[csw-maintainers] (now about sudo)

[Sebastian Kayser]

Hi Maciej,

Maciej (Matchek) Blizinski wrote on 15.12.2009 10:03:
> On Thu, Dec 10, 2009 at 7:12 PM, Philip Brown <phil at bolthole.com> wrote:
>> On Thu, Dec 10, 2009 at 10:40 AM, Maciej (Matchek) Blizinski
>> <maciej at opencsw.org> wrote:
>>> On Thu, Dec 10, 2009 at 5:11 PM, Philip Brown <phil at bolthole.com> wrote:
>>>> yes... except if it takes more than a week to implement, in which
>>>> case, I'd say just release new sudo with the symlink in postinstall.
>>>> sudo needs upgrading sooner rather than later, for security reasons, I thought.
>>> There is no security hole, it's even the opposite: ...
>> I meant, I thought there was a version upgrade needed to sudo.
>>
>> huh. interestingly, there wasnt when we started... but there IS now a
>> newer version of sudo.
>>
>> from 4 days ago :-}
> 
> Postinstall also needs to be implemented and tested.  I think that if
> it's a security update it can go without any other changes: preserve
> the existing package structure, upgrade from p1 to p2.  We can quibble
> about symlinks/alternatives later.
> 
> Upgraded sudo packages are in testing/.  Version bump is the only
> change.  I haven't changed any file locations, or permissions, or
> anything else.  Version bump, period.
> 
> I haven't tested these packages, since I'm using my own sudo packages
> at the moment.

would it make sense to add what you are currently maintaing for yourself
to our sudo packages (and then adopt the CSW sudo packages) or are your
changes too custom/environment-specific?

Sebastian