Execute some commands as root
Sudo is a command that allows users to execute some commands as root.
The /etc/sudoers file (edited with 'visudo') specifies which users have
access to sudo and which commands they can run. Sudo logs all its
activities to syslogd, so the system administrator can keep an eye on
things. Sudo asks for the password for initializing a check period of a
given time N (where N is defined at installation and is set to 5
minutes by default).
- Sources inherited from project SUSE:SLE-15-SP3:GA
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:15.3/sudo && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| README.SUSE | 0000000400 400 Bytes | |
| README_313276.test | 0000000620 620 Bytes | |
| fate_313276_test.sh | 0000000258 258 Bytes | |
| sudo-1.9.5p2.tar.gz | 0004012277 3.83 MB | |
| sudo-1.9.5p2.tar.gz.sig | 0000000566 566 Bytes | |
| sudo-i.pamd | 0000000255 255 Bytes | |
| sudo-sudoers.patch | 0000004606 4.5 KB | |
| sudo.changes | 0000139575 136 KB | |
| sudo.keyring | 0000004683 4.57 KB | |
| sudo.pamd | 0000000249 249 Bytes | |
| sudo.spec | 0000008211 8.02 KB |
Latest Revision
Gustavo Yokoyama Ribeiro (gyribeiro)
committed
(revision 3)
Update sudo to the latest 1.9.x version [jsc#SLE-16055]
- Update to 1.9.5.p2
* When invoked as sudoedit, the same set of command line
options are now accepted as for sudo -e. The -H and -P
options are now rejected for sudoedit and sudo -e which
matches the sudo 1.7 behavior. This is part of the fix for
CVE-2021-3156.
* Fixed a potential buffer overflow when unescaping backslashes
in the command's arguments. Normally, sudo escapes special
characters when running a command via a shell (sudo -s or
sudo -i). However, it was also possible to run sudoedit with
the -s or -i flags in which case no escaping had actually
been done, making a buffer overflow possible.
This fixes CVE-2021-3156. (bsc#1181090)
* Fixed sudo's setprogname(3) emulation on systems that don't
provide it.
* Fixed a problem with the sudoers log server client where a
partial write to the server could result the sudo process
consuming large amounts of CPU time due to a cycle in the
buffer queue. Bug #954.
* Added a missing dependency on libsudo_util in libsudo_eventlog.
Fixes a link error when building sudo statically.
* The user's KRB5CCNAME environment variable is now preserved
when performing PAM authentication. This fixes GSSAPI
authentication when the user has a non-default ccache.
- Update to 1.9.5.p1
* Fixed a regression introduced in sudo 1.9.5 where the editor run
by sudoedit was set-user-ID root unless SELinux RBAC was in use.
The editor is now run with the user's real and effective user-IDs.
- News in 1.9.5
Comments 0