From 47b2df64cf7d4c347f6a3bffb8cacec2122b6bd0 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Thu, 11 Jun 2020 14:57:10 -0600 Subject: [PATCH] Add missing entry for the LDAP/SSSD sudoHost regression. Also add new Romanian translation --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index 8a6830b28..2624f4e9c 100644 --- a/NEWS +++ b/NEWS @@ -44,6 +44,11 @@ What's new in Sudo 1.9.1 kill the command running in the pty, which in the case of "reboot", could lead to the system being in a half-rebooted state. + * Fixed a regression introduced in sudo 1.8.23 in the LDAP and + SSSD back-ends where a missing sudoHost attribute was treated + as an "ALL" wildcard value. A sudoRole with no sudoHost attribute + is now ignored as it was prior to version 1.8.23. + * The audit plugin API has been changed slightly. The sudo front-end now audits an accept event itself after all approval plugins are run and the I/O logging plugins (if any) are opened. This makes