From 747c340591adccb9f34908e56b1330f4f7b0ba7f Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Mon, 6 Nov 2023 10:14:03 -0700 Subject: [PATCH] Sudo now logs the submitenv in the JSON logs. --- NEWS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS b/NEWS index b3eb6587c..88465d843 100644 --- a/NEWS +++ b/NEWS @@ -78,6 +78,11 @@ What's new in Sudo 1.9.15 disabled. Previously, "command not allowed" would be logged and the user had no way of knowing what the actual problem was. + * Sudo will now log the invoking user's environment as "submitenv" + in the JSON logs. The command's environment ("runenv") is no + longer logged for commands rejected by the sudoers file or an + approval plugin. + What's new in Sudo 1.9.14p3 * Fixed a crash with Python 3.12 when the sudo Python python is