From Todd.Miller at courtesan.com Fri Apr 10 16:49:46 2009 From: Todd.Miller at courtesan.com (Todd C. Miller) Date: Fri, 10 Apr 2009 16:49:46 -0400 Subject: [sudo-workers] Sudo 1.7.1rc1 available Message-ID: <200904102049.n3AKnk3Z021736@core.courtesan.com> The first release candidate of Sudo version 1.7.1 is now available. If no major problems are found, the GA of 1.7.1 will be release in about a week. Download links: http://www.sudo.ws/sudo/dist/beta/sudo-1.7.1rc1.tar.gz ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.7.1rc1.tar.gz Changes from Sudo 1.7.1b5: o Fixes a visudo memory leak in the alias checks. Changes from Sudo 1.7.1b4: o The unused alias checks in visudo now handle the case of an alias referring to another alias. Changes from Sudo 1.7.1b3: o Fixed an LDAP-related compilation problem when the ldap library supports ldap_sasl_interactive_bind_s() but no SASL headers exist. Changes from Sudo 1.7.1b2: o Added support for /etc/netsvc.conf on AIX o Fixed a few K&R compilation issues. Changes from Sudo 1.7.0: o Fixed a crash when sudoers has the wrong user/mode. o Fixed parsing of comments that start with a dash. o Added pwfeedback option to provide visual feedback when the user is entering a password. o Added fast_glob option to use fnmatch() for globbing. When this is enabled, sudo will not check the file system when expanding wild cards. This is faster but a side effect is that relative paths with wild card will no longer work. o Merged in BSM audit support from Christian S.J. Peron. o Fixed a bug in the included version of glob() that broken wild card matching on systems other than BSD and Linux. o Added %h escape (short form of hostname) to the #include directive. o The -k flag may now be specified along with a command, causing the user's timestamp file to be ignored. o Fixed a crash when a PAM module's session action prompts for user input. o Added support for Tivoli-based LDAP START_TLS as seen in AIX. o Sudo now replaces the putenv, setenv and unsetenv functions with its own that operate on its own copy of the environment. From nicksieger at gmail.com Thu Apr 30 14:13:43 2009 From: nicksieger at gmail.com (Nick Sieger) Date: Thu, 30 Apr 2009 13:13:43 -0500 Subject: [sudo-workers] [PATCH] Small patch to sudoers man page Message-ID: I spent a little longer than I would like today sorting out the order of things in the user specification. Rather than just grousing about it on Twitter, a friend suggested I supply a patch. Here's the patch: http://gist.github.com/104582 Feel free to repurpose the wording as you wish. Hopefully you get the idea. Cheers, /Nick