On Fri, Feb 6, 2015 at 7:02 PM, Christian Kastner wrote:
> I've looked into this now, and I believe that the --compare-versions
> issue and the chown/chmod issue is all there is to this bug. I have
> attached a new debdiff (v2) with fixes for both.

I reviewed your proposed changes, but I don't think it's the right
approach.  The origin of the problem is that the md5sum of
/etc/sudoers is the same for wheezy and later, so the logic intended
to back it up only for wheezy ends up incorrectly backing it up in
jessie and later too.

The solution I propose to modify /etc/sudoers so that it has a
different checksum, which prevents the incorrect backup.  Please see
attached.

I plan to upload this fix to unstable in a few days if there isn't any feedback.

Best wishes,
Mike
diff -Nru sudo-1.8.11p2/debian/changelog sudo-1.8.11p2/debian/changelog
--- sudo-1.8.11p2/debian/changelog	2014-12-21 18:56:21.000000000 +0000
+++ sudo-1.8.11p2/debian/changelog	2015-02-22 00:49:23.000000000 +0000
@@ -1,3 +1,11 @@
+sudo (1.8.11p2-1.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Modify /etc/sudoers so it has a different checksum than wheezy, which
+    prevents it from being incorrectly removed (closes: #776137).
+
+ -- Michael Gilbert <mgilb...@debian.org>  Sun, 22 Feb 2015 00:30:33 +0000
+
 sudo (1.8.11p2-1.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru sudo-1.8.11p2/debian/sudoers sudo-1.8.11p2/debian/sudoers
--- sudo-1.8.11p2/debian/sudoers	2014-10-30 18:24:17.000000000 +0000
+++ sudo-1.8.11p2/debian/sudoers	2015-02-22 00:48:04.000000000 +0000
@@ -1,4 +1,3 @@
-#
 # This file MUST be edited with the 'visudo' command as root.
 #
 # Please consider adding local content in /etc/sudoers.d/ instead of

Reply via email to