[Bug 239629] security/doas: Update to 6.1

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Aug 3 21:00:48 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=239629

            Bug ID: 239629
           Summary: security/doas: Update to 6.1
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs at FreeBSD.org
          Reporter: jsmith at resonatingmedia.com

Created attachment 206256
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=206256&action=edit
Port patch to upgrade port to 6.1

The attached port updates security/doas to upstream version 6.1. This change
introduces two important changes:

1. Most environment variables are no longer copied to the target user's
environment. This avoids corrupting files through use of $HOME, for example.
When environment variables are required, keepenv can be set in the doas.conf
file.

2. The target user's sanitized $PATH can be set at compile time to avoid
passing malicious executables to the target user's path.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list