sudo: upgrade 1.9.9 -> 1.9.10

Message ID 1646735768-59031-2-git-send-email-wangmy@fujitsu.com
State Accepted, archived
Commit cbb7ff3abf52f38fea471b9510ba8bcec70c3058
Headers show
Series sudo: upgrade 1.9.9 -> 1.9.10 | expand

Commit Message

Mingyu Wang (Fujitsu) March 8, 2022, 10:36 a.m. UTC
Changelog:
=========
Added new log_passwords and passprompt_regex sudoers options.

Added new log_passwords and passprompt_regex settings to sudo_logsrvd that
operate like the sudoers options when logging terminal input.

Fixed several few bugs in the cvtsudoers utility when merging multiple
sudoers sources.

Fixed a bug in sudo_logsrvd parsing the sudo_logsrvd.conf file, where the
retry_interval in the [relay] section was not being recognized.

Restored the pre-1.9.9 behavior of not performing authentication when sudo's
-n option is specified.

On systems with /proc, if the /proc/self/stat (Linux) or /proc/pid/psinfo
(other systems) file is missing or invalid, sudo will now check file
descriptors 0-2 to determine the user's terminal. Bug #1020.

Fixed a compilation problem on Debian kFreeBSD. Bug #1021.

Fixed a crash in sudo_logsrvd when running in relay mode if an alert message
is received.

Fixed an issue that resulting in "problem with defaults entries" email to
be sent if a user ran sudo when the sudoers entry in the nsswitch.conf file
includes "sss" but no sudo provider is configured in /etc/sssd/sssd.conf. Bug #1022.

Updated the warning displayed when the invoking user is not allowed to run sudo.

Fixed a bug where the user-specified command timeout was not being honored if
the sudoers rule did not also specify a timeout.

Added support for using POSIX extended regular expressions in sudoers rules.

A user may now only run sudo -U otheruser -l if they have a "sudo ALL"
privilege where the RunAs user contains either root or otheruser.

The sudo lecture is now displayed immediately before the password prompt.

Sudo now uses its own closefrom() emulation on Linux systems.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 meta/recipes-extended/sudo/{sudo_1.9.9.bb => sudo_1.9.10.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-extended/sudo/{sudo_1.9.9.bb => sudo_1.9.10.bb} (96%)

Patch

diff --git a/meta/recipes-extended/sudo/sudo_1.9.9.bb b/meta/recipes-extended/sudo/sudo_1.9.10.bb
similarity index 96%
rename from meta/recipes-extended/sudo/sudo_1.9.9.bb
rename to meta/recipes-extended/sudo/sudo_1.9.10.bb
index d7d71bb364..aa0d814ed7 100644
--- a/meta/recipes-extended/sudo/sudo_1.9.9.bb
+++ b/meta/recipes-extended/sudo/sudo_1.9.10.bb
@@ -8,7 +8,7 @@  SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \
 
 PAM_SRC_URI = "file://sudo.pam"
 
-SRC_URI[sha256sum] = "6d6ee863a3bc26c87661093a74ec63e10fd031ceba714642d21636dfe25e3e00"
+SRC_URI[sha256sum] = "44a1461098e7c7b8e6ac597499c24fb2e43748c0c139a8b4944e57d1349a64f4"
 
 DEPENDS += " virtual/crypt ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
 RDEPENDS:${PN} += " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam-plugin-limits pam-plugin-keyinit', '', d)}"