Skip site navigation (1)Skip section navigation (2) 
Date:      Thu, 21 Jul 2005 10:13:31 +0000
From:      Dima Dorfman <dd@freebsd.org>
To:        Giorgos Keramidas <keramida@freebsd.org>
Cc:        freebsd-security@freebsd.org, Joachim Str?mbergson <watchman@ludd.ltu.se>
Subject:   Re: Adding OpenBSD sudo to the FreeBSD base system?
Message-ID:  <20050721101331.GB854@trit.org>
In-Reply-To: <20050719213356.GA1614@gothmog.gr>
References:  <42DCC503.5000408@ludd.ltu.se> <20050719213356.GA1614@gothmog.gr>
next in thread | previous in thread | raw e-mail | index | archive | help 

--St7VIuEGZ6dlpu13
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Giorgos Keramidas <keramida@freebsd.org> wrote:
> On 2005-07-19 11:16, Joachim Str?mbergson <watchman@ludd.ltu.se> wrote:
> > My thought was to sync/import the sudo implementation from OpenBSD. Bad
> > idea?
>=20
> Maybe not so bad if the OpenBSD version of sudo has useful enhancements
> of any sort (i.e. has gone through a thorough security audit, or it
> includes features that are not available through the Ports version,

OpenBSD doesn't have their own version of sudo. The sudo maintainer is     =
     =20
an OpenBSD committer (millert), and if other OpenBSD guys were to make     =
     =20
any enhancements, I expect that the changes would quickly find their       =
     =20
way into the official distribution.                                        =
     =20
                                                                           =
     =20
FWIW, I don't see any reason to include sudo in the base system. It's      =
     =20
something that I install on every computer, but I don't mind building      =
     =20
the port or installing it from a package. Unlike some of the other         =
     =20
things I usually want on every system (e.g., emacs), it's small and        =
     =20
doesn't have any dependencies, so it's not a problem to install it as      =
     =20
soon as the system is online. That said, I wouldn't object to having       =
     =20
it in the base, either.                                                    =
     =20

Dima.

--St7VIuEGZ6dlpu13
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----

iD8DBQFC33VLBzAFW2n65YIRAg96AKCKdrpt1axxVMhFO9SSU7tnEHTbigCePxFm
BvhoIcgm+X9Zqsr5SXZX/9g=
=30/G
-----END PGP SIGNATURE-----

--St7VIuEGZ6dlpu13--

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050721101331.GB854>