Commit Graph

32 Commits

Author SHA1 Message Date
Cristiana Voicu 660601bd97 sudo: upgrade to 1.8.7
Removed a patch because the changes were merged upstream.
Also, the license had some modifications in two files.

(From OE-Core rev: 13ba4490f6422109f934ed36809bd52d44577574)

Signed-off-by: Cristiana Voicu <cristiana.voicu@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-08-16 11:44:15 +01:00
Kai Kang 60bc7c1917 sudo: quote BUILD_CC
BUILD_CC is assigned to CC when do compile. If BUILD_CC has multi-items
such as "ccache gcc", compilation fails with:

make: *** No rule to make target `gcc'.  Stop.

Double quote BUILD_CC to avoid this error.

(From OE-Core rev: 4f1fcdbea1629ebf506fb0dbd5df71a588f0372b)

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-08-12 13:09:51 +01:00
Martin Jansa 396d7c51ed sudo: add PACKAGECONFIG for zlib
* it's autodetected from sysroot
* add PACKAGECONFIG to make it deterministic

(From OE-Core rev: 871d9d264dbf43ca4a7d000f39253d16854c0bd3)

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-07-29 13:09:10 +01:00
Andrei Dinu 7c1a555550 sudo : upgrade to 1.8.6p8
upgrade from 1.8.6p7 -> 1.8.6p8

 - removed crypt.patch because it was contained upstream

(From OE-Core rev: 198e0db0e840dd3ac719d0c2ea980e08bf1f3442)

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-06-11 15:38:02 +01:00
Kang Kai ab31f43071 sudo: set CFLAGS for build mksigname and mksiglist
mksigname and mksiglist are compiled by BUILD_CC for build host. When
there are some options in CFLAGS that BUILD_CC doesn't support,
compilation fails.

Build for arm on a x86 host, if option "-mapcs-frame" is provided, error
occurs with:

| cc1: error: unrecognized command line option "-mapcs-frame"

Pass BUILD_CFLAGS to CFLAGS to fix that kind of failure.

(From OE-Core rev: 6022e81570b80232f272a1aa474e8ced3a089382)

Signed-off-by: Kang Kai <kai.kang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-05-24 14:14:45 +01:00
Tomas Frydrych 9dae6e7be4 sudo: disable SSP for auxiliary build tools mksiglist and mksigname
The do_compile_prepend() fragment ensures that the non-installable build
tools mksiglist and mksigname are built using the BUILD_CC, but if the the
BUILD_CC does not support SSP and the cross compiler does, the build fails
due to the SSP flags set in the Makefile. Ensuring that SSP is not enabled
when building these tools prevents this from happening.

(From OE-Core rev: ad9a9c6e6b4f00bc47449bbe8c85777ea7c89b88)

Signed-off-by: Tomas Frydrych <tomas@sleepfive.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-04-29 15:30:27 +01:00
Ross Burton bd25074178 sudo: update crypt.patch to use backport from upstream
Upstream closed my bug and rewrote the patch, so update our patch with a
backport from upstream.

(From OE-Core rev: 31327bac1e5438a0041638332698a1e1e91640ba)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-04-12 17:00:45 +01:00
Ross Burton 2d94f1bde7 sudo: handle glibc 2.17 crypt semantics
Staring from glibc 2.17 the crypt() function will error out and return NULL if
the seed or "correct" is invalid. The failure case for this is the sudo user
having a locked account in /etc/shadow, so their password is "!", which is an
invalid hash.  crypt() never returned NULL previously so this is crashing in
strcmp().

[ YOCTO #4241 ]

(From OE-Core rev: 06d7078f7631b92e8b789f8e94a3a346d8181ce6)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-04-11 16:12:24 +01:00
Richard Purdie 8805fa2a25 sudo: Fix out of tree builds ${B} != ${S}
The last change to sudo broke out of tree builds, fix this.

(From OE-Core rev: a1226175c405db6eacb6e490e8e635b9dd156126)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-23 12:57:54 +00:00
Khem Raj c2fd9a1e0f sudo: Compile mksigname and mksiglist for build host
cross compiling sudo doesnt work well since it uses
mksigname and mksiglist to generate C sources which
are then used in sudo build itself. With this patch
now we make sure those hosttools are compiled for
build machine. It fixes the build failures like

./mksigname > signame.c
/bin/sh: ./mksigname: cannot execute binary file
make[1]: *** [signame.c] Error 126

(From OE-Core rev: 2ce5b1364ef6eb276352f7170d23dc3492c779f6)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-23 11:44:13 +00:00
Richard Purdie 6544a91329 sudo: Fix case where ${B} != ${S}
Fix out of tree builds by using full path to files in ${S} and remove
cwd assumptions.

(From OE-Core rev: 97dc39e42e95dcadc7bed1aee32db3560e21efe5)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-18 13:18:24 +00:00
Andrei Dinu 0572657cab sudo : upgrade to 1.8.6p7
(From OE-Core rev: 8ea6517cac8df48bb9f17d5078360748bdda7b38)

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-07 11:14:40 +00:00
Andrei Dinu 0bedc0b80d sudo : upgrade to 1.8.6p6
(From OE-Core rev: edc4f4c04d1a853137cb3cb2638e23bdcb810833)

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-28 23:15:52 +00:00
Andrei Dinu 9f2784f5cd Sudo : upgrade to 1.8.6p4
(From OE-Core rev: 115b1a703c26e11c631d77901104605d64f51f82)

(From OE-Core rev: 5f93bb7e783c23a5da344a9fc2f856f9b973d54c)

Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-01 15:54:29 +00:00
Javier Martinez Canillas 7191f4b98c sudo: use ${bindir} and ${sysconfdir} instead of /usr/bin and /etc
It is considered good practice to use the build system provided
variables instead of directly specify hardcoded paths.

(From OE-Core rev: a9c73d9d3dd5f7fbee82d7ed3cb88a80aa3cbfbd)

Signed-off-by: Javier Martinez Canillas <javier@dowhile0.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-08-06 15:18:47 +01:00
Scott Garman a01b7ce6cc sudo: upgrade to 1.8.5p2
LIC_FILES_CHKSUM updated due to trivial copyright date change.

(From OE-Core rev: 373e4fef7b4687a875a24c2c51a89fe2f251a4a9)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-06-25 16:35:53 +01:00
Mihai Lindner 7f3ac86f99 sudo: fixed wrong `chmod` path
Placed $D between braces ${D} to be correctly expanded to the
workdir path, instead of a path relative to host rootfs.
Currently, bitbake sudo fails on host systems where sudo is not
installed.

(From OE-Core rev: 70562306a051ac93001851213441c9d5d6234517)

Signed-off-by: Mihai Lindner <mihaix.lindner@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-05-25 11:17:53 +01:00
Scott Garman c5d196063d sudo: upgrade to 1.8.4p4
(From OE-Core rev: 4bdd31625ba9d4f9f0e9dc7775ad650d53dd221a)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-19 14:37:44 +00:00
Scott Garman 60eed3195c sudo: upgrade to 1.8.4
During the upgrade to 1.8.4, the UCB-licensed fnmatch.c was replaced
with a non-recursive BSD-licensed version, hence the removal of UCB
and addition of BSD in the LICENSE field. This led to checksum changes
in the doc/LICENSE file, and we now additionally track the comment
headers in redblack.c.

These changes were confirmed on the sudo mailing list:

http://www.sudo.ws/pipermail/sudo-workers/2012-February/000736.html

This upgrade also fixes CVE-2012-0809.

(From OE-Core rev: 7147a569758414467c9d022e4c11fbc303e050aa)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-02 15:22:53 +00:00
Mark Hatle 6d0ad5c31b sudo: Avoid post install scripts
The post install script was removed, and the install_append updated
to ensure the permissions are set correctly.

(From OE-Core rev: 463e44ae159da2e03369f9ac14843b479de2e43d)

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-11-11 11:01:08 +00:00
Scott Garman 51df60eb39 sudo: upgrade to 1.8.3
(From OE-Core rev: 6d300745bb70dfab367b1d472d49b719b91ab9a1)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-10-27 08:29:50 +01:00
Mark Hatle 7042e14c70 sudo: Fix PAM dependencies
When PAM is enabled for the distribution we need to be sure to have a
build dependency of libpam, and runtime dependencies on the pam modules
used by the sudo package.

(From OE-Core rev: 79db5ccc7ee9b360451074dd42f7676e138cf384)

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-09-22 05:06:59 +01:00
Kang Kai 4e489a02e0 sudo: add pam support
According to DISTRO_FEATURES to add pam support for sudo, and import
configure file from Fedora.

(From OE-Core rev: 1f7e088f2d570d33c2344e32a05193b37a75ea76)

Signed-off-by: Kang Kai <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-07-27 12:02:42 +01:00
Richard Purdie 8511d1ec1b Drop PRIORITY variable
As discussed on the mailing list, this variable isn't useful and if wanted
would be better implemented by distros using pn-X overrides.

This patch executes:

find . -regex ".*\.\(bb\|inc\)$" | xargs sed -i '/^PRIORITY = ".*"$/d'

against the tree removing the referenced. Thanks to Phil Blundell for
the command.

(From OE-Core rev: d122343362669c683acc4af295971a62cbc823fc)

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-07-01 23:27:29 +01:00
Scott Garman 7c6f47b13c sudo: upgrade to v1.8.1p2
Upgrading to the latest stable release of sudo.

This version of sudo has reorganized its source code layout, hence
the LIC_FILES_CHKSUM related changes. Also, some of the individual
.c files we checksummed (nonunix.h, vasgroups.c) are no longer
shipped with the sources. Finally, an embedded copy of zlib is now
included in these sources, so Zlib is included as one of the
licenses. I could not find any evidence of MIT-licensed sources,
so that license has been removed.

(From OE-Core rev: 10694e6037b16813e99e2204dbbe5c169f34667c)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-06-28 13:55:43 +01:00
Xiaofeng Yan 505ee4b0a7 sudo.inc: Add do_install_prepend () to sudo.inc
Fix bug [YOCTO #1092]
Own a directory "/var/lib" before do_install() because if there isn't this directory during installing, \
then script "mkinstalldirs" from "sudo package" will create directory "/var/lib/sudo" by recursion with mode "0700" \
which will cause bug [YOCTO #1092]. So I add do_install_prepend() to create a "/var/lib" which can be accessed \
by common user before installing files.

(From OE-Core rev: 16bbeb2d866a07abd5379d1de30f2b747e1693fe)

Signed-off-by: Xiaofeng Yan <xiaofeng.yan@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-06-01 18:34:35 +01:00
Scott Garman a0da8e7e8f recipes: add Upstream-Status to various recipe patches
Add Upstream-Status tag to patches for the following recipes:

apmd
insserv
linuxdoc-tools
openjade
sgmlspl
at
sudo

(From OE-Core rev: 89ff546de3ce6b1c441f04d7a153c4f8d514a749)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-05-18 14:32:46 +01:00
Scott Garman 0dbd791e5b recipes: Add Upstream-Status to various recipe patches
Add Upstream-Status tag to patches for the following recipes:

openssh
dbus-glib
expat
opensp
sgml-common
at
cpio (GPLv3 version)
libpam
icu

(From OE-Core rev: 0702602332ad63c2cfaa207516497bb0b75bfdf3)

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2011-05-17 15:14:42 +01:00
Mark Hatle 92a9d59fcc recipes: pre/post actions
A number of the recipes did not properly label their pre and post
actions, causing the actions to occur in all split packages.  This
was corrected by defaulting to _${PN} in most cases.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
2011-02-12 00:31:43 +00:00
Scott Garman 9eb6df725b sudo: upgrade to 1.7.4p6
Addresses CVE-2011-0010

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2011-01-24 14:48:44 -08:00
Scott Garman c144f1693c sudo: upgrade to version 1.7.4p4
* Upgraded sudo to v1.7.4p4
* Removed obsolete patches
* Makefile.in no longer strips binaries, removed do_configure_prepend()
  section which used to remove the -s
* Updated HOMEPAGE to canonical URL for project
* Added SUMMARY field
* Added checksums for source tarball
* Added patch for correcting paths to libtool scripts in m4/
* Corrected typos in LIC_FILES_CHKSUM (use of startline was invalid)
  and included updated checksums - no license text has actually changed

Signed-off-by: Scott Garman <scott.a.garman@intel.com>
2010-11-24 13:25:21 -08:00
Richard Purdie d62ee7eaf2 packages: Separate out most of the remaining packages into recipes
Signed-off-by: Richard Purdie <rpurdie@linux.intel.com>
2010-09-01 19:09:57 +01:00