summaryrefslogtreecommitdiff
path: root/system/sudo/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'system/sudo/APKBUILD')
-rw-r--r--system/sudo/APKBUILD41
1 files changed, 29 insertions, 12 deletions
diff --git a/system/sudo/APKBUILD b/system/sudo/APKBUILD
index 6b8685d86..8010e5e88 100644
--- a/system/sudo/APKBUILD
+++ b/system/sudo/APKBUILD
@@ -3,7 +3,7 @@
# Contributor: Natanael Copa <ncopa@alpinelinux.org>
# Maintainer: Horst Burkhardt <horst@adelielinux.org>
pkgname=sudo
-pkgver=1.8.27
+pkgver=1.9.10
if [ "${pkgver%_*}" != "$pkgver" ]; then
_realver=${pkgver%_*}${pkgver#*_}
else
@@ -20,16 +20,30 @@ makedepends_host="linux-pam-dev zlib-dev utmps-dev"
makedepends_build="bash"
makedepends="$makedepends_host $makedepends_build"
subpackages="$pkgname-doc $pkgname-dev $pkgname-lang"
-source="https://www.sudo.ws/dist/sudo-${_realver}.tar.gz
- fix-cross-compile.patch
- musl-fix-headers.patch
- test-suite.patch
- "
+source="https://www.sudo.ws/dist/sudo-${_realver}.tar.gz"
builddir="$srcdir"/$pkgname-$_realver
+somask="audit_json.so
+ group_file.so
+ libsudo_noexec.so
+ libsudo_util.so.0
+ sample_approval.so
+ sudoers.so
+ system_group.so
+ "
# secfixes:
+# 1.9.9-r0:
+# - CVE-2021-3156
+# - CVE-2021-23239
+# - CVE-2021-23240
# 1.8.20_p2-r0:
-# - CVE-2017-1000368
+# - CVE-2017-1000368
+# 1.8.28-r0:
+# - CVE-2019-14287
+# 1.9.0-r0:
+# - CVE-2019-19232
+# 1.9.2-r2:
+# - CVE-2021-3156
build() {
./configure \
@@ -42,7 +56,13 @@ build() {
--with-env-editor \
--with-pam \
--without-skey \
- --with-passprompt="[sudo] Password for %p: "
+ --with-passprompt="[sudo] Password for %p: " \
+ --with-insults=disabled \
+ --with-all-insults \
+ --enable-python=no \
+ --disable-log-server \
+ --disable-log-client \
+ --with-secure-path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
make
}
@@ -58,7 +78,4 @@ package() {
rm -rf "$pkgdir"/var/run
}
-sha512sums="0480def650ab880ab9e6c51c606a06897fd638f0381e99c038f5aa47d064aaa2fb35b73eee7f86e73185e18d5dbb8b6ba49c616b1785a1edb2dd6d7b2fa4fcac sudo-1.8.27.tar.gz
-f0f462f40502da2194310fe4a72ec1a16ba40f95a821ba9aa6aabaa423d28c4ab26b684afa7fb81c2407cf60de9327bdab01de51b878c5d4de49b0d62645f53c fix-cross-compile.patch
-dcc03abdd672c934f90dfd3683b3f81a8d39cfff91307d2dbd20a31a852022ab605d034c4fe11860ba99b78d391a9812fca1d6e052620b8ff2c42e4f0c7a1a62 musl-fix-headers.patch
-3feb9f586fb36cdddaf61523926554533d73b4b03e7bfe5da40b754d68c4cc58c796310cc3a3419dd0d87d30d836d5f9921f5ea3c7c7a0099626f49c161279dc test-suite.patch"
+sha512sums="65cf92b67b64413cb807da8b9602fc90b75e5b30dd1402d682ca36f276a3d6209a8a59c14e463898abc9856bc56263e5ba4bb6d44774f56a2885a9eea4a35375 sudo-1.9.10.tar.gz"