Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sudo for openSUSE:Factory checked in at 2022-11-03 19:13:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sudo (Old) and /work/SRC/openSUSE:Factory/.sudo.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sudo" Thu Nov 3 19:13:03 2022 rev:135 rq:1032755 version:1.9.12 Changes: -------- --- /work/SRC/openSUSE:Factory/sudo/sudo.changes 2022-10-28 19:28:57.678460116 +0200 +++ /work/SRC/openSUSE:Factory/.sudo.new.2275/sudo.changes 2022-11-03 19:13:05.175620040 +0100 @@ -1,0 +2,9 @@ +Tue Nov 1 22:04:32 UTC 2022 - Jason Sikes <jsi...@suse.com> + +- Modified sudo-sudoers.patch + * [bsc#1203978 jsc#PED-260] + * Remove uncommented "Defaults targetpw" portion of /etc/sudo-sudoers file. + * Sudo now asks for the password of the user calling sudo instead of the + target (i.e. root) user. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sudo-sudoers.patch ++++++ --- /var/tmp/diff_new_pack.gdRLta/_old 2022-11-03 19:13:06.023625026 +0100 +++ /var/tmp/diff_new_pack.gdRLta/_new 2022-11-03 19:13:06.027625049 +0100 @@ -52,7 +52,7 @@ ## ## Uncomment to send mail if the user does not enter the correct password. # Defaults mail_badpass -@@ -68,10 +59,16 @@ +@@ -68,7 +59,6 @@ ## Set maxseq to a smaller number if you don't have unlimited disk space. # Defaults log_output # Defaults!/usr/bin/sudoreplay !log_output @@ -60,28 +60,14 @@ # Defaults!REBOOT !log_output # Defaults maxseq = 1000 -+## In the default (unconfigured) configuration, sudo asks for the root password. -+## This allows use of an ordinary user account for administration of a freshly -+## installed system. When configuring sudo, delete the two -+## following lines: -+Defaults targetpw # ask for the password of the target user i.e. root -+ALL ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! -+ - ## - ## Runas alias specification - ## -@@ -87,13 +84,5 @@ root ALL=(ALL:ALL) ALL +@@ -87,9 +84,6 @@ root ALL=(ALL:ALL) ALL ## Same thing without a password # %wheel ALL=(ALL:ALL) NOPASSWD: ALL -## Uncomment to allow members of group sudo to execute any command -# %sudo ALL=(ALL:ALL) ALL - --## Uncomment to allow any user to run sudo if they know the password --## of the user they are running the command as (root by default). --# Defaults targetpw # Ask for the password of the target user --# ALL ALL=(ALL:ALL) ALL # WARNING: only use this together with 'Defaults targetpw' -- - ## Read drop-in files from @sysconfdir@/sudoers.d - @includedir @sysconfdir@/sudoers.d + ## Uncomment to allow any user to run sudo if they know the password + ## of the user they are running the command as (root by default). + # Defaults targetpw # Ask for the password of the target user
