From b35e86b2602452063f9ce32ce35f51bfaf433b34 Mon Sep 17 00:00:00 2001
From: Bruce Dubbs <bdubbs@linuxfromscratch.org>
Date: Wed, 18 Jan 2006 01:44:31 +0000
Subject: [PATCH] Add security patch to sudo (thanks Archaic)

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@5573 af4574ff-66df-0310-9fd7-8a98e5e911e0
---
 introduction/welcome/changelog.xml |  5 ++++-
 postlfs/security/sudo.xml          | 10 +++++-----
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 0c462d8b58..79b7fe98f6 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -40,10 +40,13 @@
     </listitem>
 
 -->
-
     <listitem>
       <para>January 17th, 2006</para>
       <itemizedlist>
+        <listitem>
+          <para>[bdubbs] - Added patch to clear selected environment variables.
+          Submitted by archaic.</para>
+        </listitem>
         <listitem>
           <para>[randy] - Updated to the HTML::TableExtract-2.06 Perl Module
           and added new modules HTML::Element::Extended and HTML::Tree as
diff --git a/postlfs/security/sudo.xml b/postlfs/security/sudo.xml
index b164ad0e89..6e8feb3e01 100644
--- a/postlfs/security/sudo.xml
+++ b/postlfs/security/sudo.xml
@@ -61,20 +61,19 @@
       </listitem>
     </itemizedlist>
 
-<!--
     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing='compact'>
       <listitem>
         <para>Required patch: <ulink
-        url="&patch-root;/sudo-&sudo-version;-xxxx-1.patch"/></para>
+        url="&patch-root;/sudo-&sudo-version;-envar_fix-1.patch"/></para>
       </listitem>
     </itemizedlist>
+<!--
     <bridgehead renderas="sect3">Sudo Dependencies</bridgehead>
 
     <bridgehead renderas="sect4">Optional</bridgehead>
-
-
 -->
+
   </sect2>
 
   <sect2 role="installation">
@@ -83,7 +82,8 @@
     <para>Install <application>sudo</application> by running
     the following commands:</para>
 
-<screen><userinput>./configure --prefix=/usr --libexecdir=/usr/lib \
+<screen><userinput>patch -Np1 -i ../sudo-&sudo-version;-envar_fix-1.patch &amp;&amp;
+./configure --prefix=/usr --libexecdir=/usr/lib \
     --enable-noargs-shell --with-ignore-dot --with-all-insults \
     --enable-shell-sets-home &amp;&amp;
 make</userinput></screen>