Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Jul 2005 13:20:12 +0300
From:      Giorgos Keramidas <keramida@freebsd.org>
To:        Dima Dorfman <dd@freebsd.org>
Cc:        freebsd-security@freebsd.org, Joachim Str?mbergson <watchman@ludd.ltu.se>
Subject:   Re: Adding OpenBSD sudo to the FreeBSD base system?
Message-ID:  <20050721102012.GG16179@beatrix.daedalusnetworks.priv>
In-Reply-To: <20050721101331.GB854@trit.org>
References:  <42DCC503.5000408@ludd.ltu.se> <20050719213356.GA1614@gothmog.gr> <20050721101331.GB854@trit.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2005-07-21 10:13, Dima Dorfman <dd@freebsd.org> wrote:
>Giorgos Keramidas <keramida@freebsd.org> wrote:
>>On 2005-07-19 11:16, Joachim Str?mbergson <watchman@ludd.ltu.se> wrote:
>>> My thought was to sync/import the sudo implementation from
>>> OpenBSD. Bad idea?
>>
>> Maybe not so bad if the OpenBSD version of sudo has useful
>> enhancements of any sort (i.e. has gone through a thorough security
>> audit, or it includes features that are not available through the
>> Ports version,
>
> OpenBSD doesn't have their own version of sudo. The sudo maintainer is
> an OpenBSD committer (millert), and if other OpenBSD guys were to make
> any enhancements, I expect that the changes would quickly find their
> way into the official distribution.
>
> FWIW, I don't see any reason to include sudo in the base system. It's
> something that I install on every computer, but I don't mind building
> the port or installing it from a package. Unlike some of the other
> things I usually want on every system (e.g., emacs), it's small and
> doesn't have any dependencies, so it's not a problem to install it as
> soon as the system is online. That said, I wouldn't object to having
> it in the base, either.

My thoughts exactly.  The only thing I'd like to add is that the port is
that importing it to the base system would probably require someone who
steps up and offers to maintain it as bugfixes/features are noticed in
the upstream source.  But, I guess, this is more or less obvious.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050721102012.GG16179>