openbsd-ports/security/sudo/Makefile
millert 8fec1b1efc Update sudo to 1.8.31:
* Fixed CVE-2019-18634, a buffer overflow when the "pwfeedback"
   sudoers option is enabled on systems with uni-directional pipes.

 * The "sudoedit_checkdir" option now treats a user-owned directory
   as writable, even if it does not have the write bit set at the
   time of check.  Symbolic links will no longer be followed by
   sudoedit in any user-owned directory.  Bug #912

 * Fixed sudoedit on macOS 10.15 and above where the root file system
   is mounted read-only.  Bug #913.

 * Fixed a crash introduced in sudo 1.8.30 when suspending sudo
   at the password prompt.  Bug #914.

 * Fixed compilation on systems where the mmap MAP_ANON flag
   is not available.  Bug #915.
2020-01-30 18:47:11 +00:00

61 lines
1.4 KiB
Makefile

# $OpenBSD: Makefile,v 1.38 2020/01/30 18:47:11 millert Exp $
COMMENT= execute a command as another user
DISTNAME= sudo-1.8.31
CATEGORIES= security
MAINTAINER= Todd C. Miller <millert@openbsd.org>
# ISC-style license
PERMIT_PACKAGE= Yes
WANTLIB+= c util z
HOMEPAGE= https://www.sudo.ws/
MASTER_SITES= https://www.sudo.ws/dist/ \
https://bigsearcher.com/mirrors/sudo/ \
https://mirrors.concertpass.com/sudo/ \
ftp://ftp.uwsg.indiana.edu/pub/security/sudo/
SEPARATE_BUILD= Yes
CONFIGURE_STYLE= gnu
CONFIGURE_ARGS+= --with-insults \
--with-env-editor \
--with-logfac=authpriv \
--with-libtool=system \
--disable-path-info \
--enable-zlib=system
SHARED_LIBS= sudo_util 0.0
FLAVORS= gettext ldap
FLAVOR?=
.if ${FLAVOR:Mldap}
CONFIGURE_ARGS+= --with-ldap=${LOCALBASE}
LIB_DEPENDS+= databases/openldap
WANTLIB+= crypto lber-2.4 ldap-2.4 sasl2 ssl
.endif
.if ${FLAVOR:Mgettext}
CONFIGURE_ARGS += --enable-nls=${LOCALBASE}
LIB_DEPENDS+= devel/gettext,-runtime
WANTLIB+= iconv intl
.else
CONFIGURE_ARGS += --disable-nls
.endif
# Don't set owner on install in fake mode
FAKE_FLAGS= "INSTALL_OWNER="
EXAMPLEDIR= ${PREFIX}/share/examples/sudo
post-install:
${INSTALL_DATA} ${FILESDIR}/sudoers ${EXAMPLEDIR}/sudoers.OpenBSD
rm -rf ${WRKINST}/etc/sudoers* ${WRKINST}/var/db/sudo \
${WRKINST}/var/run/sudo ${EXAMPLEDIR}/pam.conf
.include <bsd.port.mk>