Changelog for
sudo-1.7.2p1-14.SEL5_6.4.x86_64.rpm :
Mon Dec 10 23:00:00 2012 Eddy Nigg
- Rebuild for StartCom Linux 5.0.x
Thu Sep 6 00:00:00 2012 Daniel Kopecek - 1.7.2p1-14.4
- Implement a new sudoers Defaults option to restore old command exec behavior
Resolves: rhbz#854513
Fri Aug 10 00:00:00 2012 Daniel Kopecek - 1.7.2p1-14.3
- don\'t use a temporary file when modifying nsswitch.conf
- fix permissions on nsswitch.conf, if needed
- sync Requires with y-stream, added policycoreutils to Requires
Resolves: rhbz#846974
Thu Aug 2 00:00:00 2012 Daniel Kopecek - 1.7.2p1-14.2
- added a workaround for a race condition in handling child processes
Resolves: rhbz#844978
Wed Aug 1 00:00:00 2012 Daniel Kopecek - 1.7.2p1-14.1
- don\'t remove the sudoers: line from nsswitch.conf on update
- use safe temporary file for nsswitch.conf
- call restorecon after modifying nsswitch.conf
- fixed command escaping
- patch: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK
Resolves: rhbz#842759
Resolves: rhbz#844420
Resolves: rhbz#844419
Resolves: rhbz#844418
Resolves: rhbz#844443
Sat Jun 30 00:00:00 2012 Daniel Kopecek - 1.7.2p1-14
- added patch for CVE-2012-2337
Resolves: rhbz#829766
Tue Nov 29 23:00:00 2011 Daniel Kopecek - 1.7.2p1-13
- patch: parse ldap.conf more closely to nss_ldap
Resolves: rhbz#750318
Mon Nov 28 23:00:00 2011 Daniel Kopecek - 1.7.2p1-12
- added patch for CVE-2011-0010
Resolves: rhbz#757157
Fri Oct 28 00:00:00 2011 Daniel Kopecek - 1.7.2p1-11
- backported selinux support from 1.7.4p5 (#477185, #673157)
- fixed bug in Runas_Spec group matching (#627543)
- disable `sudo -l\' output word wrapping if the output
is piped (#697111)
- fixed overwriting of errno after execve failure (#673157)
- fixed segmentation fault (#673072)
- add a sudoers entry to the nsswitch.conf file
on install (and delete it on uninstall) (#617061)
Resolves: rhbz#697111
Resolves: rhbz#673157
Resolves: rhbz#673072
Resolves: rhbz#627543
Resolves: rhbz#617061
Resolves: rhbz#477185
Wed Sep 15 00:00:00 2010 Daniel Kopecek - 1.7.2p1-10
- fixed regression in the sudoers parser (#580438)
- merged .loopsegv3 and .includedir patches into .580438 patch
- generated new toke.c from toke.l using flex (needed by #580438)
- added !visiblepw with comment to sudoers
- added ChangeLog, WHATSNEW and sudoers.ldap.5
*
- removed
*.pod files
- fixed printing of entries with multiple host entries on a single line (#603819)
- fixed audit related code in configure.in (#583683)
- removed unused patches
- fixed a typo in the sudoers man-page (#602022)
Resolves: rhbz#580438
Resolves: rhbz#583911
Resolves: rhbz#583644
Resolves: rhbz#603819
Resolves: rhbz#583683
Resolves: rhbz#602022
Thu Sep 2 00:00:00 2010 Daniel Kopecek - 1.7.2p1-9
- added patch for CVE-2010-2956 (#628628)
Resolves: rhbz#629053
Fri Jul 23 00:00:00 2010 Daniel Kopecek - 1.7.2p1-8
- added patch that fixes problem with caching user/group names
Resolves: rhbz#615179
Wed Jun 2 00:00:00 2010 Daniel Kopecek - 1.7.2p1-7
- added patch that fixes insufficient environment sanitization issue (#598154)
Resolves: rhbz#598382
Wed Apr 14 00:00:00 2010 Daniel Kopecek 1.7.2p1-6
- added second patch for CVE-2010-0426 (#580441)
Resolves: #580526
Tue Feb 23 23:00:00 2010 Daniel Kopecek 1.7.2p1-5
- added patch for CVE-2010-0426 (#567337)
Resolves: #567691
Thu Feb 18 23:00:00 2010 Daniel Kopecek 1.7.2p1-4
- fixed shipped /etc/sudoers has \"unused Cmnd_Alias DELEGATING\"
Resolves: #550326
Thu Feb 11 23:00:00 2010 Daniel Kopecek 1.7.2p1-3
- fixed segfault when #include directive is used in cycles
Resolves: #561336
Thu Jan 14 23:00:00 2010 Daniel Kopecek 1.7.2p1-2
- fixed a problem with includedir (see Patch8)
Resolves: #538700
Tue Dec 1 23:00:00 2009 Daniel Kopecek 1.7.2p1-1
- rebase to 1.7.2p1
Resolves: #469653
Resolves: #497873
Resolves: #500942
Resolves: #512191
Resolves: #519017
Resolves: #521778
Resolves: #521903
- sudo-1.7.2p1-negation.patch, don\'t apply negation to an already
negated Cmnd_Alias member. Backported from upstream development
version of sudo.
Resolves: #453045
Mon Feb 16 23:00:00 2009 Daniel Kopecek 1.6.9p17-5
- added sendmail to BuildRequires
Resolves: #485514
Thu Jan 29 23:00:00 2009 Daniel Kopecek 1.6.9p17-4
- audit patch rediff (one chunk failed to apply due to fuzz=0)
- Fix for incorrect handling of groups in Runas_User (#481720)
Resolves: #481821
Tue Jan 6 23:00:00 2009 Peter Vrabec 1.6.9p17-3
- regression was found, PATH variable can not be changed, reverting #80215
Resolves: #479029
Tue Sep 16 00:00:00 2008 Peter Vrabec 1.6.9p17-2
- fixing sudoers file, regression was found
Resolves: #447408
Thu Aug 28 00:00:00 2008 Peter Vrabec 1.6.9p17-1
- rebase 1.6.8 -> 1.6.9
- patches from F10
- compiled with secure path(80215)
- patches for sudoers file provided by sudo are removed,
because we deliver our own sudoers in sources1
- compiled without selinux support since there was no
selinux support in previous release
Resolves: #447408
Thu Mar 6 23:00:00 2008 Peter Vrabec 1.6.8p12-12
- adjust audit patch,
Resolves: #320671
Fri Jan 4 23:00:00 2008 Peter Vrabec 1.6.8p12-11
- fix segfaults when using ldap on s390,
Resolves: #305331
- add audit support,
Resolves: #320671
Mon Oct 2 00:00:00 2006 Jesse Keating - 1.6.8p12-10
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
Fri Sep 22 00:00:00 2006 Peter Vrabec 1.6.8p12-9
- fix sudoers file, X apps didn\'t work (#206320)
Wed Aug 9 00:00:00 2006 Peter Vrabec 1.6.8p12-8
- use Red Hat specific default sudoers file
Mon Jul 17 00:00:00 2006 Karel Zak 1.6.8p12-7
- fix #198755 - make login processes (sudo -i) initialise session keyring
(thanks for PAM config files to David Howells)
- add IPv6 support (patch by Milan Zazrivec)
Thu Jul 13 00:00:00 2006 Jesse Keating - 1.6.8p12-6.1
- rebuild
Tue May 30 00:00:00 2006 Karel Zak 1.6.8p12-6
- fix #190062 - \"ssh localhost sudo su\" will show the password in clear
Wed May 24 00:00:00 2006 Karel Zak 1.6.8p12-5
- add LDAP support (#170848)
Fri Feb 10 23:00:00 2006 Jesse Keating - 1.6.8p12-4.1
- bump again for double-long bug on ppc(64)
Wed Feb 8 23:00:00 2006 Karel Zak 1.6.8p12-4
- reset env. by default
Tue Feb 7 23:00:00 2006 Jesse Keating - 1.6.8p12-3.1
- rebuilt for new gcc4.1 snapshot and glibc changes
Mon Jan 23 23:00:00 2006 Dan Walsh 1.6.8p12-3
- Remove selinux patch. It has been decided that the SELinux patch for sudo is
- no longer necessary. In tageted policy it had no effect. In strict/MLS policy
- We require the person using sudo to execute newrole before using sudo.
Fri Dec 9 23:00:00 2005 Jesse Keating
- rebuilt
Fri Nov 25 23:00:00 2005 Karel Zak 1.6.8p12-1
- new upstream version 1.6.8p12
Tue Nov 8 23:00:00 2005 Karel Zak 1.6.8p11-1
- new upstream version 1.6.8p11
Fri Oct 14 00:00:00 2005 Tomas Mraz 1.6.8p9-6
- use include instead of pam_stack in pam config
Wed Oct 12 00:00:00 2005 Karel Zak 1.6.8p9-5
- enable interfaces in selinux patch
- merge sudo-1.6.8p8-sesh-stopsig.patch to selinux patch
Tue Sep 20 00:00:00 2005 Karel Zak 1.6.8p9-4
- fix debuginfo
Tue Sep 20 00:00:00 2005 Karel Zak 1.6.8p9-3
- fix #162623 - sesh hangs when child suspends
Tue Aug 2 00:00:00 2005 Dan Walsh 1.6.8p9-2
- Add back in interfaces call, SELinux has been fixed to work around
Wed Jun 22 00:00:00 2005 Karel Zak 1.6.8p9-1
- new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)
Wed May 25 00:00:00 2005 Karel Zak 1.6.8p8-2
- fix #154511 - sudo does not use limits.conf
Tue Apr 5 00:00:00 2005 Thomas Woerner 1.6.8p8-1
- new version 1.6.8p8: new sudoedit and sudo_noexec
Wed Feb 9 23:00:00 2005 Thomas Woerner 1.6.7p5-31
- rebuild
Tue Oct 5 00:00:00 2004 Thomas Woerner 1.6.7p5-30.1
- added missing BuildRequires for libselinux-devel (#132883)
Thu Sep 30 00:00:00 2004 Dan Walsh 1.6.7p5-30
- Fix missing param error in sesh
Tue Sep 28 00:00:00 2004 Dan Walsh 1.6.7p5-29
- Remove full patch check from sesh
Fri Jul 9 00:00:00 2004 Dan Walsh 1.6.7p5-28
- Fix selinux patch to switch to root user
Wed Jun 16 00:00:00 2004 Elliot Lee
- rebuilt
Wed Apr 14 00:00:00 2004 Dan Walsh 1.6.7p5-26
- Eliminate tty handling from selinux
Fri Apr 2 00:00:00 2004 Thomas Woerner 1.6.7p5-25
- fixed spec file: sesh in file section with selinux flag (#119682)
Wed Mar 31 00:00:00 2004 Colin Walters 1.6.7p5-24
- Enhance sesh.c to fork/exec children itself, to avoid
having sudo reap all domains.
- Only reinstall default signal handlers immediately before
exec of child with SELinux patch
Thu Mar 18 23:00:00 2004 Dan Walsh 1.6.7p5-23
- change to default to sysadm_r
- Fix tty handling
Thu Mar 18 23:00:00 2004 Dan Walsh 1.6.7p5-22
- Add /bin/sesh to run selinux code.
- replace /bin/bash -c with /bin/sesh
Tue Mar 16 23:00:00 2004 Dan Walsh 1.6.7p5-21
- Hard code to use \"/bin/bash -c\" for selinux
Tue Mar 16 23:00:00 2004 Dan Walsh 1.6.7p5-20
- Eliminate closing and reopening of terminals, to match su.
Mon Mar 15 23:00:00 2004 Dan Walsh 1.6.7p5-19
- SELinux fixes to make transitions work properly
Fri Mar 5 23:00:00 2004 Thomas Woerner 1.6.7p5-18
- pied sudo
Fri Feb 13 23:00:00 2004 Elliot Lee
- rebuilt
Tue Jan 27 23:00:00 2004 Dan Walsh 1.6.7p5-16
- Eliminate interfaces call, since this requires big SELinux privs
- and it seems to be useless.
Tue Jan 27 23:00:00 2004 Karsten Hopp 1.6.7p5-15
- visudo requires vim-minimal or setting EDITOR to something useful (#68605)
Mon Jan 26 23:00:00 2004 Dan Walsh 1.6.7p5-14
- Fix is_selinux_enabled call
Tue Jan 13 23:00:00 2004 Dan Walsh 1.6.7p5-13
- Clean up patch on failure
Tue Jan 6 23:00:00 2004 Dan Walsh 1.6.7p5-12
- Remove sudo.te for now.
Fri Jan 2 23:00:00 2004 Dan Walsh 1.6.7p5-11
- Fix usage message
Mon Dec 22 23:00:00 2003 Dan Walsh 1.6.7p5-10
- Clean up sudo.te to not blow up if pam.te not present
Thu Dec 18 23:00:00 2003 Thomas Woerner
- added missing BuildRequires for groff
Tue Dec 16 23:00:00 2003 Jeremy Katz 1.6.7p5-9
- remove left-over debugging code
Tue Dec 16 23:00:00 2003 Dan Walsh 1.6.7p5-8
- Fix terminal handling that caused Sudo to exit on non selinux machines.
Mon Dec 15 23:00:00 2003 Dan Walsh 1.6.7p5-7
- Remove sudo_var_run_t which is now pam_var_run_t
Fri Dec 12 23:00:00 2003 Dan Walsh 1.6.7p5-6
- Fix terminal handling and policy
Thu Dec 11 23:00:00 2003 Dan Walsh 1.6.7p5-5
- Fix policy
Thu Nov 13 23:00:00 2003 Dan Walsh 1.6.7p5-4.sel
- Turn on SELinux support
Wed Jul 30 00:00:00 2003 Dan Walsh 1.6.7p5-3
- Add support for SELinux
Thu Jun 5 00:00:00 2003 Elliot Lee
- rebuilt
Tue May 20 00:00:00 2003 Thomas Woerner 1.6.7p5-1
* Wed Jan 22 2003 Tim Powers
- rebuilt
Tue Nov 12 23:00:00 2002 Nalin Dahyabhai 1.6.6-2
- remove absolute path names from the PAM configuration, ensuring that the
right modules get used for whichever arch we\'re built for
- don\'t try to install the FAQ, which isn\'t there any more
Fri Jun 28 00:00:00 2002 Bill Nottingham 1.6.6-1
- update to 1.6.6
Sat Jun 22 00:00:00 2002 Tim Powers
- automated rebuild
Fri May 24 00:00:00 2002 Tim Powers
- automated rebuild
Fri Apr 19 00:00:00 2002 Bernhard Rosenkraenzer 1.6.5p2-2
- Fix bug #63768
Thu Mar 14 23:00:00 2002 Bernhard Rosenkraenzer 1.6.5p2-1
- 1.6.5p2
Fri Jan 18 23:00:00 2002 Bernhard Rosenkraenzer 1.6.5p1-1
- 1.6.5p1
- Hope this \"a new release per day\" madness stops ;)
Thu Jan 17 23:00:00 2002 Bernhard Rosenkraenzer 1.6.5-1
- 1.6.5
Tue Jan 15 23:00:00 2002 Bernhard Rosenkraenzer 1.6.4p1-1
- 1.6.4p1
Mon Jan 14 23:00:00 2002 Bernhard Rosenkraenzer 1.6.4-1
- Update to 1.6.4
Tue Jul 24 00:00:00 2001 Bernhard Rosenkraenzer 1.6.3p7-2
- Add build requirements (#49706)
- s/Copyright/License/
- bzip2 source
Sun Jun 17 00:00:00 2001 Than Ngo
- update to 1.6.3p7
- use %{_tmppath}
Fri Feb 23 23:00:00 2001 Bernhard Rosenkraenzer
- 1.6.3p6, fixes buffer overrun
Wed Oct 11 00:00:00 2000 Bernhard Rosenkraenzer
- 1.6.3p5
Thu Jul 13 00:00:00 2000 Prospector
- automatic rebuild
Wed Jun 7 00:00:00 2000 Karsten Hopp
- fixed owner of sudo and visudo
Fri Jun 2 00:00:00 2000 Nalin Dahyabhai
- modify PAM setup to use system-auth
- clean up buildrooting by using the makeinstall macro
Wed Apr 12 00:00:00 2000 Bernhard Rosenkraenzer
- initial build in main distrib
- update to 1.6.3
- deal with compressed man pages
Tue Dec 14 23:00:00 1999 Preston Brown
- updated to 1.6.1 for Powertools 6.2
- config files are now noreplace.
Fri Jul 23 00:00:00 1999 Tim Powers
- updated to 1.5.9p2 for Powertools 6.1
Thu May 13 00:00:00 1999 Bill Nottingham
- sudo is configured with pam. There\'s no pam.d file. Oops.
Tue Apr 27 00:00:00 1999 Preston Brown
- upgraded to 1.59p1 for powertools 6.0
Tue Oct 27 23:00:00 1998 Preston Brown
- fixed so it doesn\'t find /usr/bin/vi first, but instead /bin/vi (always installed)
Fri Oct 9 00:00:00 1998 Michael Maher
- built package for 5.2
Tue May 19 00:00:00 1998 Michael Maher
- updated SPEC file.
Thu Jan 29 23:00:00 1998 Otto Hammersmith
- updated to 1.5.4
Tue Nov 18 23:00:00 1997 Otto Hammersmith
- built for glibc, no problems
Sat Apr 26 00:00:00 1997 Michael Fulbright
- Fixed for 4.2 PowerTools
- Still need to be pamified
- Still need to move stmp file to /var/log
Mon Feb 17 23:00:00 1997 Michael Fulbright
- First version for PowerCD.
