{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "sudo-0.1.9.15p5-4.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-11T18:44:12.759365515Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/sudo-0.1.9.15p5-4.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-sudo-1.9.15p5",
      "name": "sudo",
      "licenseConcluded": "ISC",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "23a72499396e6a37bd196d1f76cc95a678b0611fdc0d1e37d0314cce90eb8cd5"
        }
      ],
      "description": "Sudo is a program designed to allow a sysadmin to give limited root privileges\nto users and log root activity. The basic philosophy is to give as few\nprivileges as possible but still allow people to get their work done.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/sudo@1.9.15p5-4.oe2403sp1?arch=aarch64&epoch=0&upstream=sudo-1.9.15p5-4.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.sudo.ws",
      "licenseDeclared": "ISC",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Allows restricted root access for specified users",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.9.15p5-4.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-audit-libs-3.1.2",
      "name": "audit-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "40e555b0228aa77a31be92091aafcafec7666352bff98095d8227acbac045351"
        }
      ],
      "description": "The audit-libs package contains the dynamic libraries needed for\napplications to use the audit framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/audit-libs@3.1.2-9.oe2403sp1?arch=aarch64&epoch=1&upstream=audit-3.1.2-9.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://people.redhat.com/sgrubb/audit/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Dynamic library for libaudit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.1.2-9.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2101c4dfddc6ceb05b3c5929f46bf4f03d483421b417ef3b156fc38a6f2e52e2"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=aarch64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "2eac576b91f7c5f996a09ed50b523ef670f1eba2b46d32e8493e80ba77f9387c"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-openldap-2.6.5",
      "name": "openldap",
      "licenseConcluded": "OLDAP-2.8",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "6b5bd2cef48889fd1aa9e82c5e259d0ea82d0204784285613b692bdc641b55d8"
        }
      ],
      "description": "OpenLDAP is an open source suite of LDAP (Lightweight Directory Access\nProtocol) applications and development tools. LDAP is a set of\nprotocols for accessing directory services (usually phone book style\ninformation, but other information is possible) over the Internet,\nsimilar to the way DNS (Domain Name System) information is propagated\nover the Internet. The openldap package contains configuration files,\nlibraries, and documentation for OpenLDAP.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/openldap@2.6.5-6.oe2403sp1?arch=aarch64&epoch=0&upstream=openldap-2.6.5-6.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.openldap.org/",
      "licenseDeclared": "OLDAP-2.8",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "LDAP support libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.6.5-6.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "3963902f6adcf673d42391141ba6d43e6410009f1c975929aadc56a6b46a078a"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-12.oe2403sp1?arch=aarch64&epoch=0&upstream=pam-1.5.3-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-zlib-1.2.13",
      "name": "zlib",
      "licenseConcluded": "zlib and Boost",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "22502ddd16b586e2ce55380389d28e89222f5f443659f6d428980dad625c4c20"
        }
      ],
      "description": "Zlib is a free, general-purpose, not covered by any patents, lossless data-compression\nlibrary for use on virtually any computer hardware and operating system. The zlib data\nformat is itself portable across platforms.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/zlib@1.2.13-5.oe2403sp1?arch=aarch64&epoch=0&upstream=zlib-1.2.13-5.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.zlib.net",
      "licenseDeclared": "zlib and Boost",
      "sourceInfo": "acquired package info from repodata DB: repodata/21886cccbebfef01fd8c9ffbdf136561ce8b50eb1d8516669acd0fe126920766-primary.sqlite.bz2",
      "summary": "A lossless data-compression library",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.2.13-5.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-audit-libs-3.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-openldap-2.6.5"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-sudo-1.9.15p5",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-zlib-1.2.13"
    }
  ]
}