upgrading sudo to 1.6.8p12

[Sunny Jaisinghani]

Hello All,

Currently i am having sudo 1.6.6 installed on my server.

i want to upgrage it to 1.6.8p12 and install it under /opt/iexpress

the sudoers file is under /etc

shall i install the iexpress depot directly or is there any way to remove the old sudo version.

what will be the effect on links and binaries using sudo if i install the iexpress depot directly

Regards
Sunny

[Steven E. Protter · Accepted solution]

Shalom,

Yes, iexpress works better than the porting center version.

You will need to migrate your current configuration post installation. Back up the sudoers file and then do this:

1) remove old version of sudo
2) install new ixexpress version of sudo
3) Modify the new configuration files and add your old customizations.

SEP

[Sunny Jaisinghani]

Hi,

Can you please explain me how do i remove old sudo. i cannot see sudo in swlist or sam.

also please explain the 3rd point you mentioned.

thanks

[Sunny Jaisinghani]

Also i want to set the protection scheme for sudoers as PAM.

Do we have to set this during installation or is it a post installation job.

If it is done after the installation please guide me to do it.

Regards

[Venkat_11]

Hey Sunny...Here you go...

1. Login as root
2. Backup your sudoers file. The sudoers file can be either in /etc or /opt/iexpress/sudo/etc
3. Remove current version of sudo

i) If sudo was installed from a package then remove the old version using swremove
ii) If sudo was not installed from a package them manually remove the binaries such as /opt/sudo/bin/sudo, /opt/sudo/sbin/visudo & the man pages.

4. Install the new iexpress sudo 1.6.8p12 version from the security bundle in the iexpress package using swinstall
5. Modify the new sudoers file under /opt/iexpress/sudo/etc and also customize it according to your previous settings
6. Set the permissions of sudoers as 440
7. Set the protection scheme of sudoers as PAM
8. Check if the sudo binaries are correctly linked. If not then create links for sudo & visudo in /usr/bin & /usr/sbin respectively.

/usr/bin/sudo -> /opt/iexpress/sudo/bin/sudo
/usr/sbin/visudo -> /opt/iexpress/sudo/sbin/visudo

9. Also add man path - /opt/iexpress/sudo/man into MANPATH environment.

[Sunny Jaisinghani]

Thanks Venkat