mirror of
https://github.com/sudo-project/sudo.git
synced 2025-08-22 18:08:23 +00:00
Add debian 4/5/6 and use the dot when doing version matches
This commit is contained in:
parent
09a6f46511
commit
a7dac1fc25
29
mkpkg
29
mkpkg
@ -1,4 +1,9 @@
|
|||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# Build a binary package using polypkg
|
||||||
|
# Usage: mkpkg
|
||||||
|
#
|
||||||
|
# TODO: add flavors (e.g. LDAP)
|
||||||
|
|
||||||
IFS=
|
IFS=
|
||||||
|
|
||||||
@ -23,7 +28,7 @@ esac
|
|||||||
# Choose configure options by platform.
|
# Choose configure options by platform.
|
||||||
# We use the same configure options as vendor packages when possible.
|
# We use the same configure options as vendor packages when possible.
|
||||||
case "$platform" in
|
case "$platform" in
|
||||||
centos4*|rhel4*)
|
centos4.*|rhel4.*)
|
||||||
# Note, must indent with tabs, not spaces due to IFS trickery
|
# Note, must indent with tabs, not spaces due to IFS trickery
|
||||||
prefix=/usr
|
prefix=/usr
|
||||||
configure_opts="
|
configure_opts="
|
||||||
@ -40,7 +45,7 @@ case "$platform" in
|
|||||||
--with-selinux
|
--with-selinux
|
||||||
--with-passprompt=[sudo] password for %p: "
|
--with-passprompt=[sudo] password for %p: "
|
||||||
;;
|
;;
|
||||||
centos5*|rhel5*)
|
centos5.*|rhel5.*)
|
||||||
# Note, must indent with tabs, not spaces due to IFS trickery
|
# Note, must indent with tabs, not spaces due to IFS trickery
|
||||||
prefix=/usr
|
prefix=/usr
|
||||||
configure_opts="
|
configure_opts="
|
||||||
@ -59,7 +64,7 @@ case "$platform" in
|
|||||||
--with-passprompt=[sudo] password for %p: "
|
--with-passprompt=[sudo] password for %p: "
|
||||||
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
||||||
;;
|
;;
|
||||||
sles9*)
|
sles9.*)
|
||||||
prefix=/usr
|
prefix=/usr
|
||||||
# SuSE doesn't have /usr/libexec
|
# SuSE doesn't have /usr/libexec
|
||||||
case "$platform" in
|
case "$platform" in
|
||||||
@ -84,7 +89,7 @@ case "$platform" in
|
|||||||
|
|
||||||
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
||||||
;;
|
;;
|
||||||
sles10*)
|
sles10.*)
|
||||||
prefix=/usr
|
prefix=/usr
|
||||||
# SuSE doesn't have /usr/libexec
|
# SuSE doesn't have /usr/libexec
|
||||||
case "$platform" in
|
case "$platform" in
|
||||||
@ -92,7 +97,7 @@ case "$platform" in
|
|||||||
*) libexec=lib;;
|
*) libexec=lib;;
|
||||||
esac
|
esac
|
||||||
# Note, must indent with tabs, not spaces due to IFS trickery
|
# Note, must indent with tabs, not spaces due to IFS trickery
|
||||||
# XXX - SuSE uses secure path only for env_reset
|
# XXX - SuSE uses secure path but only for env_reset
|
||||||
configure_opts="
|
configure_opts="
|
||||||
--prefix=$prefix
|
--prefix=$prefix
|
||||||
--libexecdir=$prefix/$libexec/sudo
|
--libexecdir=$prefix/$libexec/sudo
|
||||||
@ -111,7 +116,7 @@ case "$platform" in
|
|||||||
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
||||||
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
||||||
;;
|
;;
|
||||||
sles11*)
|
sles11.*)
|
||||||
prefix=/usr
|
prefix=/usr
|
||||||
# SuSE doesn't have /usr/libexec
|
# SuSE doesn't have /usr/libexec
|
||||||
case "$platform" in
|
case "$platform" in
|
||||||
@ -119,7 +124,7 @@ case "$platform" in
|
|||||||
*) libexec=lib;;
|
*) libexec=lib;;
|
||||||
esac
|
esac
|
||||||
# Note, must indent with tabs, not spaces due to IFS trickery
|
# Note, must indent with tabs, not spaces due to IFS trickery
|
||||||
# XXX - SuSE uses secure path only for env_reset
|
# XXX - SuSE uses secure path but only for env_reset
|
||||||
configure_opts="
|
configure_opts="
|
||||||
--prefix=$prefix
|
--prefix=$prefix
|
||||||
--libexecdir=$prefix/$libexec/sudo
|
--libexecdir=$prefix/$libexec/sudo
|
||||||
@ -139,16 +144,17 @@ case "$platform" in
|
|||||||
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
make_opts='docdir=$(datarootdir)/doc/packages/$(PACKAGE_TARNAME)'
|
||||||
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
export CFLAGS="$F_PIE" LDFLAGS="-pie"
|
||||||
;;
|
;;
|
||||||
deb4*)
|
deb[456].*)
|
||||||
# XXX - create sudo group like debian does
|
# XXX - create sudo group like debian does
|
||||||
# XXX - newer deb moved timestamps to /var/lib/sudo
|
# debian now has a %sudo entry in its sample sudoers
|
||||||
|
# XXX - debian has separate ldap and non-ldap packages
|
||||||
# Note, must indent with tabs, not spaces due to IFS trickery
|
# Note, must indent with tabs, not spaces due to IFS trickery
|
||||||
configure_opts="
|
configure_opts="
|
||||||
--prefix=/usr
|
--prefix=/usr
|
||||||
--with-ldap
|
|
||||||
--with-all-insults
|
--with-all-insults
|
||||||
--with-exempt=sudo
|
--with-exempt=sudo
|
||||||
--with-pam
|
--with-pam
|
||||||
|
--with-ldap
|
||||||
--with-fqdn
|
--with-fqdn
|
||||||
--with-logging=syslog
|
--with-logging=syslog
|
||||||
--with-logfac=authpriv
|
--with-logfac=authpriv
|
||||||
@ -156,9 +162,12 @@ case "$platform" in
|
|||||||
--with-editor=/usr/bin/editor
|
--with-editor=/usr/bin/editor
|
||||||
--with-timeout=15
|
--with-timeout=15
|
||||||
--with-password-timeout=0
|
--with-password-timeout=0
|
||||||
|
--with-passprompt=[sudo] password for %p:
|
||||||
|
--with-timedir=/var/lib/sudo
|
||||||
--disable-root-mailer
|
--disable-root-mailer
|
||||||
--disable-setresuid
|
--disable-setresuid
|
||||||
--with-sendmail=/usr/sbin/sendmail
|
--with-sendmail=/usr/sbin/sendmail
|
||||||
|
--with-ldap-conf-file=/etc/ldap/ldap.conf
|
||||||
--mandir=/usr/share/man
|
--mandir=/usr/share/man
|
||||||
--libexecdir=/usr/lib/sudo
|
--libexecdir=/usr/lib/sudo
|
||||||
--with-secure-path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin"
|
--with-secure-path=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin"
|
||||||
|
15
sudo.pp
15
sudo.pp
@ -43,7 +43,7 @@ still allow people to get their work done."
|
|||||||
|
|
||||||
# Choose the correct PAM file by distro
|
# Choose the correct PAM file by distro
|
||||||
case "$pp_rpm_distro" in
|
case "$pp_rpm_distro" in
|
||||||
centos4*|rhel4*)
|
centos4.*|rhel4.*)
|
||||||
mkdir -p ${pp_destdir}/etc/pam.d
|
mkdir -p ${pp_destdir}/etc/pam.d
|
||||||
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
@ -53,7 +53,7 @@ still allow people to get their work done."
|
|||||||
session required pam_limits.so
|
session required pam_limits.so
|
||||||
EOF
|
EOF
|
||||||
;;
|
;;
|
||||||
centos5*|rhel5*)
|
centos5.*|rhel5.*)
|
||||||
mkdir -p ${pp_destdir}/etc/pam.d
|
mkdir -p ${pp_destdir}/etc/pam.d
|
||||||
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
@ -72,7 +72,7 @@ still allow people to get their work done."
|
|||||||
session required pam_limits.so
|
session required pam_limits.so
|
||||||
EOF
|
EOF
|
||||||
;;
|
;;
|
||||||
sles9*)
|
sles9.*)
|
||||||
mkdir -p ${pp_destdir}/etc/pam.d
|
mkdir -p ${pp_destdir}/etc/pam.d
|
||||||
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
@ -80,7 +80,7 @@ still allow people to get their work done."
|
|||||||
session required pam_limits.so
|
session required pam_limits.so
|
||||||
EOF
|
EOF
|
||||||
;;
|
;;
|
||||||
sles10*|sles11*)
|
sles10.*|sles11.*)
|
||||||
mkdir -p ${pp_destdir}/etc/pam.d
|
mkdir -p ${pp_destdir}/etc/pam.d
|
||||||
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
@ -95,14 +95,17 @@ still allow people to get their work done."
|
|||||||
|
|
||||||
%set [deb]
|
%set [deb]
|
||||||
# Choose the correct PAM file by distro
|
# Choose the correct PAM file by distro
|
||||||
# XXX - missing deb5 and others
|
|
||||||
case "$pp_deb_distro" in
|
case "$pp_deb_distro" in
|
||||||
deb4.*)
|
deb[456].*)
|
||||||
mkdir -p ${pp_destdir}/etc/pam.d
|
mkdir -p ${pp_destdir}/etc/pam.d
|
||||||
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
cat > ${pp_destdir}/etc/pam.d/sudo <<-EOF
|
||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
|
|
||||||
@include common-auth
|
@include common-auth
|
||||||
@include common-account
|
@include common-account
|
||||||
|
|
||||||
|
session required pam_permit.so
|
||||||
|
session required pam_limits.so
|
||||||
EOF
|
EOF
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
Loading…
x
Reference in New Issue
Block a user