[sudo-users] sudo 1.8.10rc1 released
Todd C. Miller
Todd.Miller at courtesan.com
Tue Feb 18 11:20:36 MST 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[ Forwarding to sudo-users for wider testing ]
The first release candidate for sudo 1.8.10 is now available. The
biggest change in 1.8.10 is a new time stamp file format that uses
the monotonic clock where available.
Source:
http://www.sudo.ws/sudo/dist/beta/sudo-1.8.10rc1.tar.gz
ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.8.10rc1.tar.gz
SHA256 checksum:
1d70661bd0dbe981b07f0f0bdc76e81492e65b1b04024db2e679e16870440be7
MD5 checksum:
eb235538bd0eefe66ab96583eb2a4436
Binary packages:
http://www.sudo.ws/sudo/dist/beta/packages/index.html#binary
For a list of download mirror sites, see:
http://www.sudo.ws/sudo/download_mirrors.html
Sudo web site:
http://www.sudo.ws/sudo/
Sudo web site mirrors:
http://www.sudo.ws/sudo/mirrors.html
Major changes between sudo 1.8.10rc1 and 1.8.10b4:
* Updated translations from translationproject.org.
* Sudo is once again able to open the sudoers file when the group
on sudoers doesn't match the expected value, so long as the file
is not group writable.
* Sudo now installs an init.d script to clear the time stamp
directory at boot time on AIX and HP-UX systems. These systems
either lack /var/run or do not clear it on boot.
Major changes between sudo 1.8.10b4 and 1.8.10b3:
* Updated translations from translationproject.org.
* Fixed a hang (infinite stack recursion) in the getenv() hook on
HP-UX when sudo was built with gcc and linked with the LDAP
libraries.
Major changes between sudo 1.8.10b3 and 1.8.10b2:
* LDAP-based sudoers now uses a default search filter of
(objectClass=sudoRole) for more efficient queries. The netgroup
query has been modified to avoid falling below the minimum length
for OpenLDAP substring indices.
* The new "use_netgroups" sudoers option can be used to explicitly
enable or disable netgroups support. For LDAP-based sudoers,
netgroup support requires an expensive substring match on the
server. If netgroups are not needed, this option can be disabled
to reduce the load on the LDAP server.
Major changes between sudo 1.8.10b2 and 1.8.10b1:
* Sudo now uses inet_pton() for decoding IPv4 addresses. A
version is included for systems without it.
* If sudo was started in the background and needed to prompt for
a password, it was not possible to suspend it at the password
prompt. This now works properly.
Major changes between sudo 1.8.10b1 and 1.8.9:
* It is now possible to disable network interface probing in
sudo.conf by changing the value of the probe_interfaces
setting.
* When listing a user's privileges (sudo -l), the sudoers plugin
will now prompt for the user's password even if the targetpw,
rootpw or runaspw options are set.
* The sudoers plugin uses a new format for its time stamp files.
Each user now has a single file which may contain multiple records
when per-tty time stamps are in use (the default). The time
stamps use a monotonic timer where available and are once again
located in a directory under /var/run. The lecture status is
now stored separately from the time stamps in a different directory.
* sudo's -K option will now remove all of the user's time stamps,
not just the time stamp for the current terminal. The -k option
can be used to only disable time stamps for the current terminal.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (OpenBSD)
iEYEARECAAYFAlMDpG8ACgkQWonfon7kcMSTwwCgquQM+PdTtKmdX91FvOyVi4aa
fqQAnjVnsxLU5PAae1igawKI4llawq3h
=BUGD
-----END PGP SIGNATURE-----
More information about the sudo-users
mailing list