From 63abc0a2463d23b57d3d41a1c5224e31e0e0913d Mon Sep 17 00:00:00 2001
From: cvsdist <cvsdist@fedoraproject.org>
Date: Sep 09 2004 12:53:47 +0000
Subject: auto-import changelog data from sudo-1.6.7p5-23.src.rpm

Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-23
- change to default to sysadm_r
- Fix tty handling
Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-22
- Add /bin/sesh to run selinux code.
- replace /bin/bash -c with /bin/sesh
Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-21
- Hard code to use "/bin/bash -c" for selinux
Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-20
- Eliminate closing and reopening of terminals, to match su.
Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-19
- SELinux fixes to make transitions work properly
Fri Mar 05 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-18
- pied sudo
Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt

---

diff --git a/sudo.spec b/sudo.spec
index d35617e..10c0a13 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -4,7 +4,7 @@
 Summary: Allows restricted root access for specified users.
 Name: sudo
 Version: 1.6.7p5
-Release: 16
+Release: 23
 License: BSD
 Group: Applications/System
 Source: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
@@ -13,8 +13,7 @@ URL: http://www.courtesan.com/sudo/
 BuildRoot: %{_tmppath}/%{name}-root
 Requires: /etc/pam.d/system-auth, vim-minimal
 BuildRequires: pam-devel, groff
-Source1: sudo.te
-Source2: sudo.fc
+
 
 %description
 Sudo (superuser do) allows a system administrator to give certain
@@ -35,6 +34,14 @@ on many different machines.
 %endif
 
 %build
+%ifarch s390 s390x
+F_PIE=-fPIE
+%else
+F_PIE=-fpie
+%endif
+
+export CFLAGS="$RPM_OPT_FLAGS $F_PIE" LDFLAGS="-pie" 
+
 %configure \
 	--prefix=%{_prefix} \
 	--sbindir=%{_sbindir} \
@@ -63,13 +70,6 @@ account    required	pam_stack.so service=system-auth
 password   required	pam_stack.so service=system-auth
 session    required	pam_stack.so service=system-auth
 EOF
-%if %{WITH_SELINUX}
-#SELinux
-#mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/security/selinux/src/policy/domains/program/
-#install -c -m644 %SOURCE1 ${RPM_BUILD_ROOT}%{_sysconfdir}/security/selinux/src/policy/domains/program/
-#mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}/security/selinux/src/policy/file_contexts/program
-#install -c -m644 %SOURCE2 ${RPM_BUILD_ROOT}%{_sysconfdir}/security/selinux/src/policy/file_contexts/program
-%endif
 
 
 %clean 
@@ -83,27 +83,39 @@ rm -rf $RPM_BUILD_ROOT
 %dir /var/run/sudo
 %attr(4111,root,root) %{_bindir}/sudo
 %attr(0755,root,root) %{_sbindir}/visudo
+%attr(0755,root,root) %{_sbindir}/sesh
 %{_mandir}/man5/sudoers.5*
 %{_mandir}/man8/sudo.8*
 %{_mandir}/man8/visudo.8*
-%if %{WITH_SELINUX}
-#%{_sysconfdir}/security/selinux/src/policy/domains/program/sudo.te
-#%{_sysconfdir}/security/selinux/src/policy/file_contexts/program/sudo.fc
-%endif 
 
 # Make sure permissions are ok even if we're updating
 %post
 /bin/chmod 0440 /etc/sudoers || :
-%if %{WITH_SELINUX}
-#if test -x /usr/bin/selinuxenabled  && `/usr/bin/selinuxenabled`; then
-#	cd /etc/security/selinux/src/policy
-#	make reload
-#	make file_contexts/file_contexts
-#	setfiles file_contexts/file_contexts /etc/sudoers %{_bindir}/sudo %{_sbindir}/visudo /var/run/sudo
-#fi
-%endif
 
 %changelog
+* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-23
+- change to default to sysadm_r 
+- Fix tty handling
+
+* Thu Mar 18 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-22
+- Add /bin/sesh to run selinux code.
+- replace /bin/bash -c with /bin/sesh
+
+* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-21
+- Hard code to use "/bin/bash -c" for selinux 
+
+* Tue Mar 16 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-20
+- Eliminate closing and reopening of terminals, to match su.
+
+* Mon Mar 15 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-19
+- SELinux fixes to make transitions work properly
+
+* Fri Mar  5 2004 Thomas Woerner <twoerner@redhat.com> 1.6.7p5-18
+- pied sudo
+
+* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
+- rebuilt
+
 * Tue Jan 27 2004 Dan Walsh <dwalsh@redhat.com> 1.6.7p5-16
 - Eliminate interfaces call, since this requires big SELinux privs
 - and it seems to be useless.