blob: 6aa3c4bf3c4391aa3e86a2d02a98d7670399d4e9 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
# Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Natanael Copa <ncopa@alpinelinux.org>
# Maintainer: Horst Burkhardt <horst@adelielinux.org>
pkgname=sudo
pkgver=1.9.9
if [ "${pkgver%_*}" != "$pkgver" ]; then
_realver=${pkgver%_*}${pkgver#*_}
else
_realver=$pkgver
fi
pkgrel=0
pkgdesc="Give certain users the ability to run some commands as root"
url="https://www.sudo.ws/sudo/"
arch="all"
options="suid"
license="ISC AND MIT AND BSD-3-Clause AND BSD-2-Clause AND Zlib"
depends=""
makedepends_host="linux-pam-dev zlib-dev utmps-dev"
makedepends_build="bash"
makedepends="$makedepends_host $makedepends_build"
subpackages="$pkgname-doc $pkgname-dev $pkgname-lang"
source="https://www.sudo.ws/dist/sudo-${_realver}.tar.gz"
builddir="$srcdir"/$pkgname-$_realver
somask="audit_json.so
group_file.so
libsudo_noexec.so
libsudo_util.so.0
sample_approval.so
sudoers.so
system_group.so
"
# secfixes:
# 1.9.9-r0:
# - CVE-2021-3156
# - CVE-2021-23239
# - CVE-2021-23240
# 1.8.20_p2-r0:
# - CVE-2017-1000368
# 1.8.28-r0:
# - CVE-2019-14287
# 1.9.0-r0:
# - CVE-2019-19232
# 1.9.2-r2:
# - CVE-2021-3156
build() {
./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--libexecdir=/usr/lib \
--mandir=/usr/share/man \
--enable-pie \
--with-env-editor \
--with-pam \
--without-skey \
--with-passprompt="[sudo] Password for %p: " \
--with-insults=disabled \
--with-all-insults \
--enable-python=no \
--disable-log-server \
--disable-log-client \
--with-secure-path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
make
}
check() {
make check
}
package() {
# the sudo's mkinstalldir script miscreates the leading
# path components with bad permissions. fix this.
install -d -m0755 "$pkgdir"/var "$pkgdir"/var/db
make -j1 DESTDIR="$pkgdir" install
rm -rf "$pkgdir"/var/run
}
sha512sums="53064240431ae3d9409dc5cb7d72ab55d9ab5f802af4de99fadd987855461b3cca53f261d6256e3b6f35e30c7e162f4dfa3978ef6976415cf5be874fb2026614 sudo-1.9.9.tar.gz"
|
