add sudo, based on http://bugs.busybox.net/view.php?id=511

with minor changes, and updated security patches

package/Config.in

@@ -121,6 +121,7 @@ source "package/slang/Config.in"
 source "package/smartmontools/Config.in"
 source "package/socat/Config.in"
 source "package/strace/Config.in"
+source "package/sudo/Config.in"
 source "package/sysklogd/Config.in"
 source "package/sysvinit/Config.in"
 source "package/tcl/Config.in"

package/sudo/Config.in

@@ -0,0 +1,8 @@
+config BR2_PACKAGE_SUDO
+	bool "sudo"
+	default y
+	help
+	 Sudo is a program designed to allow a sysadmin to give limited root
+	 privileges to users and log root activity.  The basic philosophy is to give
+	 as few privileges as possible but still allow people to get their work done.
+

package/sudo/sudo.mk

@@ -0,0 +1,81 @@
+#############################################################
+#
+# sudo
+#
+#############################################################
+
+SUDO_VER:=1.6.8p9
+SUDO_DIR:=$(BUILD_DIR)/sudo-$(SUDO_VER)
+SUDO_SOURCE:=sudo-$(SUDO_VER).tar.gz
+SUDO_SITE=http://www.courtesan.com/sudo/dist
+SUDO_UNZIP=zcat
+
+$(DL_DIR)/$(SUDO_SOURCE):
+	 $(WGET) -P $(DL_DIR) $(SUDO_SITE)/$(SUDO_SOURCE)
+
+sudo-source: $(DL_DIR)/$(SUDO_SOURCE) $(SUDO_CONFIG_FILE)
+
+$(SUDO_DIR)/.unpacked: $(DL_DIR)/$(SUDO_SOURCE)
+	$(SUDO_UNZIP) $(DL_DIR)/$(SUDO_SOURCE) | tar -C $(BUILD_DIR) $(TAR_OPTIONS) -
+	# Allow sudo patches.
+	toolchain/patch-kernel.sh $(SUDO_DIR) package/sudo sudo\*.patch
+	touch $(SUDO_DIR)/.unpacked
+
+$(SUDO_DIR)/.configured: $(SUDO_DIR)/.unpacked $(SUDO_CONFIG_FILE)
+	(cd $(SUDO_DIR); rm -rf config.cache; \
+		$(TARGET_CONFIGURE_OPTS) \
+		./configure \
+		--target=$(GNU_TARGET_NAME) \
+		--host=$(GNU_TARGET_NAME) \
+		--build=$(GNU_HOST_NAME) \
+		--prefix=/usr \
+		--exec-prefix=/usr \
+		--bindir=/usr/bin \
+		--sbindir=/usr/sbin \
+		--libexecdir=/usr/lib \
+		--sysconfdir=/etc \
+		--datadir=/usr/share \
+		--localstatedir=/var \
+		--mandir=/usr/man \
+		--infodir=/usr/info \
+		$(DISABLE_LARGEFILE) \
+		--without-lecture \
+		--without-sendmail \
+		--without-umask \
+		--with-logging=syslog \
+		--without-interfaces \
+		--disable-authentication \
+		$(SUDO_EXTRA_CONFIG) \
+	);
+
+	touch $(SUDO_DIR)/.configured
+
+$(SUDO_DIR)/sudo: $(SUDO_DIR)/.configured
+	$(MAKE) -C $(SUDO_DIR)
+
+$(TARGET_DIR)/usr/bin/sudo: $(SUDO_DIR)/sudo
+	# Use fakeroot to pretend to do 'make install' as root
+	echo "$(MAKE) DESTDIR="$(TARGET_DIR)" -C $(SUDO_DIR) install" \
+		> $(STAGING_DIR)/.fakeroot.sudo
+
+sudo: uclibc $(TARGET_DIR)/usr/bin/sudo
+
+sudo-clean:
+	rm -f $(TARGET_DIR)/usr/bin/sudo
+	-$(MAKE) -C $(SUDO_DIR) clean
+
+sudo-dirclean:
+	rm -rf $(SUDO_DIR)
+#############################################################
+#
+# Toplevel Makefile options
+#
+#############################################################
+ifeq ($(strip $(BR2_PACKAGE_SUDO)),y)
+TARGETS+=sudo
+endif
+
+ifeq ($(strip $(BR2_PACKAGE_LIBPAM)),y)
+SUDO_EXTRA_CONFIG=--enable-pam
+sudo: libpam
+endif