecek@redhat.com> - 1.8.19p2-7
e33993
- RHEL 7.4 erratum
e33993
- added patch to fix output truncation (in some cases) when log_output
e33993
  option is enabled
e33993
  Resolves: rhbz#1454571
e33993
e33993
* Thu May 04 2017 Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-6
e33993
- RHEL 7.4 erratum
e33993
- added patch that fixes lecture option used as bolean
e33993
  Resolves rhbz#1360687
e33993
e33993
* Tue Apr 25 2017 Radovan Sroka <rsroka@redhat.com> - 1.8.19p2-5
e33993
- RHEL 7.4 erratum
e33993
- added doc patch about sudo lookup issue
e33993
  Resolves: rhbz#1293306
e33993
- added test suite patch
e33993
  Resolves: rhbz#1360687
e33993
- fixed use after free fqdn problem
e33993
  Resolves: rhbz#1360687
e33993
e33993
* Tue Mar 21 2017 Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-4
e33993
- RHEL 7.4 erratum
e33993
- fixed cmnd_no_wait patch
e33993
- backported iolog_flush sudoers default
e33993
  Resolves: rhbz#1369856
e33993
  Resolves: rhbz#1425853
e33993
e33993
* Wed Mar 08 2017 Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-3
e33993
- RHEL 7.4 eratum
e33993
- Fixes semicolon typo in digest backport patch from the previous build
e33993
  Resolves: rhbz#1360687
e33993
e33993
* Wed Mar 08 2017 Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-2
e33993
- RHEL 7.4 erratum
e33993
- Fixes coverity scan issues created by our patches:
e33993
  - fixed resource leaks and a compiler warning in digest backport patch
e33993
  - removed needless code from cmnd_no_wait patch causing clang warning
e33993
  - format of the last changelog message causes problems to rhpkg push,
e33993
    so don't use that as a commit message
e33993
  Resolves: rhbz#1360687
e33993
e33993
* Wed Mar 01 2017 Tomas Sykora <tosykora@redhat.com> - 1.8.19p2-1
e33993
- RHEL 7.4 erratum
e33993
  - Resolves: rhbz#1360687 - rebase to 1.8.19p2
e33993
  - Resolves: rhbz#1123526 - performance improvement
e33993
  - Resolves: rhbz#1308789 - add MAIL and NOMAIL tags
e33993
  - Resolves: rhbz#1348504 - sudo now parses sudoers with sudoers locale
e33993
  - Resolves: rhbz#1374417 - "sudo -l command" indicated that the command
e33993
    was runnable even if denied by sudoers when using LDAP or SSSD backend.
e33993
  - Resolves: rhbz#1387303 - add ignore_iolog_errors option
e33993
  - Resolves: rhbz#1389360 - wrong log file group ownership
e33993
  - Resolves: rhbz#1389735 - add iolog_group, iolog_mode, iolog_user options
e33993
  - Resolves: rhbz#1397169 - maxseq and ignore_iolog_errors options
e33993
  - Resolves: rhbz#1403051 - add support for querying netgroups directly via LDAP
e33993
  - Resolves: rhbz#1410086 - race condition while creating /var/log/sudo-io dir
e33993
  - Resolves: rhbz#1413160 - add ignore_unknown_defaults flag
e33993
  - Resolves: rhbz#1254772 - ability to export sudoers in json format
e33993
  - Resolves: rhbz#1417187 - wrong reference to config file in systax error message
e33993
  - Resolves: rhbz#1424575 - visudo was not printing severity of error/warning message
e33993
e33993
* Wed Nov 23 2016 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-21
e33993
- Update noexec syscall blacklist
e33993
- Fixes CVE-2016-7032 and CVE-2016-7076
e33993
  Resolves: rhbz#1391940
e33993
e33993
* Tue Jul 19 2016 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-20
e33993
- RHEL 7.3 erratum
e33993
  - fixed visudo's -q flag
e33993
  Resolves: rhbz#1350828
e33993
e33993
* Tue Jun 14 2016 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-19
e33993
- RHEL 7.3 erratum
e33993
  - removed INPUTRC from env_keep to prevent a potential info leak
e33993
  Resolves: rhbz#1340700
e33993
e33993
* Wed May 11 2016 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-18
e33993
- RHEL 7.3 erratum
e33993
  - removed requiretty flag from the default sudoers policy
e33993
  - backported pam_service and pam_login_service defaults options
e33993
  - implemented netgroup_tuple defaults option for changing netgroup
e33993
    processing semantics
e33993
  - fixed user matching logic in the LDAP nss backend
e33993
  - don't allow visudo to accept an invalid sudoers file
e33993
  - fixed a bug causing that non-root users can list privileges of
e33993
    other users
e33993
  - modified digest check documentation to mention the raciness of
e33993
    the checking mechanism
e33993
  Resolves: rhbz#1196451
e33993
  Resolves: rhbz#1247230
e33993
  Resolves: rhbz#1334331
e33993
  Resolves: rhbz#1334360
e33993
  Resolves: rhbz#1261998
e33993
  Resolves: rhbz#1313364
e33993
  Resolves: rhbz#1312486
e33993
  Resolves: rhbz#1268958
e33993
  Resolves: rhbz#1335039
e33993
  Resolves: rhbz#1335042
e33993
  Resolves: rhbz#1335045
e33993
  Resolves: rhbz#1273243
e33993
  Resolves: rhbz#1299883
e33993
e33993
* Mon Feb 15 2016 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-17
e33993
- fixed bug in closefrom_override defaults option
e33993
  Resolves: rhbz#1297062
e33993
e33993
* Tue Sep  1 2015 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-16
e33993
- RHEL 7.2 erratum
e33993
  - show the digest type in warning messages
e33993
  Resolves: rhbz#1183818
e33993
e33993
* Tue Sep  1 2015 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-15
e33993
- RHEL 7.2 erratum
e33993
  - fixed compilation of testing binaries during make check
e33993
  - added legacy group processing patch
e33993
  - replaced buggy base64 decoder with a public domain implementation
e33993
  Resolves: rhbz#1254621
e33993
  Resolves: rhbz#1183818
e33993
  Resolves: rhbz#1247591
e33993
e33993
* Tue Jul  7 2015 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-14
e33993
- RHEL 7.2 erratum
e33993
  - backported command digest specification
e33993
  - fixed CVE-2014-9680 sudo: unsafe handling of TZ environment variable
e33993
  - fixed typos in sudoers.ldap man page
e33993
  - fixed handling of double-quoted sudoOption values in ldap, sssd sources
e33993
  - fixed numeric uid specification support in ldap source
e33993
  - fixed authentication flag logic in ldap source
e33993
  - added the systemctl command to the SERVICES alias in the default sudoers file
e33993
  Resolves: rhbz#1144446
e33993
  Resolves: rhbz#1235570
e33993
  Resolves: rhbz#1138259
e33993
  Resolves: rhbz#1183818
e33993
  Resolves: rhbz#1233607
e33993
  Resolves: rhbz#1144419
e33993
  Resolves: rhbz#1135539
e33993
  Resolves: rhbz#1215400
e33993
e33993
* Tue Sep 30 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-13
e33993
- RHEL 7.1 erratum
e33993
  - fixed issues found by covscan/clang-analyzer
e33993
  Resolves: rhbz#1147616
e33993
e33993
* Mon Sep 29 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-12
e33993
- RHEL 7.1 erratum
e33993
  - don't retry authentication when ctrl-c pressed
e33993
  - fix double-quote processing in Defaults options
e33993
  - handle the "(none)" hostname correctly
e33993
  - SSSD: fix sudoUser netgroup specification filtering
e33993
  - SSSD: list correct user when -U <user> -l specified
e33993
  - SSSD: show rule names on long listing (-ll)
e33993
  - fix infinite loop when duplicate entries are specified on the
e33993
    sudoers nsswitch.conf line
e33993
  Resolves: rhbz#1084488
e33993
  Resolves: rhbz#1088464
e33993
  Resolves: rhbz#1088825
e33993
  Resolves: rhbz#1092499
e33993
  Resolves: rhbz#1093099
e33993
  Resolves: rhbz#1096813
e33993
  Resolves: rhbz#1147497
e33993
  Resolves: rhbz#1147557
e33993
e33993
* Wed Feb 26 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-11
e33993
- Fixed incorrect login shell path construction in sesh
e33993
  (thanks fkrska@redhat.com for the patch)
e33993
  Resolves: rhbz#1065418
e33993
e33993
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1.8.6p7-10
e33993
- Mass rebuild 2014-01-24
e33993
e33993
* Wed Jan 15 2014 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-9
e33993
- allow the wheel group to use sudo
e33993
  Resolves: rhbz#994623
e33993
e33993
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1.8.6p7-8
e33993
- Mass rebuild 2013-12-27
e33993
e33993
* Fri Nov 08 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-7
e33993
- dropped wrong patch and fixed patch comments
e33993
  Resolves: rhbz#1000389
e33993
e33993
* Thu Nov 07 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-6
e33993
- fixed alias cycle detection code
e33993
- added debug messages for tracing of netgroup matching
e33993
- fixed aborting on realloc when displaying allowed commands
e33993
- sssd: filter netgroups in the sudoUser attribute
e33993
- parse uids/gids more strictly
e33993
- added debug messages to trace netgroup matching
e33993
  Resolves: rhbz#1026904
e33993
  Resolves: rhbz#1026890
e33993
  Resolves: rhbz#1007014
e33993
  Resolves: rhbz#1026894
e33993
  Resolves: rhbz#1000389
e33993
  Resolves: rhbz#994566
e33993
e33993
* Mon Aug 05 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-5
e33993
- added standalone manpage for sudo.conf and sudo-ldap.conf
e33993
- spec file cleanup
e33993
  Resolves: rhbz#881258
e33993
e33993
* Mon Jul 29 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-4
e33993
- added RHEL 6 patches
e33993
e33993
* Wed Jul 24 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-3
e33993
- synced sudoers, configure options & configuration files with
e33993
  expected RHEL configuration
e33993
  Resolves: rhbz#969373
e33993
  Resolves: rhbz#971009
e33993
  Resolves: rhbz#965124
e33993
  Resolves: rhbz#971013
e33993
  Resolves: rhbz#839705
e33993
e33993
* Thu Apr 11 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-2
e33993
- depend on /usr/sbin/sendmail instead of the sendmail package
e33993
  Resolves: rhbz#927842
e33993
e33993
* Thu Feb 28 2013 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p7-1
e33993
- update to 1.8.6p7
e33993
- fixes CVE-2013-1775 and CVE-2013-1776
e33993
- fixed several packaging issues (thanks to ville.skytta@iki.fi)
e33993
  - build with system zlib.
e33993
  - let rpmbuild strip libexecdir/*.so.
e33993
  - own the %%{_docdir}/sudo-* dir.
e33993
  - fix some rpmlint warnings (spaces vs tabs, unescaped macros).
e33993
  - fix bogus %%changelog dates.
e33993
e33993
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.6p3-3
e33993
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
e33993
e33993
* Mon Nov 12 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-2
e33993
- added upstream patch for a regression
e33993
- don't include arch specific files in the -devel subpackage
e33993
- ship only one sample plugin in the -devel subpackage
e33993
e33993
* Tue Sep 25 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-1
e33993
- update to 1.8.6p3
e33993
- drop -pipelist patch (fixed in upstream)
e33993
e33993
* Thu Sep  6 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6-1
e33993
- update to 1.8.6
e33993
e33993
* Thu Jul 26 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-4
e33993
- added patches that fix & improve SSSD support (thanks to pbrezina@redhat.com)
e33993
- re-enabled SSSD support
e33993
- removed libsss_sudo dependency
e33993
e33993
* Tue Jul 24 2012 Bill Nottingham <notting@redhat.com> - 1.8.5-3
e33993
- flip sudoers2ldif executable bit after make install, not in setup
e33993
e33993
* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.5-2
e33993
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
e33993
e33993
* Thu May 17 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.5-1
e33993
- update to 1.8.5
e33993
- fixed CVE-2012-2337
e33993
- temporarily disabled SSSD support
e33993
e33993
* Wed Feb 29 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-6
e33993
- fixed problems with undefined symbols (rhbz#798517)
e33993
e33993
* Wed Feb 22 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-5
e33993
- SSSD patch update
e33993
e33993
* Tue Feb  7 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-4
e33993
- added SSSD support
e33993
e33993
* Thu Jan 26 2012 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-3
e33993
- added patch for CVE-2012-0809
e33993
e33993
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.8.3p1-2
e33993
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
e33993
e33993
* Thu Nov 10 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.8.3p1-1
e33993
- update to 1.8.3p1
e33993
- disable output word wrapping if the output is piped
e33993
e33993
* Wed Sep  7 2011 Peter Robinson <pbrobinson@fedoraproject.org> - 1.8.1p2-2
e33993
- Remove execute bit from sample script in docs so we don't pull in perl
e33993
e33993
* Tue Jul 12 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.8.1p2-1
e33993
- rebase to 1.8.1p2
e33993
- removed .sudoi patch
e33993
- fixed typo: RELPRO -> RELRO
e33993
- added -devel subpackage for the sudo_plugin.h header file
e33993
- use default ldap configuration files again
e33993
e33993
* Fri Jun  3 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-4
e33993
- build with RELRO
e33993
e33993
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.4p5-3
e33993
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
e33993
e33993
* Mon Jan 17 2011 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p5-2
e33993
- rebase to 1.7.4p5
e33993
- fixed sudo-1.7.4p4-getgrouplist.patch
e33993
- fixes CVE-2011-0008, CVE-2011-0010
e33993
e33993
* Tue Nov 30 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-5
e33993
- anybody in the wheel group has now root access (using password) (rhbz#656873)
e33993
- sync configuration paths with the nss_ldap package (rhbz#652687)
e33993
e33993
* Wed Sep 29 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-4
e33993
- added upstream patch to fix rhbz#638345
e33993
e33993
* Mon Sep 20 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-3
e33993
- added patch for #635250
e33993
- /var/run/sudo -> /var/db/sudo in .spec
e33993
e33993
* Tue Sep  7 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-2
e33993
- sudo now uses /var/db/sudo for timestamps
e33993
e33993
* Tue Sep  7 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.4p4-1
e33993
- update to new upstream version
e33993
- new command available: sudoreplay
e33993
- use native audit support
e33993
- corrected license field value: BSD -> ISC
e33993
e33993
* Wed Jun  2 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-2
e33993
- added patch that fixes insufficient environment sanitization issue (#598154)
e33993
e33993
* Wed Apr 14 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p6-1
e33993
- update to new upstream version
e33993
- merged .audit and .libaudit patch
e33993
- added sudoers.ldap.5* to files
e33993
e33993
* Mon Mar  1 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p5-2
e33993
- update to new upstream version
e33993
e33993
* Tue Feb 16 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-5
e33993
- fixed no valid sudoers sources found (#558875)
e33993
e33993
* Wed Feb 10 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-4
e33993
- audit related Makefile.in and configure.in corrections
e33993
- added --with-audit configure option
e33993
- removed call to libtoolize
e33993
e33993
* Wed Feb 10 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-3
e33993
- fixed segfault when #include directive is used in cycles (#561336)
e33993
e33993
* Fri Jan  8 2010 Ville Skyttä <ville.skytta@iki.fi> - 1.7.2p2-2
e33993
- Add /etc/sudoers.d dir and use it in default config (#551470).
e33993
- Drop *.pod man page duplicates from docs.
e33993
e33993
* Thu Jan 07 2010 Daniel Kopecek <dkopecek@redhat.com> - 1.7.2p2-1
e33993
- new upstream version 1.7.2p2-1
e33993
- commented out unused aliases in sudoers to make visudo happy (#550239)
e33993
e33993
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.7.1-7
e33993
- rebuilt with new audit
e33993
e33993
* Thu Aug 20 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-6
e33993
- moved secure_path from compile-time option to sudoers file (#517428)
e33993
e33993
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.1-5
e33993
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
e33993
e33993
* Thu Jul 09 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-4
e33993
- moved the closefrom() call before audit_help_open() (sudo-1.7.1-auditfix.patch)
e33993
- epoch number sync
e33993
e33993
* Mon Jun 22 2009 Daniel Kopecek <dkopecek@redhat.com> 1.7.1-1
e33993
- updated sudo to version 1.7.1
e33993
- fixed small bug in configure.in (sudo-1.7.1-conffix.patch)
e33993
e33993
* Tue Feb 24 2009 Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-6
e33993
- fixed building with new libtool
e33993
- fix for incorrect handling of groups in Runas_User
e33993
- added /usr/local/sbin to secure-path
e33993
e33993
* Tue Jan 13 2009 Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-3
e33993
- build with sendmail installed
e33993
- Added /usr/local/bin to secure-path
e33993
e33993
* Tue Sep 02 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-2
e33993
- adjust audit patch, do not scream when kernel is
e33993
  compiled without audit netlink support (#401201)
e33993
e33993
* Fri Jul 04 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
e33993
- upgrade
e33993
e33993
* Wed Jun 18 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-7
e33993
- build with newer autoconf-2.62 (#449614)
e33993
e33993
* Tue May 13 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-6
e33993
- compiled with secure path (#80215)
e33993
e33993
* Mon May 05 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-5
e33993
- fix path to updatedb in /etc/sudoers (#445103)
e33993
e33993
* Mon Mar 31 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-4
e33993
- include ldap files in rpm package (#439506)
e33993
e33993
* Thu Mar 13 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-3
e33993
- include [sudo] in password prompt (#437092)
e33993
e33993
* Tue Mar 04 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-2
e33993
- audit support improvement
e33993
e33993
* Thu Feb 21 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p13-1
e33993
- upgrade to the latest upstream release
e33993
e33993
* Wed Feb 06 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p12-1
e33993
- upgrade to the latest upstream release
e33993
- add selinux support
e33993
e33993
* Mon Feb 04 2008 Dennis Gilmore <dennis@ausil.us> 1.6.9p4-6
e33993
- sparc64 needs to be in the -fPIE list with s390
e33993
e33993
* Mon Jan 07 2008 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-5
e33993
- fix complains about audit_log_user_command(): Connection
e33993
  refused (#401201)
e33993
e33993
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.6.9p4-4
e33993
- Rebuild for deps
e33993
e33993
* Wed Dec 05 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.6.9p4-3
e33993
- Rebuild for openssl bump
e33993
e33993
* Thu Aug 30 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-2
e33993
- fix autotools stuff and add audit support
e33993
e33993
* Mon Aug 20 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.9p4-1
e33993
- upgrade to upstream release
e33993
e33993
* Thu Apr 12 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-14
e33993
- also use getgrouplist() to determine group membership (#235915)
e33993
e33993
* Mon Feb 26 2007 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-13
e33993
- fix some spec file issues
e33993
e33993
* Thu Dec 14 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-12
e33993
- fix rpmlint issue
e33993
e33993
* Thu Oct 26 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
e33993
- fix typo in sudoers file (#212308)
e33993
e33993
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-10
e33993
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
e33993
e33993
* Thu Sep 21 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-9
e33993
- fix sudoers file, X apps didn't work (#206320)
e33993
e33993
* Tue Aug 08 2006 Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-8
e33993
- use Red Hat specific default sudoers file
e33993
e33993
* Sun Jul 16 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-7
e33993
- fix #198755 - make login processes (sudo -i) initialise session keyring
e33993
  (thanks for PAM config files to David Howells)
e33993
- add IPv6 support (patch by Milan Zazrivec)
e33993
e33993
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-6.1
e33993
- rebuild
e33993
e33993
* Mon May 29 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-6
e33993
- fix #190062 - "ssh localhost sudo su" will show the password in clear
e33993
e33993
* Tue May 23 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-5
e33993
- add LDAP support (#170848)
e33993
e33993
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-4.1
e33993
- bump again for double-long bug on ppc(64)
e33993
e33993
* Wed Feb  8 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-4
e33993
- reset env. by default
e33993
e33993
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-3.1
e33993
- rebuilt for new gcc4.1 snapshot and glibc changes
e33993
e33993
* Mon Jan 23 2006 Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
e33993
- Remove selinux patch.  It has been decided that the SELinux patch for sudo is
e33993
- no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
e33993
- We require the person using sudo to execute newrole before using sudo.
e33993
e33993
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
e33993
- rebuilt
e33993
e33993
* Fri Nov 25 2005 Karel Zak <kzak@redhat.com> 1.6.8p12-1
e33993
- new upstream version 1.6.8p12
e33993
e33993
* Tue Nov  8 2005 Karel Zak <kzak@redhat.com> 1.6.8p11-1
e33993
- new upstream version 1.6.8p11
e33993
e33993
* Thu Oct 13 2005 Tomas Mraz <tmraz@redhat.com> 1.6.8p9-6
e33993
- use include instead of pam_stack in pam config
e33993
e33993
* Tue Oct 11 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-5
e33993
- enable interfaces in selinux patch
e33993
- merge sudo-1.6.8p8-sesh-stopsig.patch to selinux patch
e33993
e33993
* Mon Sep 19 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-4
e33993
- fix debuginfo
e33993
e33993
* Mon Sep 19 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-3
e33993
- fix #162623 - sesh hangs when child suspends
e33993
e33993
* Mon Aug 1 2005 Dan Walsh <dwalsh@redhat.com> 1.6.8p9-2
e33993
- Add back in interfaces call, SELinux has been fixed to work around
e33993
e33993
* Tue Jun 21 2005 Karel Zak <kzak@redhat.com> 1.6.8p9-1
e33993
- new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)
e33993
e33993
* Tue May 24 2005 Karel Zak <kzak@redhat.com> 1.6.8p8-2
e33993
- fix #154511 - sudo does not use limits.conf
e33993
e33993
* Mon Apr  4 2005 Thomas Woerner <twoerner@redhat.com> 1.6.8p8-1
e33993
- new version 1.6.8p8: new sudoedit and sudo_noexec
e33993
e33993
* Wed Feb  9 2005 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-31
e33993
- rebuild
e33993
e33993
* Mon Oct  4 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-30.1
e33993
- added missing BuildRequires for libselinux-devel (#132883)
e33993
e33993
* Wed Sep 29 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-30
e33993
- Fix missing param error in sesh
e33993
e33993
* Mon Sep 27 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-29
e33993
- Remove full patch check from sesh
e33993
e33993
* Thu Jul 8 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-28
e33993
- Fix selinux patch to switch to root user
e33993
e33993
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
e33993
- rebuilt
e33993
e33993
* Tue Apr 13 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-26
e33993
- Eliminate tty handling from selinux
e33993
e33993
* Thu Apr  1 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-25
e33993
- fixed spec file: sesh in file section with selinux flag (#119682)
e33993
e33993
* Tue Mar 30 2004 Colin Walters <walters@redhat.com> 1.6.7p5-24
e33993
- Enhance sesh.c to fork/exec children itself, to avoid
e33993
  having sudo reap all domains.
e33993
- Only reinstall default signal handlers immediately before
e33993
  exec of child with SELinux patch
e33993
e33993
* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-23
e33993
- change to default to sysadm_r
e33993
- Fix tty handling
e33993
e33993
* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-22
e33993
- Add /bin/sesh to run selinux code.
e33993
- replace /bin/bash -c with /bin/sesh
e33993
e33993
* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-21
e33993
- Hard code to use "/bin/bash -c" for selinux
e33993
e33993
* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-20
e33993
- Eliminate closing and reopening of terminals, to match su.
e33993
e33993
* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-19
e33993
- SELinux fixes to make transitions work properly
e33993
e33993
* Fri Mar  5 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-18
e33993
- pied sudo
e33993
e33993
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
e33993
- rebuilt
e33993
e33993
* Tue Jan 27 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-16
e33993
- Eliminate interfaces call, since this requires big SELinux privs
e33993
- and it seems to be useless.
e33993
e33993
* Tue Jan 27 2004 Karsten Hopp <karsten@redhat.de> 1.6.7p5-15
e33993
- visudo requires vim-minimal or setting EDITOR to something useful (#68605)
e33993
e33993
* Mon Jan 26 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-14
e33993
- Fix is_selinux_enabled call
e33993
e33993
* Tue Jan 13 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-13
e33993
- Clean up patch on failure
e33993
e33993
* Tue Jan 6 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-12
e33993
- Remove sudo.te for now.
e33993
e33993
* Fri Jan 2 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-11
e33993
- Fix usage message
e33993
e33993
* Mon Dec 22 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-10
e33993
- Clean up sudo.te to not blow up if pam.te not present
e33993
e33993
* Thu Dec 18 2003 Thomas Woerner <twoerner@redhat.com>
e33993
- added missing BuildRequires for groff
e33993
e33993
* Tue Dec 16 2003 Jeremy Katz <katzj@redhat.com> 1.6.7p5-9
e33993
- remove left-over debugging code
e33993
e33993
* Tue Dec 16 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-8
e33993
- Fix terminal handling that caused Sudo to exit on non selinux machines.
e33993
e33993
* Mon Dec 15 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-7
e33993
- Remove sudo_var_run_t which is now pam_var_run_t
e33993
e33993
* Fri Dec 12 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-6
e33993
- Fix terminal handling and policy
e33993
e33993
* Thu Dec 11 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-5
e33993
- Fix policy
e33993
e33993
* Thu Nov 13 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-4.sel
e33993
- Turn on SELinux support
e33993
e33993
* Tue Jul 29 2003 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-3
e33993
- Add support for SELinux
e33993
e33993
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
e33993
- rebuilt
e33993
e33993
* Mon May 19 2003 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-1
e33993
e33993
* Wed Jan 22 2003 Tim Powers <timp@redhat.com>
e33993
- rebuilt
e33993
e33993
* Tue Nov 12 2002 Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
e33993
- remove absolute path names from the PAM configuration, ensuring that the
e33993
  right modules get used for whichever arch we're built for
e33993
- don't try to install the FAQ, which isn't there any more
e33993
e33993
* Thu Jun 27 2002 Bill Nottingham <notting@redhat.com> 1.6.6-1
e33993
- update to 1.6.6
e33993
e33993
* Fri Jun 21 2002 Tim Powers <timp@redhat.com>
e33993
- automated rebuild
e33993
e33993
* Thu May 23 2002 Tim Powers <timp@redhat.com>
e33993
- automated rebuild
e33993
e33993
* Thu Apr 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-2
e33993
- Fix bug #63768
e33993
e33993
* Thu Mar 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p2-1
e33993
- 1.6.5p2
e33993
e33993
* Fri Jan 18 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5p1-1
e33993
- 1.6.5p1
e33993
- Hope this "a new release per day" madness stops ;)
e33993
e33993
* Thu Jan 17 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.5-1
e33993
- 1.6.5
e33993
e33993
* Tue Jan 15 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4p1-1
e33993
- 1.6.4p1
e33993
e33993
* Mon Jan 14 2002 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-1
e33993
- Update to 1.6.4
e33993
e33993
* Mon Jul 23 2001 Bernhard Rosenkraenzer <bero@redhat.com> 1.6.3p7-2
e33993
- Add build requirements (#49706)
e33993
- s/Copyright/License/
e33993
- bzip2 source
e33993
e33993
* Sat Jun 16 2001 Than Ngo <than@redhat.com>
e33993
- update to 1.6.3p7
e33993
- use %%{_tmppath}
e33993
e33993
* Fri Feb 23 2001 Bernhard Rosenkraenzer <bero@redhat.com>
e33993
- 1.6.3p6, fixes buffer overrun
e33993
e33993
* Tue Oct 10 2000 Bernhard Rosenkraenzer <bero@redhat.com>
e33993
- 1.6.3p5
e33993
e33993
* Wed Jul 12 2000 Prospector <bugzilla@redhat.com>
e33993
- automatic rebuild
e33993
e33993
* Tue Jun 06 2000 Karsten Hopp <karsten@redhat.de>
e33993
- fixed owner of sudo and visudo
e33993
e33993
* Thu Jun  1 2000 Nalin Dahyabhai <nalin@redhat.com>
e33993
- modify PAM setup to use system-auth
e33993
- clean up buildrooting by using the makeinstall macro
e33993
e33993
* Tue Apr 11 2000 Bernhard Rosenkraenzer <bero@redhat.com>
e33993
- initial build in main distrib
e33993
- update to 1.6.3
e33993
- deal with compressed man pages
e33993
e33993
* Tue Dec 14 1999 Preston Brown <pbrown@redhat.com>
e33993
- updated to 1.6.1 for Powertools 6.2
e33993
- config files are now noreplace.
e33993
e33993
* Thu Jul 22 1999 Tim Powers <timp@redhat.com>
e33993
- updated to 1.5.9p2 for Powertools 6.1
e33993
e33993
* Wed May 12 1999 Bill Nottingham <notting@redhat.com>
e33993
- sudo is configured with pam. There's no pam.d file. Oops.
e33993
e33993
* Mon Apr 26 1999 Preston Brown <pbrown@redhat.com>
e33993
- upgraded to 1.59p1 for powertools 6.0
e33993
e33993
* Tue Oct 27 1998 Preston Brown <pbrown@redhat.com>
e33993
- fixed so it doesn't find /usr/bin/vi first, but instead /bin/vi (always installed)
e33993
e33993
* Thu Oct 08 1998 Michael Maher <mike@redhat.com>
e33993
- built package for 5.2
e33993
e33993
* Mon May 18 1998 Michael Maher <mike@redhat.com>
e33993
- updated SPEC file
e33993
e33993
* Thu Jan 29 1998 Otto Hammersmith <otto@redhat.com>
e33993
- updated to 1.5.4
e33993
e33993
* Tue Nov 18 1997 Otto Hammersmith <otto@redhat.com>
e33993
- built for glibc, no problems
e33993
e33993
* Fri Apr 25 1997 Michael Fulbright <msf@redhat.com>
e33993
- Fixed for 4.2 PowerTools
e33993
- Still need to be pamified
e33993
- Still need to move stmp file to /var/log
e33993
e33993
* Mon Feb 17 1997 Michael Fulbright <msf@redhat.com>
e33993
- First version for PowerCD.