Index: head/security/sudo/Makefile =================================================================== --- head/security/sudo/Makefile (revision 448900) +++ head/security/sudo/Makefile (revision 448901) @@ -1,98 +1,97 @@ # Created by: erich@rrnet.com # $FreeBSD$ PORTNAME= sudo -PORTVERSION= 1.8.20p2 -PORTREVISION= 3 +PORTVERSION= 1.8.21 CATEGORIES= security MASTER_SITES= SUDO MAINTAINER= garga@FreeBSD.org COMMENT= Allow others to run commands as root LICENSE= sudo LICENSE_NAME= Sudo license LICENSE_FILE= ${WRKSRC}/doc/LICENSE LICENSE_PERMS= dist-mirror dist-sell pkg-mirror pkg-sell auto-accept USES= cpe libtool CPE_VENDOR= todd_miller USE_LDCONFIG= yes GNU_CONFIGURE= yes LDFLAGS+= -lgcc CONFIGURE_ARGS= --sysconfdir=${PREFIX}/etc \ --with-ignore-dot \ --with-tty-tickets \ --with-env-editor \ --with-logincap \ --with-long-otp-prompt OPTIONS_DEFINE= LDAP INSULTS DISABLE_ROOT_SUDO DISABLE_AUTH NOARGS_SHELL \ AUDIT OPIE NLS SSSD DOCS OPTIONS_DEFAULT= AUDIT OPTIONS_SUB= yes INSULTS_DESC= Enable insults on failures DISABLE_ROOT_SUDO_DESC= Do not allow root to run sudo DISABLE_AUTH_DESC= Do not require authentication by default NOARGS_SHELL_DESC= Run a shell if no arguments are given AUDIT_DESC= Enable BSM audit support OPIE_DESC= Enable one-time passwords (no PAM support) SSSD_DESC= Enable SSSD backend support. LOGFAC?= authpriv CONFIGURE_ARGS+= --with-logfac=${LOGFAC} # This is intentionally not an option. # SUDO_SECURE_PATH is a PATH string that will override the user's PATH. # ex: make SUDO_SECURE_PATH="/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin" .if defined(SUDO_SECURE_PATH) CONFIGURE_ARGS+= --with-secure-path="${SUDO_SECURE_PATH}" .endif NLS_USES= gettext NLS_CONFIGURE_ENABLE= nls NLS_LDFLAGS= -L${LOCALBASE}/lib -lintl NLS_CFLAGS= -I${LOCALBASE}/include INSULTS_CONFIGURE_ON= --with-insults INSULTS_CONFIGURE_ON+= --with-all-insults LDAP_USE= OPENLDAP=yes LDAP_CONFIGURE_ON= --with-ldap=${PREFIX} SUDO_LDAP_CONF?= ldap.conf LDAP_CONFIGURE_ON+= --with-ldap-conf-file=${PREFIX}/etc/${SUDO_LDAP_CONF} DISABLE_ROOT_SUDO_CONFIGURE_ON= --disable-root-sudo DISABLE_AUTH_CONFIGURE_ON= --disable-authentication NOARGS_SHELL_CONFIGURE_ENABLE= noargs-shell AUDIT_CONFIGURE_WITH= bsm-audit OPIE_CONFIGURE_ON= --with-opie OPIE_CONFIGURE_OFF= --with-pam SSSD_CONFIGURE_ON= --with-sssd SSSD_RUN_DEPENDS= sssd:security/sssd .include .if ${ARCH} == "arm" CONFIGURE_ARGS+= --disable-pie .endif post-patch: @${REINPLACE_CMD} -E '/install-(binaries|noexec):/,/^$$/ \ s/\$$\(INSTALL\)/& ${STRIP}/;s/-b\~/-b ~/' \ ${WRKSRC}/src/Makefile.in @${REINPLACE_CMD} -e 's,$$(srcdir)/sudoers2ldif $$(DESTDIR)$$(docdir),$$(srcdir)/sudoers2ldif $$(DESTDIR)$$(bindir),' \ ${WRKSRC}/plugins/sudoers/Makefile.in post-install: ${INSTALL_DATA} ${FILESDIR}/pam.conf ${STAGEDIR}${PREFIX}/etc/pam.d/sudo.default ${RM} ${STAGEDIR}${PREFIX}/etc/sudoers ${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/sudoreplay ${STRIP_CMD} ${STAGEDIR}${PREFIX}/sbin/visudo .for f in group_file.so libsudo_util.so sudoers.so system_group.so ${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/sudo/${f} .endfor .include Index: head/security/sudo/distinfo =================================================================== --- head/security/sudo/distinfo (revision 448900) +++ head/security/sudo/distinfo (revision 448901) @@ -1,3 +1,3 @@ -TIMESTAMP = 1497103724 -SHA256 (sudo-1.8.20p2.tar.gz) = bd42ae1059e935f795c69ea97b3de09fe9410a58a74b5d5e6836eb5067a445d9 -SIZE (sudo-1.8.20p2.tar.gz) = 2930769 +TIMESTAMP = 1503887359 +SHA256 (sudo-1.8.21.tar.gz) = 126e9214613e842e19a02658f060186fe6a5927948679d64895b17ed933bb523 +SIZE (sudo-1.8.21.tar.gz) = 2973939 Index: head/security/sudo/files/patch-src_exec__nopty.c =================================================================== --- head/security/sudo/files/patch-src_exec__nopty.c (revision 448900) +++ head/security/sudo/files/patch-src_exec__nopty.c (revision 448901) @@ -1,26 +1,17 @@ ---- src/exec_nopty.c.orig 2017-08-09 17:20:41 UTC -+++ src/exec_nopty.c -@@ -201,7 +201,7 @@ exec_nopty(struct command_details *details, struct com - sudo_warn(U_("unable to set handler for signal %d"), SIGCHLD); - if (sudo_sigaction(SIGCONT, &sa, NULL) != 0) - sudo_warn(U_("unable to set handler for signal %d"), SIGCONT); --#ifdef SIGINFO -+#if defined(SIGINFO) && !defined(__FreeBSD__) - if (sudo_sigaction(SIGINFO, &sa, NULL) != 0) - sudo_warn(U_("unable to set handler for signal %d"), SIGINFO); - #endif -@@ -222,6 +222,14 @@ exec_nopty(struct command_details *details, struct com - sudo_warn(U_("unable to set handler for signal %d"), SIGQUIT); - if (sudo_sigaction(SIGTSTP, &sa, NULL) != 0) - sudo_warn(U_("unable to set handler for signal %d"), SIGTSTP); +--- src/exec_nopty.c.orig 2017-08-28 20:07:24.296708000 -0700 ++++ src/exec_nopty.c 2017-08-28 20:17:50.768102000 -0700 +@@ -134,6 +134,14 @@ signal_cb_nopty(int signo, int what, void *v) + sudo_ev_loopexit(ec->evbase); + } + debug_return; +#if defined(SIGINFO) && defined(__FreeBSD__) + /* -+ * FreeBSD's ^T will generate a SIGINFO to the controlling terminal's -+ * process group. ++ * FreeBSD's ^T (terminal STATUS) will send a kernel-generated SIGINFO ++ * to the controlling terminal's process group that should not be ++ * forwarded. + */ -+ if (sudo_sigaction(SIGINFO, &sa, NULL) != 0) -+ sudo_warn(U_("unable to set handler for signal %d"), SIGINFO); ++ case SIGINFO: +#endif - - /* - * The policy plugin's session init must be run before we fork + case SIGINT: + case SIGQUIT: + case SIGTSTP: Index: head/security/sudo/pkg-plist =================================================================== --- head/security/sudo/pkg-plist (revision 448900) +++ head/security/sudo/pkg-plist (revision 448901) @@ -1,100 +1,101 @@ bin/sudo bin/sudoedit bin/sudoreplay @sample etc/sudoers.dist etc/sudoers @sample etc/pam.d/sudo.default etc/pam.d/sudo include/sudo_plugin.h libexec/sudo/group_file.so libexec/sudo/libsudo_util.so libexec/sudo/libsudo_util.so.0 libexec/sudo/libsudo_util.so.0.0.0 libexec/sudo/sudo_noexec.so libexec/sudo/sudoers.so libexec/sudo/system_group.so man/man5/sudo.conf.5.gz man/man5/sudoers.5.gz %%LDAP%%man/man5/sudoers.ldap.5.gz man/man8/sudo.8.gz man/man8/sudo_plugin.8.gz man/man8/sudoedit.8.gz man/man8/sudoreplay.8.gz man/man8/visudo.8.gz sbin/visudo %%LDAP%%bin/sudoers2ldif %%PORTDOCS%%%%DOCSDIR%%/CONTRIBUTORS %%PORTDOCS%%%%DOCSDIR%%/ChangeLog %%PORTDOCS%%%%DOCSDIR%%/HISTORY %%PORTDOCS%%%%DOCSDIR%%/LICENSE %%PORTDOCS%%%%DOCSDIR%%/NEWS %%PORTDOCS%%%%DOCSDIR%%/README %%PORTDOCS%%%%DOCSDIR%%/TROUBLESHOOTING %%PORTDOCS%%%%DOCSDIR%%/UPGRADE %%LDAP%%%%PORTDOCS%%%%DOCSDIR%%/README.LDAP %%LDAP%%%%PORTDOCS%%%%DOCSDIR%%/schema.OpenLDAP %%LDAP%%%%PORTDOCS%%%%DOCSDIR%%/schema.iPlanet %%LDAP%%%%PORTDOCS%%%%DOCSDIR%%/schema.ActiveDirectory %%PORTEXAMPLES%%%%EXAMPLESDIR%%/pam.conf %%PORTEXAMPLES%%%%EXAMPLESDIR%%/sudo.conf %%PORTEXAMPLES%%%%EXAMPLESDIR%%/sudoers %%PORTEXAMPLES%%%%EXAMPLESDIR%%/syslog.conf %%NLS%%share/locale/ca/LC_MESSAGES/sudo.mo %%NLS%%share/locale/ca/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/cs/LC_MESSAGES/sudo.mo %%NLS%%share/locale/cs/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/da/LC_MESSAGES/sudo.mo %%NLS%%share/locale/da/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/de/LC_MESSAGES/sudo.mo %%NLS%%share/locale/de/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/el/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/eo/LC_MESSAGES/sudo.mo %%NLS%%share/locale/eo/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/es/LC_MESSAGES/sudo.mo %%NLS%%share/locale/eu/LC_MESSAGES/sudo.mo %%NLS%%share/locale/eu/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/fi/LC_MESSAGES/sudo.mo %%NLS%%share/locale/fi/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/fr/LC_MESSAGES/sudo.mo %%NLS%%share/locale/fr/LC_MESSAGES/sudoers.mo +%%NLS%%share/locale/fur/LC_MESSAGES/sudo.mo %%NLS%%share/locale/gl/LC_MESSAGES/sudo.mo %%NLS%%share/locale/hr/LC_MESSAGES/sudo.mo %%NLS%%share/locale/hr/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/hu/LC_MESSAGES/sudo.mo %%NLS%%share/locale/hu/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/it/LC_MESSAGES/sudo.mo %%NLS%%share/locale/it/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/ja/LC_MESSAGES/sudo.mo %%NLS%%share/locale/ja/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/ko/LC_MESSAGES/sudo.mo %%NLS%%share/locale/ko/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/lt/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/nb/LC_MESSAGES/sudo.mo %%NLS%%share/locale/nb/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/nl/LC_MESSAGES/sudo.mo %%NLS%%share/locale/nl/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/nn/LC_MESSAGES/sudo.mo %%NLS%%share/locale/pl/LC_MESSAGES/sudo.mo %%NLS%%share/locale/pl/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/pt_BR/LC_MESSAGES/sudo.mo %%NLS%%share/locale/pt_BR/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/ru/LC_MESSAGES/sudo.mo %%NLS%%share/locale/ru/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/sk/LC_MESSAGES/sudo.mo %%NLS%%share/locale/sk/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/sl/LC_MESSAGES/sudo.mo %%NLS%%share/locale/sl/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/sr/LC_MESSAGES/sudo.mo %%NLS%%share/locale/sr/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/sv/LC_MESSAGES/sudo.mo %%NLS%%share/locale/sv/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/tr/LC_MESSAGES/sudo.mo %%NLS%%share/locale/tr/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/uk/LC_MESSAGES/sudo.mo %%NLS%%share/locale/uk/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/vi/LC_MESSAGES/sudo.mo %%NLS%%share/locale/vi/LC_MESSAGES/sudoers.mo %%NLS%%share/locale/zh_CN/LC_MESSAGES/sudo.mo %%NLS%%share/locale/zh_CN/LC_MESSAGES/sudoers.mo @dir etc/sudoers.d @dir /var/db/sudo/lectured @dir /var/db/sudo @dir /var/run/sudo