Pisilinux/main
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sudo in pisi-2.0/main

Browse Source
This commit is contained in:
Ertuğrul Erata
2015-07-19 23:43:10 +03:00
parent d07f6d068e
commit aaf3b479e4
9 changed files with 278 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
util/admin/sudo/actions.py
+41
View File
@@ -0,0 +1,41 @@
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Licensed under the GNU General Public License, version 3.
# See the file http://www.gnu.org/licenses/gpl.txt
from pisi.actionsapi import get
from pisi.actionsapi import autotools
from pisi.actionsapi import pisitools
def setup():
pisitools.cflags.add("-fpie")
pisitools.ldflags.add("-pie -Wl,-z,relro -Wl,-z,now")
autotools.autoreconf("-fi")
autotools.configure("--libexecdir=/usr/libexec/sudo \
--with-rundir=/run/sudo \
--with-noexec=/usr/libexec/sudo/sudo_noexec.so \
--with-logging=syslog \
--with-logfac=authpriv \
--with-pam \
--with-pam-login \
--with-linux-audit \
--with-env-editor \
--with-ignore-dot \
--with-tty-tickets \
--with-ldap \
--enable-shell-sets-home \
--without-selinux \
--without-rpath")
pisitools.dosed("libtool", " -shared ", " -Wl,-O1,--as-needed -shared ")
def build():
autotools.make()
def install():
autotools.rawInstall("DESTDIR=%s" % get.installDIR())
pisitools.dodoc("README.LDAP", "README")
util/admin/sudo/comar/package.py
+20
View File
@@ -0,0 +1,20 @@
#/usr/bin/python
import os
permissions = {
"/etc/sudoers" : ["0440", "root:root"],
"/etc/sudoers.d" : ["0750", "root:root"],
"/var/db/sudo" : ["0700", "root:root"],
"/usr/bin/sudo" : ["4111", "root:root"],
"/usr/bin/sudoedit" : ["4111", "root:root"],
"/usr/bin/sudoreplay" : ["0111", "root:root"],
}
def postInstall(fromVersion, fromRelease, toVersion, toRelease):
for _file, perms in permissions.items():
# The list above is general, some paths may not exist depending on the configuration
if os.path.exists(_file):
os.system("/bin/chown -R %s %s" % (perms[1], _file))
os.system("/bin/chmod %s %s" % (perms[0], _file))
util/admin/sudo/files/sudo-i.pamd
+7
View File
@@ -0,0 +1,7 @@
#%PAM-1.0
auth include sudo
account include sudo
password include sudo
session optional pam_keyinit.so force revoke
session required pam_limits.so
util/admin/sudo/files/sudo.pamd
+7
View File
@@ -0,0 +1,7 @@
#%PAM-1.0
auth include system-auth
account include system-auth
password include system-auth
session optional pam_keyinit.so revoke
session required pam_limits.so
util/admin/sudo/files/sudo.tmpfiles.conf
+1
View File
@@ -0,0 +1 @@
d /run/sudo 0711 root root -
util/admin/sudo/files/sudoers
+32
View File
@@ -0,0 +1,32 @@
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#
# Prevent environment variables from influencing programs in an
# unexpected or harmful way (CVE-2005-2959, CVE-2005-4158, CVE-2006-0151)
Defaults always_set_home
Defaults env_reset
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR LS_COLORS"
Defaults env_keep += "MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
Defaults env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES"
Defaults env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
Defaults env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY"
#Defaults env_keep += "XDG_SESSION_COOKIE"
# Comment out the preceding line and uncomment the following one if you need
# to use special input methods. This may allow users to compromise the root
# account if they are allowed to run commands without authentication.
#Defaults env_keep = "LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS XDG_SESSION_COOKIE XMODIFIERS GTK_IM_MODULE QT_IM_MODULE QT_IM_SWITCHER"
# User privilege specification
root ALL=(ALL) ALL
# Uncomment to allow people in group wheel to run all commands
%wheel ALL=(ALL) ALL
# Same thing without a password
#%wheel ALL=(ALL) NOPASSWD: ALL
util/admin/sudo/files/tr.po
+36
View File
@@ -0,0 +1,36 @@
# sudo.
# Copyright (C) 1993-1996,1998-2004 Todd C. Miller <Todd.Miller@courtesan.com>
# This file is distributed under the same license as the sudo package.
# Bahadır Kandemir <bahadir@pardus.org.tr>, 2006.
#
msgid ""
msgstr ""
"Project-Id-Version: sudo\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2006-12-06 17:24+0200\n"
"PO-Revision-Date: 2011-01-07 10:11+0200\n"
"Last-Translator: Bahadır Kandemir <bahadir@pardus.org.tr>\n"
"Language-Team: Bahadır Kandemir <bahadir@pardus.org.tr>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: check.c:138
msgid ""
"\n"
"We trust you have received the usual lecture from the local System\n"
"Administrator. It usually boils down to these three things:\n"
"\n"
" #1) Respect the privacy of others.\n"
" #2) Think before you type.\n"
" #3) With great power comes great responsibility.\n"
"\n"
msgstr ""
"\n"
"Sistem yöneticinizin gerekli bilgilendirmeyi yaptığını varsayıyoruz.\n"
"Bilgilendirme, genellikle aşağıdaki maddelerle ilgilidir:\n"
"\n"
" #1) Diğerlerinin mahremiyetine saygı gösterin.\n"
" #2) Yazmadan önce düşünün.\n"
" #3) Büyük güç büyük sorumluluk getirir.\n"
"\n"
util/admin/sudo/pspec.xml
+126
View File
@@ -0,0 +1,126 @@
<?xml version="1.0" ?>
<!DOCTYPE PISI SYSTEM "http://www.pisilinux.org/projeler/pisi/pisi-spec.dtd">
<PISI>
<Source>
<Name>sudo</Name>
<Homepage>http://www.sudo.ws/</Homepage>
<Packager>
<Name>PisiLinux Community</Name>
<Email>admins@pisilinux.org</Email>
</Packager>
<License>Sudo</License>
<IsA>app:console</IsA>
<Summary>Allows restricted root access for specified users</Summary>
<Description>sudo allows certain users/groups to run commands with root user privileges.</Description>
<Archive sha1sum="6ee1ceaeeb7baee6340f5f5b44aa2b4253931a19" type="targz">http://www.sudo.ws/sudo/dist/sudo-1.8.13.tar.gz</Archive>
<BuildDependencies>
<Dependency>nss-devel</Dependency>
<Dependency>audit-devel</Dependency>
<Dependency>pam-devel</Dependency>
<Dependency>zlib-devel</Dependency>
<Dependency releaseFrom="5">cyrus-sasl-devel</Dependency>
<Dependency releaseFrom="4">openldap-client</Dependency>
</BuildDependencies>
</Source>
<Package>
<Name>sudo</Name>
<RuntimeDependencies>
<Dependency>nss</Dependency>
<Dependency>audit</Dependency>
<Dependency>pam</Dependency>
<Dependency>zlib</Dependency>
<Dependency releaseFrom="5">cyrus-sasl</Dependency>
<Dependency releaseFrom="4">openldap-client</Dependency>
</RuntimeDependencies>
<Files>
<Path fileType="config">/etc</Path>
<Path fileType="config">/usr/lib/tmpfiles.d/sudo.conf</Path>
<Path fileType="executable">/usr/bin</Path>
<Path fileType="executable">/usr/sbin</Path>
<Path fileType="library">/usr/libexec</Path>
<Path fileType="doc">/usr/share/doc</Path>
<Path fileType="localedata">/usr/share/locale</Path>
<Path fileType="man">/usr/share/man</Path>
<Path fileType="data">/run/sudo</Path>
<Path fileType="data">/var/db/sudo</Path>
<Path fileType="header">/usr/include</Path>
</Files>
<AdditionalFiles>
<AdditionalFile owner="root" permission="0440" target="/etc/sudoers">sudoers</AdditionalFile>
<AdditionalFile owner="root" permission="0600" target="/etc/pam.d/sudo">sudo.pamd</AdditionalFile>
<AdditionalFile owner="root" permission="0600" target="/etc/pam.d/sudo-i">sudo-i.pamd</AdditionalFile>
<AdditionalFile owner="root" permission="0644" target="/usr/lib/tmpfiles.d/sudo.conf">sudo.tmpfiles.conf</AdditionalFile>
</AdditionalFiles>
<Provides>
<COMAR script="package.py">System.Package</COMAR>
</Provides>
</Package>
<History>
<Update release="9">
<Date>2015-04-17</Date>
<Version>1.8.13</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="8">
<Date>2014-12-01</Date>
<Version>1.8.11_p2</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="7">
<Date>2014-12-01</Date>
<Version>1.8.11p2</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="6">
<Date>2014-06-18</Date>
<Version>1.8.10_p3</Version>
<Comment>Version bump.</Comment>
<Name>Ayhan Yalçınsoy</Name>
<Email>ayhanyalcinsoy@pisilinux.org</Email>
</Update>
<Update release="5">
<Date>2014-03-29</Date>
<Version>1.8.10_p2</Version>
<Comment>Version bump.</Comment>
<Name>Marcin Bojara</Name>
<Email>marcin@pisilinux.org</Email>
</Update>
<Update release="4">
<Date>2014-02-13</Date>
<Version>1.8.9</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="3">
<Date>2014-01-09</Date>
<Version>1.8.8</Version>
<Comment>Version bump.</Comment>
<Name>Marcin Bojara</Name>
<Email>marcin@pisilinux.org</Email>
</Update>
<Update release="2">
<Date>2013-06-21</Date>
<Version>1.8.7</Version>
<Comment>Version bump.</Comment>
<Name>Yusuf Aydemir</Name>
<Email>yusuf.aydemir@pisilinux.org</Email>
</Update>
<Update release="1">
<Date>2011-02-04</Date>
<Version>1.7.4_p6</Version>
<Comment>First release</Comment>
<Type package="sudo">security</Type>
<Name>Pisi Linux Admins</Name>
<Email>admins@pisilinux.org</Email>
</Update>
</History>
</PISI>
util/admin/sudo/translations.xml
+8
View File
@@ -0,0 +1,8 @@
<?xml version="1.0" ?>
<PISI>
<Source>
<Name>sudo</Name>
<Summary xml:lang="tr">Yönetici haklarıyla komut çalıştırma uygulaması</Summary>
<Description xml:lang="tr">sudo, belirli kullanıcıların ya da kullanıcı gruplarının komut ve uygulamaları yönetici kullanıcı (root) haklarıyla çalıştırmasına izin veren bir konsol uygulamasıdır.</Description>
</Source>
</PISI>