Re: Adding OpenBSD sudo to the FreeBSD base system?

From: Constantine A. Murenin (mureninc_at_gmail.com)
Date: 07/20/05

  • Next message: Giorgos Keramidas: "Re: Adding OpenBSD sudo to the FreeBSD base system?" 
    Date: Wed, 20 Jul 2005 16:32:11 -0400
To: Giorgos Keramidas <keramida@freebsd.org>

    On 19/07/05, Giorgos Keramidas <keramida@freebsd.org> wrote:
    > On 2005-07-19 11:16, Joachim Str?mbergson <watchman@ludd.ltu.se> wrote:
    > > Aloha!
    > >
    > > (I've Googled around a bit, but failed to find much previous posts about
    > > this though I'm sure it has been discussed...)
    > >
    > > Have anybody (in core etc) considered adding a sudo implementation to
    > > thr FreeBSD base system. At least for me, sudo is an important part of
    > > implementing good security policy in FreeBSD.
    > >
    > > Yes, it is available as a port, but in a similar fashion of for example,
    > > isn't sudo important enough to be included as an imported tool in the
    > > base system?
    > >
    > > My thought was to sync/import the sudo implementation from OpenBSD. Bad
    > > idea?
    >
    > Maybe not so bad if the OpenBSD version of sudo has useful enhancements
    > of any sort (i.e. has gone through a thorough security audit, or it
    > includes features that are not available through the Ports version,
    > or if the OpenBSD sudo uses a BSD and not an ISC-style license).

    <URL:http://www.openbsd.org/policy.html>:
    > The ISC copyright is functionally equivalent to a two-term BSD copyright with language removed that is made unnecessary by the Berne convention. This is the preferred license for new code incorporated into OpenBSD. A sample license is included in the source tree as /usr/src/share/misc/license.template.

    What's the reason that you'd prefer a BSD-licence over ISC-style licence?

    Cheers,
    Constantine.
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Giorgos Keramidas: "Re: Adding OpenBSD sudo to the FreeBSD base system?"

    Relevant Pages

    • Re: freebsd-security Digest, Vol 120, Issue 1
      ... Adding OpenBSD sudo to the FreeBSD base system? ... Usually I've installed it as a package off the install CD, ...
      (FreeBSD-Security)
    • FW: Adding OpenBSD sudo to the FreeBSD base system?
      ... I really do not agree with adding it to the base system. ... Just because you guys use sudo does not mean other people do. ... Leave sudo in the ports. ... >> something that I install on every computer, ...
      (FreeBSD-Security)
    • Re: Adding OpenBSD sudo to the FreeBSD base system?
      ... >> enhancements of any sort (i.e. has gone through a thorough security ... > OpenBSD doesn't have their own version of sudo. ... I don't see any reason to include sudo in the base system. ...
      (FreeBSD-Security)
    • Re: FW: Adding OpenBSD sudo to the FreeBSD base system?
      ... > the base system with a default configuration that mimics suand thus ... su could become just a symlink to sudo. ... For systems that has use for sudo the increased complexity of a setuid ... the general idea of importing sudo, ...
      (FreeBSD-Security)