mirror of
https://github.com/sudo-project/sudo.git
synced 2025-08-31 14:25:15 +00:00
Add 1.8.16 changes
This commit is contained in:
38
NEWS
38
NEWS
@@ -1,3 +1,41 @@
|
|||||||
|
What's new in Sudo 1.8.16
|
||||||
|
|
||||||
|
* Fixed a compilation error on Solaris 10 with Stun Studio 12.
|
||||||
|
Bug #727
|
||||||
|
|
||||||
|
* When preserving variables from the invoking user's environment, if
|
||||||
|
there are duplicates sudo now only keeps the first instance.
|
||||||
|
|
||||||
|
* Fixed a bug that could cause warning mail to be sent in list
|
||||||
|
mode (sudo -l) for users without sudo privileges when the
|
||||||
|
LDAP and sssd backends are used.
|
||||||
|
|
||||||
|
* Fixed a bug that prevented the "mail_no_user" option from working
|
||||||
|
properly with the LDAP backend.
|
||||||
|
|
||||||
|
* In the LDAP and sssd backends, white space is now ignored between
|
||||||
|
an operator (!, +, +=, -=) when parsing a sudoOption.
|
||||||
|
|
||||||
|
* It is now possible to disable Path settings in sudo.conf
|
||||||
|
by omitting the path name.
|
||||||
|
|
||||||
|
* The sudoedit_checkdir Defaults option is now enabled by default
|
||||||
|
and has been extended. When editing files with sudoedit, each
|
||||||
|
directory in the path to be edited is now checked. If a directory
|
||||||
|
is writable by the invoking user, symbolic links will not be
|
||||||
|
followed. If the parent directory of the file to be edited is
|
||||||
|
writable, sudoedit will refuse to edit it.
|
||||||
|
Bug #707
|
||||||
|
|
||||||
|
* The netgroup_tuple Defaults option has been added to enable matching
|
||||||
|
of the entire netgroup tuple, not just the host or user portion.
|
||||||
|
Bug #717
|
||||||
|
|
||||||
|
* When matching commands based on the SHA2 digest, sudo will now
|
||||||
|
use fexecve(2) to execute the command if it is available. This
|
||||||
|
fixes a time of check versus time of use race condition when the
|
||||||
|
directory holding the command is writable by the invoking user.
|
||||||
|
|
||||||
What's new in Sudo 1.8.15
|
What's new in Sudo 1.8.15
|
||||||
|
|
||||||
* Fixed a bug that prevented sudo from building outside the source tree
|
* Fixed a bug that prevented sudo from building outside the source tree
|
||||||
|
13
doc/UPGRADE
13
doc/UPGRADE
@@ -3,12 +3,13 @@ Notes on upgrading from an older release
|
|||||||
|
|
||||||
o Upgrading from a version prior to 1.8.16:
|
o Upgrading from a version prior to 1.8.16:
|
||||||
|
|
||||||
The meaning of the sudoedit_checkdir sudoers option has changed
|
When editing files with sudoedit, files in a directory that is
|
||||||
in 1.8.16. Previously, it would only check the parent directory
|
writable by the invoking user may no longer be edited by default.
|
||||||
of the file to be edited. In 1.8.16 and higher all directories
|
Also, sudoedit will refuse to follow a symbolic link in the
|
||||||
in the path to be edited are checked and sudoedit will refuse
|
path to be edited if that directory containing the link is
|
||||||
to follow a symbolic link in a directory that is writable by
|
writable by the user. This behavior can be disabled by negating
|
||||||
the invoking user.
|
the sudoedit_checkdir sudoers option, which is now enabled by
|
||||||
|
default.
|
||||||
|
|
||||||
o Upgrading from a version prior to 1.8.15:
|
o Upgrading from a version prior to 1.8.15:
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user