Version bump

Package-Manager: portage-2.2.18/cvs/Linux x86_64
Manifest-Sign-Key: 0x981CA6FC

3 files changed, 218 insertions, 15 deletions

diff --git a/app-admin/sudo/ChangeLog b/app-admin/sudo/ChangeLog
index 5694b95a8b30..ca5403d058d8 100644
--- a/app-admin/sudo/ChangeLog
+++ b/app-admin/sudo/ChangeLog
@@ -1,6 +1,11 @@
 # ChangeLog for app-admin/sudo
 # Copyright 1999-2015 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.378 2015/02/10 08:48:37 polynomial-c Exp $
+# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/ChangeLog,v 1.379 2015/03/29 11:01:51 polynomial-c Exp $
+
+*sudo-1.8.13 (29 Mar 2015)
+
+  29 Mar 2015; Lars Wendler <polynomial-c@gentoo.org> +sudo-1.8.13.ebuild:
+  Version bump.
 
 *sudo-1.8.12 (10 Feb 2015)
 
diff --git a/app-admin/sudo/Manifest b/app-admin/sudo/Manifest
index a3ad6d051200..17299df2ca2d 100644
--- a/app-admin/sudo/Manifest
+++ b/app-admin/sudo/Manifest
@@ -4,25 +4,27 @@ Hash: SHA256
 DIST sudo-1.8.11p1.tar.gz 2402012 SHA256 44c275772595a119185336164bb76b6e08f23d38aa0fe0d6bab48812e75d6a43 SHA512 47e49c854698268733d5a79e2ddcb8a23d6cf032fc5f79621318eddda6caac400d9db54b9239b605a1c2b11935e366177b0adadee5fbf1872ffbdc9b16c67cf2 WHIRLPOOL 451a86cf5046440ef7c5ee2640e2bf7d434c9f78748ae1ca2ac8433acb367f6148949b4b9ff4fbf22e5c9d6f834d45c525d749ee2cdc50bb3f5f7f1eb1c776be
 DIST sudo-1.8.11p2.tar.gz 2402235 SHA256 8133849418fa18cf6b6bb6893d1855ff7afe21db8923234a00bf045c90fba1ad SHA512 fdd6c14c3738cb7bafec9873c49f96270fdd36c72d14d3fc7e1ef3651275961bf17550ac1f56ed445b394985cbbf602b88f52cda1226e9007bed14a4d4fadbaa WHIRLPOOL a00fcdd34247f1efce2f22e98dea0be7b3109c7448ce749781ed9fe54c8d5f61a0fa922f09a5cda9c962eec230aa8e087b1fa118af6ff29d0f5db8929ccc1d34
 DIST sudo-1.8.12.tar.gz 2493373 SHA256 163b51841de8ad19276581a6782d61f5948f1f72a0a843371a1c167d3dc4f3b0 SHA512 1815343eceb7cfa6e37c961ce1c68cf96fc290356b92078d6d24a2c85d8b7a7236df78d3ff7f5e30eba492dc8407346d884e01c0b989eef4414156cfec80b67b WHIRLPOOL 0d9e618937a08b9bf74aaebf12f5b9f96afd827728f90fa95b6a2a4f932cc84240d56674aa903062247068ec5aa3369b14bad64130caeb313330286510c2d3f6
+DIST sudo-1.8.13.tar.gz 2515307 SHA256 e374e5edf2c11c00d6916a9f51cb0ad15e51c7b028370fa15169b07e61e05a25 SHA512 d5498ce8136e903a5ee9e6b1e9b69149b2268798f0678bf7fa82d56947c60d0dec1d7ee25df382e2ee05ecb660720af6b6bc24ad1b6493834e158ee3b186d03c WHIRLPOOL b06256020e5c21159f1b7ff7a9849053f89e95c58fce850653e60d625ad71f8cf9caf9421765398ed73d2ca4756483dcd9535dc856e681dc3b8d7c1206ae5553
 EBUILD sudo-1.8.11_p1.ebuild 5619 SHA256 7fe3889f35f4d05dcfb225444a07ee3febecdb17500ddf748a49679412b4808b SHA512 281274e107ac2d171a5c3806c1c69d858378aa1bc49d92ea83ff11d320f25c47c019b45d56bf260cb00193a5c2e225e410ca42b74fef70300bdb71595b11d2fc WHIRLPOOL 0fcdf075445d6d8302c23d1e8d51d6a2153fe5d80d9fb5c496807e1a2606c43a2a5c0058c847ba432b93c48f8e5886be7879cc2a557fc7b41ba802dd74502761
 EBUILD sudo-1.8.11_p2.ebuild 5637 SHA256 323373903e9c1dfe7ca033bad8ea257f50d34fb8dd0e03e277ad1a91e3b5b685 SHA512 8baa6413d284acc8ebde0e3c695451fd55b853870192c394f6175a99274edb6840aca318b3741476f195f98680b84e5de7824cd1a5a9f246795591b283389dc1 WHIRLPOOL 593ae254cb03a27a2480bf084f6d82a3247cf0c1c69437e1d63aed2ace76ad554c435e9e647baf55b060978a75f7d71cb5eac4704439cfa001ccbb4d39c21e30
 EBUILD sudo-1.8.12.ebuild 5637 SHA256 787cc126eda7a96a5e0563ebc1e219d54b41e466fe5f604aa6a8d0d84f52f579 SHA512 b25dafb5929dfe32dc3da9a192d66d9e31797ac3e656114cff3fd6803edb40fe118a21d48727dd85787d173b1b33000627815cb01cf49125d4e5e9dd59db9f20 WHIRLPOOL b3e451fa756eafc000d1d4480951cb54f33589a4fd59ff1edb20607f6753e62d8c5414035653a65e891d3ea398bd523cffa1039c658cab242ebb38db3d3b044e
-MISC ChangeLog 54696 SHA256 a27f1d7a4b36ce27652d3897c0987a0fefd3915fac5a6c3667263a7390df3feb SHA512 d66656c748aaa4c1a85e0953e9433d88224029af44e81fe925146014c05d8be2dc6dc0f580189e3cd7d4e5e71da67ca4c05499513cd9d1dd7e0efccb4a07a86d WHIRLPOOL 33012eb622d6d7b31a32f8f3943da9e35545190d4f95788fa3846175b798b37e9a0b2358923463d2963bd2adff41791bc9d3595863f71471b98e7c3d6f9dfe8b
+EBUILD sudo-1.8.13.ebuild 5637 SHA256 e1451074e1055d96a8d3862a681a509e5085d7de809b12f7195f99fd2f3163ec SHA512 a80e61868555083f9453104bad3fbc6e2bfd1af641a07429c676c1e9c804cebe8cb080a0614aaf8ef13927644e59f8330f24b74b17d7b75e4700a247533d8330 WHIRLPOOL 6b0a641ccb091a03c673f0f4adfc4634d0877b862b6391b03bfb784e9cd722d0aa890ffc752175c3e7ec0556729332cfb4e2ef23f3a2701007086fc93f34a7e4
+MISC ChangeLog 54816 SHA256 48799fd1f4e7386445766171bb5c55789c6279233afeb64c5d2aadeda154b26b SHA512 eff9dc776ed4b0416684913477d4c5d03e18789cb32e273195c02770168391bc6be9c667f5a5136d9d97504e572a837e06bc8c9ff36c8d9924d0ce15ce04f766 WHIRLPOOL daa8046e6f50b7c3706f0055106ec52ff6fe7a0ed65f1b99529d05abb7def61e766036e39507371c25afd4e24af53d5d84221fcf99f86d166f1808819c6c8934
 MISC metadata.xml 726 SHA256 242e8a573d76b2163a928259e5226fff2c237b3e9c244860a1430fa79c5b390e SHA512 d0a7e5f53ec823d84e3c38c2bd64ba566d7cbd08c12ebf3e9b9fed10b77ce2e3e951e262f1a307aa8f0819a662559ca6f9bcf86cf05088480413e4534ce299d3 WHIRLPOOL b919b1825e68eb3285523f057fc42b5fde9e59a738ecdb1de0835af827db6284fc66848a10517a215389c4466f21b70e376f3fffc993aa338e47fca971d0af83
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v2
 
-iQIcBAEBCAAGBQJU2cXmAAoJEPiazRVxLXTF3GoQAIVoU5INCZ3L3R2vYzTyOXur
-V8sjkPCQw6I1RCkP41IbehTJQzPXuH9oonxind7yy3kcqQsjGYt3dv+pKnPrToPJ
-+GmsKBBIoSay46iRTDyPVkkRVoyAbTt/M/CLDI/rS7zi6IMBmBdQJc/JselSBGUa
-9X6nQZOg9XptD5t1AVl3rZAuoEDMXCtncProppVYkf/k2OL7CWm0bueNiyvVHvyQ
-2kMsJMu1qLG+a9HNwJHImTZ5Z5l4r/u28PXDKqrLDIKL4SF440A+aZnu0kbRDT96
-kNxysWiZYrj3jNvj2+bxg5Q3Jc98LcW0vRuNnQni8Yz1bkI0huzxDBp/UqCdLCPZ
-91PeoJDsQwJZzY4g/JJnT5gVTBC+MaVrlxk8pnwc+8rJ+ohIhreLpJrqEfnXBOaU
-LsIeqB4gIOhe3ZAHNDqOr4F7JJRvOHDBKpCpJIxWw5SMoSuf78dIaSHoBSkPFM1h
-VxfmHmfuXWih4UurBm9kf0bUGeFVUsGtlwl3Vbv8wPNXv/3D3K1NF6wRd7Erfkbm
-qY4WZb+uwYeiCeSLWYeJBmr9LUOc1JI1TjbXKkhToQGTZigh2S8TS+Jb6TWGHz0P
-/pfsNCsXqQ/cd6Q+bl6q4BxdtZKjgJiu3/gh4N2dpdf8UKucIicM8BR3JMhDfpro
-NJLcRbe0RHRZjfXacctB
-=HE35
+iQIcBAEBCAAGBQJVF9ugAAoJEPiazRVxLXTF0G0P/0Wu808JSQoNmvT7GceaJheT
+ZsJV6h4yz9OTmrBz6jmrH51i4BcJVpg6KK5KIzInQzanoBc1pUyYpMzLIBwQlv4/
+CtDwMmn2KOrwjHxw8dOCANeoG0fIhfCAVAK8jYJtuUQKyOuicVmMfLE7iP/2WnZd
+z+16HBNGxXDsz/+9OywCqo7blQhCepYXhWH26Ulv4HceSSUNBEr5YQV9+5Gdlq3W
+4seTUbSXIaR+ET5vvCQHdZAKCOJhPqoK1e9B204tZVMQiq8GJGzWBMDy/aHnxVZ6
+fscGcgKMNV3Ecv658GwbJ9MOKo+II9p9/TOr2VC71x3ZydHm9b9JOQQ5dBezBqLC
+r782tEfXUf2hMduNMyG6BkXBx1LBlr/QI4trTMr7KVE02i9pwv2cAENQvO2mor87
+O15iQ4xNvOmaNo3xha0Ahe7s0fRtvUm8Sgcf0uK2Dt93Z8fuO2M15crkaoSiWVRo
++UNgZ+M58p1CBAnB79Mv3fNa3LQNCOD08LuIz146Zgn/4zHOoOgaypkGaqN0mari
+7miP2/V5TavDHUsfUYCeDaXYlphDDS06Jr9Aw1/EiNKQabgFphALaC1EfcgQKI4s
+mKvblCHe5FxiS77ClEUw9IhkQeF4wqkQq/4WwPBEztZLdQwdgJ7KuU+v5+ERKCoj
+sBj7yqMwwLgn09KsgEv/
+=sOfW
 -----END PGP SIGNATURE-----
diff --git a/app-admin/sudo/sudo-1.8.13.ebuild b/app-admin/sudo/sudo-1.8.13.ebuild
new file mode 100644
index 000000000000..081c231d75dd
--- /dev/null
+++ b/app-admin/sudo/sudo-1.8.13.ebuild
@@ -0,0 +1,196 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/app-admin/sudo/sudo-1.8.13.ebuild,v 1.1 2015/03/29 11:01:51 polynomial-c Exp $
+
+EAPI=5
+
+inherit eutils pam multilib libtool
+
+MY_P=${P/_/}
+MY_P=${MY_P/beta/b}
+
+uri_prefix=
+case ${P} in
+*_beta*|*_rc*) uri_prefix=beta/ ;;
+esac
+
+DESCRIPTION="Allows users or groups to run commands as other users"
+HOMEPAGE="http://www.sudo.ws/"
+SRC_URI="http://www.sudo.ws/sudo/dist/${uri_prefix}${MY_P}.tar.gz
+	ftp://ftp.sudo.ws/pub/sudo/${uri_prefix}${MY_P}.tar.gz"
+
+# Basic license is ISC-style as-is, some files are released under
+# 3-clause BSD license
+LICENSE="ISC BSD"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~x64-freebsd ~sparc-solaris"
+IUSE="ldap nls pam offensive selinux skey +sendmail"
+
+DEPEND="pam? ( virtual/pam )
+	skey? ( >=sys-auth/skey-1.1.5-r1 )
+	ldap? (
+		>=net-nds/openldap-2.1.30-r1
+		dev-libs/cyrus-sasl
+	)
+	sys-libs/zlib"
+RDEPEND="${DEPEND}
+	selinux? ( sec-policy/selinux-sudo )
+	ldap? ( dev-lang/perl )
+	pam? ( sys-auth/pambase )
+	>=app-misc/editor-wrapper-3
+	virtual/editor
+	sendmail? ( virtual/mta )"
+DEPEND="${DEPEND}
+	sys-devel/bison"
+
+S=${WORKDIR}/${MY_P}
+
+REQUIRED_USE="pam? ( !skey ) skey? ( !pam )"
+
+MAKEOPTS+=" SAMPLES="
+
+src_prepare() {
+	elibtoolize
+}
+
+set_rootpath() {
+	# FIXME: secure_path is a compile time setting. using ROOTPATH
+	# is not perfect, env-update may invalidate this, but until it
+	# is available as a sudoers setting this will have to do.
+	einfo "Setting secure_path ..."
+
+	# first extract the default ROOTPATH from build env
+	ROOTPATH=$(unset ROOTPATH; . "${EPREFIX}"/etc/profile.env; echo "${ROOTPATH}")
+	if [[ -z ${ROOTPATH} ]] ; then
+		ewarn "	Failed to find ROOTPATH, please report this"
+	fi
+
+	# then remove duplicate path entries
+	cleanpath() {
+		local newpath thisp IFS=:
+		for thisp in $1 ; do
+			if [[ :${newpath}: != *:${thisp}:* ]] ; then
+				newpath+=:$thisp
+			else
+				einfo "   Duplicate entry ${thisp} removed..."
+			fi
+		done
+		ROOTPATH=${newpath#:}
+	}
+	cleanpath /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/opt/bin${ROOTPATH:+:${ROOTPATH}}
+
+	# finally, strip gcc paths #136027
+	rmpath() {
+		local e newpath thisp IFS=:
+		for thisp in ${ROOTPATH} ; do
+			for e ; do [[ $thisp == $e ]] && continue 2 ; done
+			newpath+=:$thisp
+		done
+		ROOTPATH=${newpath#:}
+	}
+	rmpath '*/gcc-bin/*' '*/gnat-gcc-bin/*' '*/gnat-gcc/*'
+
+	einfo "... done"
+}
+
+src_configure() {
+	local ROOTPATH
+	set_rootpath
+
+	# audit: somebody got to explain me how I can test this before I
+	# enable it.. - Diego
+	# plugindir: autoconf code is crappy and does not delay evaluation
+	# until `make` time, so we have to use a full path here rather than
+	# basing off other values.
+	econf \
+		--enable-zlib=system \
+		--with-secure-path="${ROOTPATH}" \
+		--with-editor="${EPREFIX}"/usr/libexec/editor \
+		--with-env-editor \
+		$(use_with offensive insults) \
+		$(use_with offensive all-insults) \
+		$(use_with ldap ldap_conf_file /etc/ldap.conf.sudo) \
+		$(use_with ldap) \
+		$(use_enable nls) \
+		$(use_with pam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_with sendmail) \
+		--without-opie \
+		--without-linux-audit \
+		--with-rundir="${EPREFIX}"/var/run/sudo \
+		--with-vardir="${EPREFIX}"/var/db/sudo \
+		--with-plugindir="${EPREFIX}"/usr/$(get_libdir)/sudo \
+		--docdir="${EPREFIX}"/usr/share/doc/${PF}
+}
+
+src_install() {
+	default
+
+	if use ldap ; then
+		dodoc README.LDAP doc/schema.OpenLDAP
+		dosbin plugins/sudoers/sudoers2ldif
+
+		cat <<-EOF > "${T}"/ldap.conf.sudo
+		# See ldap.conf(5) and README.LDAP for details
+		# This file should only be readable by root
+
+		# supported directives: host, port, ssl, ldap_version
+		# uri, binddn, bindpw, sudoers_base, sudoers_debug
+		# tls_{checkpeer,cacertfile,cacertdir,randfile,ciphers,cert,key
+		EOF
+
+		insinto /etc
+		doins "${T}"/ldap.conf.sudo
+		fperms 0440 /etc/ldap.conf.sudo
+	fi
+
+	pamd_mimic system-auth sudo auth account session
+
+	keepdir /var/db/sudo
+	fperms 0700 /var/db/sudo
+
+	# Don't install into /var/run as that is a tmpfs most of the time
+	# (bug #504854)
+	rm -rf "${D}"/var/run
+}
+
+pkg_postinst() {
+	if use ldap ; then
+		ewarn
+		ewarn "sudo uses the /etc/ldap.conf.sudo file for ldap configuration."
+		ewarn
+		if grep -qs '^[[:space:]]*sudoers:' "${ROOT}"/etc/nsswitch.conf ; then
+			ewarn "In 1.7 series, LDAP is no more consulted, unless explicitly"
+			ewarn "configured in /etc/nsswitch.conf."
+			ewarn
+			ewarn "To make use of LDAP, add this line to your /etc/nsswitch.conf:"
+			ewarn "  sudoers: ldap files"
+			ewarn
+		fi
+	fi
+	if use prefix ; then
+		ewarn
+		ewarn "To use sudo, you need to change file ownership and permissions"
+		ewarn "with root privileges, as follows:"
+		ewarn
+		ewarn "  # chown root:root ${EPREFIX}/usr/bin/sudo"
+		ewarn "  # chown root:root ${EPREFIX}/usr/lib/sudo/sudoers.so"
+		ewarn "  # chown root:root ${EPREFIX}/etc/sudoers"
+		ewarn "  # chown root:root ${EPREFIX}/etc/sudoers.d"
+		ewarn "  # chown root:root ${EPREFIX}/var/db/sudo"
+		ewarn "  # chmod 4111 ${EPREFIX}/usr/bin/sudo"
+		ewarn
+	fi
+
+	elog "To use the -A (askpass) option, you need to install a compatible"
+	elog "password program from the following list. Starred packages will"
+	elog "automatically register for the use with sudo (but will not force"
+	elog "the -A option):"
+	elog ""
+	elog " [*] net-misc/ssh-askpass-fullscreen"
+	elog "     net-misc/x11-ssh-askpass"
+	elog ""
+	elog "You can override the choice by setting the SUDO_ASKPASS environmnent"
+	elog "variable to the program you want to use."
+}