lp:ubuntu/wily/sudo

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1219337: Users can change the clock without authenticating, allowing them to locally exploit sudo.	Medium	Confirmed
Bug #1451274: sudo does not check fdqn properly	Medium	Triaged

Link a bug report

Related blueprints

74. By Mathieu Trudel-Lapierre on 2015-09-22

debian/patches/pam_check_untranslated_prompt.patch: also check the un-
translated version of the prompt when checking if the PAM prompt matches
"Password:". Patch from Joel Pelaez Jorge. (LP: #1414303)

73. By Marc Deslauriers on 2015-06-05

* Use tmpfs location to store timestamp files (LP: #1458031)
  - debian/rules: change --with-rundir to /var/run/sudo
  - debian/rules, debian/sudo.service, debian/sudo.sudo.init: stop
    shipping init script and service file, as they are no longer
    necessary.
  - debian/*.preinst, debian/*.postinst, debian/*.postrm: remove old init
    script with dpkg-maintscript-helper.
  - debian/*.postinst: remove old /var/run/sudo to /var/lib/sudo
    transition code, remove old /var/lib/sudo/ts timestamp directory.

72. By Marc Deslauriers on 2015-05-13

* Merge from Debian unstable. (LP: #1451274, LP: #1219337)
  Remaining changes:
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets --enable-admin-flag
    + install man/man8/sudo_root.8 in both flavours
    + install apport hooks
  - debian/sudoers:
    + also grant admin group sudo access
  - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
  - debian/sudo.pam:
    + Use pam_env to read /etc/environment and /etc/default/locale
      environment files. Reading ~/.pam_environment is not permitted due to
      security reasons.
  - debian/control:
    + dh-autoreconf dependency fixes missing-build-dependency-for-dh_-command
  - Remaining patches:
    + keep_home_by_default.patch: Keep HOME in the default environment
    + debian/patches/also_check_sudo_group.diff: also check the sudo group
      in plugins/sudoers/sudoers.c to create the admin flag file. Leave the
      admin group check for backwards compatibility.
* Dropped patches no longer needed:
    + add_probe_interfaces_setting.diff
    + actually-use-buildflags.diff
    + CVE-2014-9680.patch

71. By Marc Deslauriers on 2015-03-12

* SECURITY UPDATE: arbitrary file access via TZ
  - debian/patches/CVE-2014-9680.patch: sanity check TZ env variable in
    configure, configure.ac, doc/sudoers.cat, doc/sudoers.man.in,
    doc/sudoers.mdoc.in, m4/sudo.m4, pathnames.h.in,
    plugins/sudoers/env.c.
  - CVE-2014-9680

70. By Dimitri John Ledkov on 2014-12-23

Correct sudo.pam use "session" for pam_env.so, not "auth". (LP:
#155794, LP: #25700)

69. By Marc Deslauriers on 2014-10-29

debian/patches/also_check_sudo_group.diff: also check the sudo group
in plugins/sudoers/sudoers.c to create the admin flag file. Leave the
admin group check for backwards compatibility. (LP: #1387347)

68. By Andrey Bondarenko on 2014-08-23

debian/sudo_root.8: mention sudo group instead of deprecated group
admin (LP: #1130643)

67. By Chris J Arges on 2014-02-10

* Merge from Debian unstable. Remaining changes:
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets --enable-admin-flag
    + install man/man8/sudo_root.8 in both flavours
    + install apport hooks
  - debian/sudoers:
    + also grant admin group sudo access
  - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
  - debian/sudo.pam:
    + Use pam_env to read /etc/environment and /etc/default/locale
      environment files. Reading ~/.pam_environment is not permitted due to
      security reasons.
  - debian/control:
    + dh-autoreconf dependency fixes missing-build-dependency-for-dh_-command
  - Remaining patches:
    + keep_home_by_default.patch: Keep HOME in the default environment
    + actually-use-buildflags: Pass LDFLAGS everywhere
    + add_probe_interfaces_setting.diff: option to disable network inf probe
* add_probe_interfaces_setting.diff: fix to not modify NEWS file.

66. By Chris J Arges on 2014-01-28

* Enable and refresh: actually-use-buildflags: Pass LDFLAGS everywhere
* Add the ability to disable network interface probing. This fixes
  performance issues with large number of network interfaces (LP: #1272414)

65. By Chris J Arges on 2014-01-27

* Merge from Debian unstable. Remaining changes:
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets --enable-admin-flag
    + install man/man8/sudo_root.8 in both flavours
    + install apport hooks
  - debian/sudoers:
    + also grant admin group sudo access
  - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
  - debian/sudo.pam:
    + Use pam_env to read /etc/environment and /etc/default/locale
      environment files. Reading ~/.pam_environment is not permitted due to
      security reasons.
  - debian/control:
    + dh-autoreconf dependency fixes missing-build-dependency-for-dh_-command
  - Remaining patches:
    + keep_home_by_default.patch: Keep HOME in the default environment
    + actually-use-buildflags: Pass LDFLAGS everywhere