When using the NOEXEC option I get this error: /libexec/ld-elf.so.1: Cannot open "/usr/local/libexec/sudo_noexec" this is because for some reason the shrext variable in configure.in is empty, thus sudo_noexec.so becomes sudo_noexec The patch is just a workaround. Fix: -- Vasil Dimov moc.elcaro@vomid.lisav Software Developer @ Oracle/Innobase Oy gro.DSBeerF@dv Committer @ FreeBSD.org gro.d5v@dv Home @ Sofia, Bulgaria--TX9B5HYPgxJt22fSCCw13oTI1c2b8FMtoxkoj6gqNlGwdspo Content-Type: text/plain; name="sudo_noexec.diff" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="sudo_noexec.diff" --- sudo/Makefile.orig 2007-08-12 14:42:57.000000000 +0300 +++ sudo/Makefile 2007-08-12 14:46:43.000000000 +0300 @@ -7,7 +7,7 @@ PORTNAME= sudo PORTVERSION= 1.6.9.3 -PORTREVISION= 1 +PORTREVISION= 2 CATEGORIES= security MASTER_SITES= http://www.sudo.ws/sudo/dist/ \ http://probsd.org/sudoftp/ \ @@ -33,7 +33,8 @@ --with-env-editor \ --with-logincap \ --with-long-otp-prompt \ - --with-pam + --with-pam \ + --with-noexec=${PREFIX}/libexec/sudo_noexec.so OPTIONS= LDAP "With LDAP support" off \ INSULTS "With all insults" off \ How-To-Repeat: Use sudo with NOEXEC option in sudoers.
Responsible Changed From-To: freebsd-ports-bugs->tmclaugh Over to maintainer
tmclaugh 2007-08-13 00:14:15 UTC FreeBSD ports repository Modified files: security/sudo Makefile pkg-plist Log: - Work around broken configure script and explicitly set location of sudo_noexec.so to unbreak NOEXEC option. [1] - Build using --with-secure-path if SUDO_SECURE_PATH is set when building the port. SUDO_SECURE_PATH should be set to a PATH string. [2] - Don't bother deleting sudo_noexec.la. Deleting the file after it's installed is ugly and since it's not harmful it's not worth patching the install. - Set CONFIGURE_TARGET. PR: 115442 [1], 115381 [2] Submitted by: vd [1], Janos Mohacsi [2] Revision Changes Path 1.89 +11 -4 ports/security/sudo/Makefile 1.14 +1 -0 ports/security/sudo/pkg-plist _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: open->closed Patch commited to port and committed upstream. Thanks.