commit:     221eb139027c9465d2162572dfb99534cd3e46f5
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Tue Jun  7 01:48:13 2022 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Tue Jun  7 01:59:08 2022 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=221eb139

app-admin/sudo: add 1.9.11

Closes: https://bugs.gentoo.org/604240
Closes: https://bugs.gentoo.org/546670
Signed-off-by: Sam James <sam <AT> gentoo.org>

 app-admin/sudo/Manifest                                 | 2 ++
 app-admin/sudo/{sudo-9999.ebuild => sudo-1.9.11.ebuild} | 7 +++++++
 app-admin/sudo/sudo-9999.ebuild                         | 7 +++++++
 3 files changed, 16 insertions(+)

diff --git a/app-admin/sudo/Manifest b/app-admin/sudo/Manifest
index a97888761fb0..554d2b55438d 100644
--- a/app-admin/sudo/Manifest
+++ b/app-admin/sudo/Manifest
@@ -1,4 +1,6 @@
 DIST sudo-1.9.10.tar.gz 4516568 BLAKE2B 
94d97379e31b41917616a829cbece3d3fce7dd6ab9d04791b928981c14249c306508298655c19dc59a054ccf7deed4e69e65367cbfe9f6d8b5aba8895cfa6064
 SHA512 
65cf92b67b64413cb807da8b9602fc90b75e5b30dd1402d682ca36f276a3d6209a8a59c14e463898abc9856bc56263e5ba4bb6d44774f56a2885a9eea4a35375
 DIST sudo-1.9.10.tar.gz.sig 566 BLAKE2B 
808919c826faa4f63efc283461f9f2089fd745aaf7462bcc41c505e7f978e7d56307202f96548d95844c99236fec10cada8438b935a1e1b6ea3601ee857d6900
 SHA512 
4ea0b736783b8e7be47645f770d7684d99c31f901177d3527f1ff78f5126d41592a94d36c67762bf5cb941eed80b9f585637aaa81d7f4920576d31a83f447323
+DIST sudo-1.9.11.tar.gz 4822882 BLAKE2B 
5b6b0345d923935c022705b2f65d2b27f4b9fa332dd4cb386584cf3388571c23a52a689565822306cf6f801d49c23117f6df2c30f1875ead2c8d3d42d5d86f0d
 SHA512 
ed6f04f8f6dedeb837720524ca7e6137ca62977f739cf78e10f9502855be8af07b76a4ece422d4d7dcc0d34949606f9805bd5ebd623bfa25bfa89e19c45cacbd
+DIST sudo-1.9.11.tar.gz.sig 566 BLAKE2B 
495058445cfbad7bf1db4f8a4fb2efe8d0549fdb2a0d35938ea986576fd39e4cf47a28e55819e937b9f4a3dddf556cb9eeb4ff03feddd60fd89c7c37e9254d28
 SHA512 
35d608c031816dfec5251e2dd1ed3ea2bc979db77f65803b7fa879429241188c79769fb32b58909f3dd39838cb27bf8266a5f518590bbaf5b16113bfc93025c3
 DIST sudo-1.9.8p2.tar.gz 4302256 BLAKE2B 
ba40df539b3466bebe0d876ef4f1809867125e83983609eae0447f933fbd499b2eda88d2f6c475779654e68af9580a2998eca3c3f7953129ff73c923e1c88ad9
 SHA512 
899b252e8c219226f658dff3dd34c97b07d42004998b45175b4c0c4de42a6bf9f909598e99b4056fa1171e63378e203854b0f8608b0f5c1b00e9d3677818f6d3
 DIST sudo-1.9.8p2.tar.gz.sig 566 BLAKE2B 
1e1cf69ea391602a214aef253a19fff2e26a908ffd9f5e54f2eeb20245f9518fde7d8417e7160b33d1067916fc7cd3df0b59e626d54d24dc8c6453a0efa95200
 SHA512 
18a7170a4654ff22b23181f589ae2115acd2d635d94977586aa15093bb5144f947584588ae03fc2dd941fb934fac4d9fa689b3fd5a4ef0295156e5b9772b8126

diff --git a/app-admin/sudo/sudo-9999.ebuild b/app-admin/sudo/sudo-1.9.11.ebuild
similarity index 95%
copy from app-admin/sudo/sudo-9999.ebuild
copy to app-admin/sudo/sudo-1.9.11.ebuild
index fd7eea23ad7c..dda0650bd5fc 100644
--- a/app-admin/sudo/sudo-9999.ebuild
+++ b/app-admin/sudo/sudo-1.9.11.ebuild
@@ -136,6 +136,13 @@ src_configure() {
        # until `make` time, so we have to use a full path here rather than
        # basing off other values.
        myeconfargs=(
+               # We set all of the relevant options by ourselves (patched
+               # into the toolchain) and setting these in the build system
+               # actually causes a downgrade when using e.g. 
-D_FORTIFY_SOURCE=3
+               # (it'll downgrade to =2). So, this has no functional effect on
+               # the hardening for users. It's safe.
+               --disable-hardening
+
                # requires some python eclass
                --disable-python
                --enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d

diff --git a/app-admin/sudo/sudo-9999.ebuild b/app-admin/sudo/sudo-9999.ebuild
index fd7eea23ad7c..dda0650bd5fc 100644
--- a/app-admin/sudo/sudo-9999.ebuild
+++ b/app-admin/sudo/sudo-9999.ebuild
@@ -136,6 +136,13 @@ src_configure() {
        # until `make` time, so we have to use a full path here rather than
        # basing off other values.
        myeconfargs=(
+               # We set all of the relevant options by ourselves (patched
+               # into the toolchain) and setting these in the build system
+               # actually causes a downgrade when using e.g. 
-D_FORTIFY_SOURCE=3
+               # (it'll downgrade to =2). So, this has no functional effect on
+               # the hardening for users. It's safe.
+               --disable-hardening
+
                # requires some python eclass
                --disable-python
                --enable-tmpfiles.d="${EPREFIX}"/usr/lib/tmpfiles.d

Reply via email to