[sudo-announce] sudo 1.8.1p2 and 1.7.6p2 released
Todd C. Miller
Todd.Miller at courtesan.com
Tue May 17 11:57:51 EDT 2011
Sudo versions 1.8.1p2 and 1.7.6p2 are now available. This is a
minor bugfix release.
Please note that the Sudo 1.7.x branch is in maintenance mode. It
will still receive bug fixes but most new development happens in
the 1.8.x (stable) branch.
Source:
http://www.sudo.ws/sudo/dist/sudo-1.8.1p2.tar.gz
ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.1p1.tar.gz
http://www.sudo.ws/sudo/dist/sudo-1.7.6p2.tar.gz
ftp://ftp.sudo.ws/pub/sudo/sudo-1.7.6p2.tar.gz
Binary packages:
http://www.sudo.ws/sudo/download.html#binary
For a list of download mirror sites, see:
http://www.sudo.ws/sudo/download_mirrors.html
Sudo web site:
http://www.sudo.ws/sudo/
Sudo web site mirrors:
http://www.sudo.ws/sudo/mirrors.html
Major changes between sudo 1.8.1p2 and 1.8.1p1:
* Two-character CIDR-style IPv4 netmasks are now matched correctly
in the sudoers file.
* A build error with MIT Kerberos V has been resolved.
* A crash on HP-UX in the sudoers plugin when wildcards are
present in the sudoers file has been resolved.
* Sudo now works correctly on Tru64 Unix again.
Major changes between sudo 1.8.1p1 and 1.8.1:
* Fixed a problem on AIX where sudo was unable to set the final
uid if the PAM module modified the effective uid.
* A non-existent includedir is now treated the same as an empty
directory and not reported as an error.
* Removed extraneous parens in LDAP filter when sudoers_search_filter
is enabled that can cause an LDAP search error.
* Fixed a "make -j" problem for "make install".
Major changes between sudo 1.8.1 and 1.8.0:
* A new LDAP setting, sudoers_search_filter, has been added to
ldap.conf. This setting can be used to restrict the set of
records returned by the LDAP query. Based on changes from Matthew
Thomas.
* White space is now permitted within a User_List when used in
conjunction with a per-user Defaults definition.
* A group ID (%#gid) may now be specified in a User_List or Runas_List.
Likewise, for non-Unix groups the syntax is %:#gid.
* Support for double-quoted words in the sudoers file has been fixed.
The change in 1.7.5 for escaping the double quote character
caused the double quoting to only be available at the beginning
of an entry.
* The fix for resuming a suspended shell in 1.7.5 caused problems
with resuming non-shells on Linux. Sudo will now save the process
group ID of the program it is running on suspend and restore it
when resuming, which fixes both problems.
* A bug that could result in corrupted output in "sudo -l" has been
fixed.
* Sudo will now create an entry in the utmp (or utmpx) file when
allocating a pseudo-tty (e.g. when logging I/O). The "set_utmp"
and "utmp_runas" sudoers file options can be used to control this.
Other policy plugins may use the "set_utmp" and "utmp_user"
entries in the command_info list.
* The sudoers policy now stores the TSID field in the logs
even when the "iolog_file" sudoers option is defined to a value
other than %{sessid}. Previously, the TSID field was only
included in the log file when the "iolog_file" option was set
to its default value.
* The sudoreplay utility now supports arbitrary session IDs.
Previously, it would only work with the base-36 session IDs
that the sudoers plugin uses by default.
* Sudo now passes "run_shell=true" to the policy plugin in the
settings list when sudo's -s command line option is specified.
The sudoers policy plugin uses this to implement the "set_home"
sudoers option which was missing from sudo 1.8.0.
* The "noexec" functionality has been moved out of the sudoers
policy plugin and into the sudo front-end, which matches the
behavior documented in the plugin writer's guide. As a result,
the path to the noexec file is now specified in the sudo.conf
file instead of the sudoers file.
* On Solaris 10, the PRIV_PROC_EXEC privilege is now used to
implement the "noexec" feature. Previously, this was implemented
via the LD_PRELOAD environment variable.
* The exit values for "sudo -l", "sudo -v" and "sudo -l command"
have been fixed in the sudoers policy plugin.
* The sudoers policy plugin now passes the login class, if any,
back to the sudo front-end.
* The sudoers policy plugin was not being linked with requisite
libraries in certain configurations.
* Sudo now parses command line arguments before loading any plugins.
This allows "sudo -V" or "sudo -h" to work even if there is a problem
with sudo.conf
* Plugins are now linked with the static version of libgcc to allow
the plugin to run on a system where no shared libgcc is installed,
or where it is installed in a different location.
Major changes between sudo 1.7.6p2 and 1.7.6p1:
* Two-character CIDR-style IPv4 netmasks are now matched correctly
in the sudoers file.
* A build error with MIT Kerberos V has been resolved.
Major changes between sudo 1.7.6p1 and 1.7.6:
* A non-existent includedir is now treated the same as an empty
directory and not reported as an error.
* Removed extraneous parens in LDAP filter when sudoers_search_filter
is enabled that can cause an LDAP search error.
Major changes between sudo 1.7.6 and 1.7.5:
* A new LDAP setting, sudoers_search_filter, has been added to
ldap.conf. This setting can be used to restrict the set of
records returned by the LDAP query. Based on changes from Matthew
Thomas.
* White space is now permitted within a User_List when used in
conjunction with a per-user Defaults definition.
* A group ID (%#gid) may now be specified in a User_List or Runas_List.
Likewise, for non-Unix groups the syntax is %:#gid.
* Support for double-quoted words in the sudoers file has been fixed.
The change in 1.7.5 for escaping the double quote character
caused the double quoting to only be available at the beginning
of an entry.
* The fix for resuming a suspended shell in 1.7.5 caused problems
with resuming non-shells on Linux. Sudo will now save the process
group ID of the program it is running on suspend and restore it
when resuming, which fixes both problems.
* A bug that could result in corrupted output in "sudo -l" has been
fixed.
More information about the sudo-announce
mailing list