CVS commit: pkgsrc/security/sudo

["Kimmo Suominen" <kim%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kim
Date:           Wed Sep 18 10:07:35 UTC 2024

Modified Files:
        pkgsrc/security/sudo: Makefile

Log Message:
sudo: Append ${PREFIX} directories to the default secure_path

Now that secure_path is enabled in the default sudoers file as of
sudo version 1.9.16, it seems important to me to include the pkgsrc
${PREFIX}/sbin and ${PREFIX}/bin in it.


To generate a diff of this commit:
cvs rdiff -u -r1.203 -r1.204 pkgsrc/security/sudo/Makefile

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/sudo/Makefile
diff -u pkgsrc/security/sudo/Makefile:1.203 pkgsrc/security/sudo/Makefile:1.204
--- pkgsrc/security/sudo/Makefile:1.203 Sun Sep 15 15:22:56 2024
+++ pkgsrc/security/sudo/Makefile       Wed Sep 18 10:07:35 2024
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.203 2024/09/15 15:22:56 adam Exp $
+# $NetBSD: Makefile,v 1.204 2024/09/18 10:07:35 kim Exp $
 
 DISTNAME=      sudo-1.9.16
+PKGREVISION=   1
 CATEGORIES=    security
 MASTER_SITES=  https://www.sudo.ws/dist/
 MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/
@@ -25,12 +26,23 @@ CONFIGURE_ARGS+=    --with-nbsdops
 CONFIGURE_ARGS+=       --libexecdir=${PREFIX}/lib # for a bunch of shared libs
 CONFIGURE_ARGS+=       --with-rundir=${VARBASE}/run/sudo
 CONFIGURE_ARGS+=       --with-logpath=${VARBASE}/log/sudo.log
+CONFIGURE_ARGS+=       --with-secure-path-value=${SUDO_SECURE_PATH_DIRS:ts:}
 # to always install man instead of cat
 CONFIGURE_ENV+=                NROFFPROG=${CAT:Q}
 CONFIGURE_ENV+=                mansectsu=8
 CONFIGURE_ENV+=                mansectform=5
 TEST_TARGET=           check
 
+# Append ${PREFIX} directories to the default secure_path
+SUDO_SECURE_PATH_DIRS= /usr/local/sbin
+SUDO_SECURE_PATH_DIRS+=        /usr/local/bin
+SUDO_SECURE_PATH_DIRS+=        /usr/sbin
+SUDO_SECURE_PATH_DIRS+=        /usr/bin
+SUDO_SECURE_PATH_DIRS+=        /sbin
+SUDO_SECURE_PATH_DIRS+=        /bin
+SUDO_SECURE_PATH_DIRS+=        ${PREFIX}/sbin
+SUDO_SECURE_PATH_DIRS+=        ${PREFIX}/bin
+
 .include "../../mk/bsd.prefs.mk"
 
 PLIST_VARS+=           noexec