updated

system/sudo/files/pam.conf

@@ -0,0 +1,19 @@
+#
+# $FreeBSD: head/security/sudo/files/pam.conf 340872 2014-01-24 00:14:07Z mat $
+#
+# PAM configuration for the "sudo" service
+#
+
+# auth
+auth		include		system
+
+# account
+account		include		system
+
+# session
+# XXX: pam_lastlog (used in system) causes users to appear as though
+# they are no longer logged in in system logs.
+session		required	pam_permit.so
+
+# password
+password	include		system

system/sudo/files/patch-install-sh

@@ -0,0 +1,28 @@
+--- install-sh.orig	2017-01-14 04:30:15 UTC
++++ install-sh
+@@ -171,12 +171,6 @@ if ${DIRMODE} ; then
+ 	if [ ! -d "${DEST}" ] ; then
+ 	    ${MKDIR} "${DEST}" || exit 1
+ 	fi
+-	if ${CHOWNIT} ; then
+-	    ${CHOWN} "${OWNER}" "${DEST}" || exit 1
+-	fi
+-	if ${CHGROUPIT} ; then
+-	    ${CHGRP} "${GROUP}" "${DEST}" || exit 1
+-	fi
+ 	if ${CHMODIT} ; then
+ 	    ${CHMOD} "${MODE}"  "${DEST}" || exit 1
+ 	fi
+@@ -226,12 +220,6 @@ fi
+ ##  Strip and set the owner/mode.
+ if ${STRIPIT} ; then
+     ${STRIP} "${DEST}" || exit 1
+-fi
+-if ${CHOWNIT} ; then
+-    ${CHOWN} "${OWNER}" "${DEST}" || exit 1
+-fi
+-if ${CHGROUPIT} ; then
+-    ${CHGRP} "${GROUP}" "${DEST}" || exit 1
+ fi
+ if ${CHMODIT} ; then
+     ${CHMOD} "${MODE}" "${DEST}" || exit 1

system/sudo/files/patch-plugins__sudoers__sudoers.in

@@ -0,0 +1,27 @@
+--- plugins/sudoers/sudoers.in.orig	2018-01-15 17:30:32 UTC
++++ plugins/sudoers/sudoers.in
+@@ -32,6 +32,14 @@
+ ##
+ ## Defaults specification
+ ##
++## Uncomment if needed to preserve environmental variables related to the
++## FreeBSD pkg utility and fetch.
++# Defaults     env_keep += "PKG_CACHEDIR PKG_DBDIR FTP_PASSIVE_MODE"
++##
++## Additionally uncomment if needed to preserve environmental variables
++## related to portupgrade
++# Defaults     env_keep += "PORTSDIR PORTS_INDEX PORTS_DBDIR PACKAGES PKGTOOLS_CONF"
++##
+ ## You may wish to keep some of the following environment variables
+ ## when running commands via sudo.
+ ##
+@@ -91,6 +99,9 @@ root ALL=(ALL) ALL
+ ## of the user they are running the command as (root by default).
+ # Defaults targetpw  # Ask for the password of the target user
+ # ALL ALL=(ALL) ALL  # WARNING: only use this together with 'Defaults targetpw'
++
++## Uncomment to show on password prompt which users' password is being expected
++# Defaults passprompt="%p's password:"
+ 
+ ## Read drop-in files from @sysconfdir@/sudoers.d
+ ## (the '#' here does not indicate a comment)

system/sudo/files/patch-plugins_sudoers_parse.c

@@ -0,0 +1,11 @@
+--- plugins/sudoers/parse.c.orig	2019-01-22 13:45:48 UTC
++++ plugins/sudoers/parse.c
+@@ -60,7 +60,7 @@ sudoers_lookup_pseudo(struct sudo_nss_list *snl, struc
+     debug_decl(sudoers_lookup_pseudo, SUDOERS_DEBUG_PARSER)
+ 
+     pwcheck = (pwflag == -1) ? never : sudo_defs_table[pwflag].sd_un.tuple;
+-    nopass = (pwcheck == all) ? true : false;
++    nopass = (pwcheck == never) ? true : false;
+ 
+     if (list_pw == NULL)
+ 	SET(validated, FLAG_NO_CHECK);

system/sudo/files/patch-x-ltmain.sh

@@ -0,0 +1,20 @@
+--- ./ltmain.sh.orig	2015-02-28 18:50:58.000000000 +0200
++++ ./ltmain.sh	2015-08-12 17:22:19.429971000 +0200
+@@ -8891,15 +8891,10 @@
+           esac
+ 	  ;;
+ 
+-	freebsd-aout)
+-	  major=.$current
+-	  versuffix=.$current.$revision
+-	  ;;
+-
+-	freebsd-elf)
++	freebsd*)
+ 	  func_arith $current - $age
+ 	  major=.$func_arith_result
+-	  versuffix=$major.$age.$revision
++	  versuffix=$major
+ 	  ;;
+ 
+ 	irix | nonstopux)