[csw-maintainers] (now about sudo)

[Maciej (Matchek) Blizinski]

On Thu, Dec 10, 2009 at 7:12 PM, Philip Brown <phil at bolthole.com> wrote:
> On Thu, Dec 10, 2009 at 10:40 AM, Maciej (Matchek) Blizinski
> <maciej at opencsw.org> wrote:
>> On Thu, Dec 10, 2009 at 5:11 PM, Philip Brown <phil at bolthole.com> wrote:
>>>
>>> yes... except if it takes more than a week to implement, in which
>>> case, I'd say just release new sudo with the symlink in postinstall.
>>> sudo needs upgrading sooner rather than later, for security reasons, I thought.
>>
>> There is no security hole, it's even the opposite: ...
>
> I meant, I thought there was a version upgrade needed to sudo.
>
> huh. interestingly, there wasnt when we started... but there IS now a
> newer version of sudo.
>
> from 4 days ago :-}

Postinstall also needs to be implemented and tested.  I think that if
it's a security update it can go without any other changes: preserve
the existing package structure, upgrade from p1 to p2.  We can quibble
about symlinks/alternatives later.

Upgraded sudo packages are in testing/.  Version bump is the only
change.  I haven't changed any file locations, or permissions, or
anything else.  Version bump, period.

I haven't tested these packages, since I'm using my own sudo packages
at the moment.  Would you please test the packages if they work for
you?

Maciej