moving sudo to ports

2015-06-18 Thread Todd C. Miller
After discussions with Theo we've agreed to move sudo from base to ports. That way people who want sudo can run a modern version, as opposed to the ancient thing in base. This also makes it possible to have an ldap flavor. I need some help from ports@ to make this happen. I have the beginnings

Re: moving sudo to ports

2015-06-18 Thread Todd C. Miller
With some help from espie@ I've got the sudo port in what I think is fairly good shape. I've included a tarball of it below. The port includes a few patches from the upcoming sudo 1.8.14 release to make packaging it easier and to support overriding LIBTOOL. - todd sudo.tgz Description: applic

Re: moving sudo to ports

2015-06-19 Thread Craig Skinner
On 2015-06-18 Thu 14:38 PM |, Todd C. Miller wrote: > After discussions with Theo we've agreed to move sudo from base to > ports. That way people who want sudo can run a modern version, as > opposed to the ancient thing in base. Superb. http://marc.info/?l=openbsd-bugs&m=142270265216628&w=2 Tha

Re: moving sudo to ports

2015-06-19 Thread Jérémie Courrèges-Anglas
"Todd C. Miller" writes: > With some help from espie@ I've got the sudo port in what I think > is fairly good shape. I've included a tarball of it below. > > The port includes a few patches from the upcoming sudo 1.8.14 release > to make packaging it easier and to support overriding LIBTOOL. A

Re: moving sudo to ports

2015-06-19 Thread Todd C. Miller
On Sat, 20 Jun 2015 02:38:35 +0200, =?utf-8?Q?J=C3=A9r=C3=A9mie_Courr=C3=A8ges- Anglas?= wrote: > - the certificate for https://www.sudo.ws can't be validated by ftp(1), > download falls back to FTP sites. I'll just make this http:// then. > - s/Execute/execute/ in COMMENT (I don't think this

Re: moving sudo to ports

2015-06-19 Thread Todd C. Miller
Updated port incorporating feedback from jca@. I no longer have a real vax to test with but I've verified that it works as expected with NO_SHARED_LIBS=yes - todd sudo.tgz Description: application/tar-gz

Re: moving sudo to ports

2015-06-20 Thread Jérémie Courrèges-Anglas
"Todd C. Miller" writes: > Updated port incorporating feedback from jca@. > > I no longer have a real vax to test with but I've verified that it > works as expected with NO_SHARED_LIBS=yes ok to import it, though you might want to get more reviews. Is there a timeline for the sudo->doas transit

Re: moving sudo to ports

2015-06-20 Thread Theo de Raadt
> Is there a timeline for the sudo->doas transition? The sudo port could > be imported early, I'd say. I think we should create the gap, first. I am not positive if doas is exactly the right path replacement. I still wish there was some sort of privsep for the parsing. And about whether this s

Re: moving sudo to ports

2015-06-20 Thread Stuart Henderson
On 2015/06/20 02:38, Jérémie Courrèges-Anglas wrote: > - the certificate for https://www.sudo.ws can't be validated by ftp(1), > download falls back to FTP sites. The CA is in cert.pem, but the webserver is missing the intermediate cert, adding the contents of https://www.startssl.com/certs/sub.