buildroot/package/sudo, branch 2017.08

sudo: bump version to 1.8.20p2

2017-06-02T11:31:05+00:00

0001-fix-CVE-2017-1000367.patch already included in this release. Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

Merge branch 'next'

2017-06-01T20:28:14+00:00

Signed-off-by: Peter Korsgaard

sudo: add upstream security patch for CVE-2017-1000367

2017-05-31T10:30:49+00:00

CVE-2017-1000367 - Potential overwrite of arbitrary files on Linux On Linux systems, sudo parses the /proc/[pid]/stat file to determine the device number of the process's tty (field 7). The fields in the file are space-delimited, but it is possible for the command name (field 2) to include spaces, which sudo does not account for. A user with sudo privileges can cause sudo to use a device number of the user's choosing by creating a symbolic link from the sudo binary to a name that contains a space, followed by a number. If SELinux is enabled on the system and sudo was built with SELinux support, a user with sudo privileges may be able to to overwrite an arbitrary file. This can be escalated to full root access by rewriting a trusted file such as /etc/shadow or even /etc/sudoers. For more details, see: https://www.sudo.ws/alerts/linux_tty.html Signed-off-by: Peter Korsgaard

sudo: bump version to 1.8.20

2017-05-11T19:19:00+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

sudo: fix static linking with openldap having openssl support

2017-05-11T15:47:37+00:00

If we are building sudo statically and openldap was linked with openssl, then when we link sudo with openldap we need to specify the openssl libs, otherwise it will fail with "undefined reference" errors. Fixes: http://autobuild.buildroot.net/results/ebb/ebbb4c3138b5023a0c8bd938db1932a25ba5b6fb/ http://autobuild.buildroot.net/results/58e/58ee4fddea85f0c79b26582b04a573258e27eb47/ http://autobuild.buildroot.net/results/051/05151c4ef7f0b3702a6cd5e6df4888d826a37431/ http://autobuild.buildroot.net/results/b1d/b1dfae81985daee106700191fcb82387833c2e3f/ http://autobuild.buildroot.net/results/5b4/5b42e8505856156389d480d0da19f6982cf120d8/ http://autobuild.buildroot.net/results/30a/30a76190428f902f03bcf54ba9f1f4f4377c6fc9/ http://autobuild.buildroot.net/results/e8c/e8c6bdc314b9a8d5de303633a3abd7b7e44beb2e/ http://autobuild.buildroot.net/results/483/4830c69cc6a62080e1516f0d9009c2ba619c23c1/ Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

boot, package: use SPDX short identifier for BSD-3c

2017-04-01T13:26:57+00:00

We want to use SPDX identifier for license string as much as possible. SPDX short identifier for BSD-3c is BSD-3-Clause. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/BSD-3c/BSD-3-Clause/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

packages: improve license type lists

2017-02-20T21:16:01+00:00

Make license type lists more uniform: * put content license applies to in parenthesis; ex: "GPLv2+ (programs)" * use commas to separate types listed without conjuction; ex: "GPLv2, LGPLv2" No attempt was made to validate the claimed licenses. This is just a tweak to increase uniformity of the _LICENSE variables. Signed-off-by: Danomi Manchego Reviewed-by: Thomas Petazzoni [Thomas: replace semi-colons by commas in LIBURCU_LICENSE.] Signed-off-by: Thomas Petazzoni

sudo: Add ldap support for sudoers rules

2017-02-06T18:40:40+00:00

Automatically build sudo with ldap support when openldap is enabled. When sudo is built with ldap, /etc/sudoers is only read in for defaults, all rules need to be provided via ldap which is configured by the user in /etc/ldap.conf. Signed-off-by: Chris Frederick Reviewed-by: Romain Naour Signed-off-by: Thomas Petazzoni

sudo: bump to version 1.8.19p2

2017-01-16T14:30:40+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

sudo: bump to version 1.8.19p1

2016-12-21T14:12:37+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard