src/usr.bin/sudo/CHANGES - diff

Return to CHANGES CVS log

Up to [local] / src / usr.bin / sudo

Diff for /src/usr.bin/sudo/Attic/CHANGES between version 1.23 and 1.24

-version 1.23, 2003/05/08 20:55:05
+version 1.24, 2004/09/28 15:10:50
 Line 552
 Line 552
 Line 552
 ) interfaces.c should work on ISC UN*X again.
-) All source files are <= 14 characters for old SYSV filesystems.
+) All source files are <= 14 characters for old SYSV file systems.
  CHANGES from sudo 1.3.7 GAMMA
 Line 1470
 Line 1470
 Line 1470
  Sudo 1.6.4p1 released.
-) Some special characters were not being escaped properly (e..g '\,')
+) Some special characters were not being escaped properly (e.g. '\,')
       in command line arguments and would cause a syntax error instead.
 ) "sudo -l" would not work if the always_set_home option was set.
 Line 1632
 Line 1632
 Line 1632
  Sudo 1.6.7p5 released.
-) BSD-style warn/err functions are now used throughout.
+) Fixed a problem on FreeBSD when the user is only listed in NIS (not
+      master.passwd) and netgroups are used in the master.passwd file.
+) BSD-style warn/err functions are now used throughout.
+) Fixed the --with-stow configure option
+) Added a "sudo_lecture" option that points to a file containing a custom
+      lecture.
+) The username in a log entry is no longer truncated at 8 characters.
+) A new tag, NOEXEC, will prevent a dynamically-linked program being run
+      by sudo from executing another program (think shell escapes).
+      Because this uses LD_PRELOAD it has no effect on static binaries.
+      Idea from Reznic Valery.
+) TIS fwtk authentication now supports fwtk 2.0 and higher.
+) Sudo will now try to stat the command to be run as the user
+      specified by the -u flag if the stat fails as root.  Fixes
+      an NFS issue.
+) Added Stan Lee / Uncle Ben quote to the lecture (from RedHat).
+) Added a -i option to simulate an initial login similar to "su -".
+      Originally based on a patch from David J. MacKenzie.
+) Added a -e option to edit files the with uid of the invoking user.
+      This prevents the user from editing other files or running commands
+      as the target user.  If sudo is run as "sudoedit" the -e flag is implied.
+) If sudo is used to run as root shell, further sudo commands will
+      be logged as run by the user specified by the SUDO_USER environment
+      variable.  In -e mode (sudoedit), SUDO_USER is used to determine
+      what user to run the editor when the real uid is 0.
+) Merged in LDAP support from Aaron Spangler.
+) Added the --with-pc-insults configure to replace politically
+      incorrect insults with ones from Alek O. Komarnitsky.
+) Added start_tls support from Gudleik Rasch <gudleik@rastamatra.org>.
+) A uid specified in sudoers now matches the user specified by the
+      -u flag even if the -u flag specified a name, not a uid.
+) /tmp/.odus is no longer used for timestamps by default.  One of
+      /var/run/sudo, /var/adm/sudo or /usr/adm/sudo is used depending
+      on what directories exist.
+) Quoting globbing characters with a backslash now works as documented.
+) A negated user/uid in a runas list was not treated the same as a
+      negated command (it did not override a previously allowed entry).
+      Now it does.
+) Added support for Tandem NSK and other systems w/o seteuid().
+) The timeout on password reading is now done via alarm(), not select().
+) Fixed several issues when closing all open descriptors.  Sudo now uses
+      closefrom() if it exists, using /proc/$$/fd if possible.
+) Use PATH_MAX, not MAXPATHLEN since the former is standardized.
+) Added a check in visudo for runas_default being used before it
+      was set.
+) If the target user == invoking user a password is no longer required.
+) PAM support now uses Use pam_acct_mgmt() to check for disabled accounts
+     (from Brian Farrell).
+) The sudoers file is now parsed as the runas user in all cases instead
+      of root.  This fixes some issues with running NFS-mounted commands.
+) Sudo now produces a sensible error message when the targetpw
+      Defaults option is set and a non-existent uid is specified via -u.
+ Sudo 1.6.8 released.
+) Now find the command base and fill in struct stat earlier.
+) sudoedit now re-opens the temp file as the invoking user.
+) struct timespec is used throughout the code base.
+) Added --with-ldap-conf-file option to override /etc/ldap.conf
+) Added SSL tls_* certificate checking options when using LDAP.
+) Sudoedit will now only attempt to edit regular files or links.
+) Sudo now uses futime() or futimes() where possible.
+) Updated sample.pam to a current version.
+) Better detection of unchanged files in sudoedit.