Opened 4 years ago

Closed 4 years ago

#12965 closed enhancement (fixed)

sudo-1.8.30

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 9.1
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (3)

comment:1 by Bruce Dubbs, 4 years ago

What's new in Sudo 1.8.30

  • Fixed a warning on macOS introduced in sudo 1.8.29 when sudo attempts to set the open file limit to unlimited.
  • Sudo now closes file descriptors before changing uids. This prevents a non-root process from interfering with sudo's ability to close file descriptors on systems that support the prlimit(2) system call.
  • Sudo now treats an attempt to run "sudo sudoedit" as simply "sudoedit". If the sudoers file contains a fully-qualified path to sudoedit, sudo will now treat it simply as "sudoedit" (with no path). Visudo will will now treat a fully-qualified path to sudoedit as an error.
  • Fixed a bug introduced in sudo 1.8.28 where sudo would warn about a missing /etc/environment file on AIX and Linux when PAM is not enabled.
  • Fixed a bug on Linux introduced in sudo 1.8.29 that prevented the askpass program from running due to an unlimited stack size resource limit.
  • If a group provider plugin has optional arguments, the argument list passed to the plugin is now NULL terminated as per the documentation.
  • The user's time stamp file is now only updated if both authentication and approval phases succeed. This is consistent with the behavior of sudo prior to version 1.8.23.
  • The new allow_unknown_runas_id sudoers setting can be used to enable or disable the use of unknown user or group IDs. Previously, sudo would always allow unknown user or group IDs if the sudoers entry permitted it, including via the "ALL" alias. As of sudo 1.8.30, the admin must explicitly enable support for unknown IDs.
  • The new runas_check_shell sudoers setting can be used to require that the runas user have a shell listed in the /etc/shells file. On many systems, users such as "bin", do not have a valid shell and this flag can be used to prevent commands from being run as those users.
  • Fixed a problem restoring the SELinux tty context during reboot if mctransd is killed before sudo finishes.
  • Fixed an intermittent warning on NetBSD when sudo restores the initial stack size limit.

comment:2 by Bruce Dubbs, 4 years ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned

comment:3 by Bruce Dubbs, 4 years ago

Resolution: fixed
Status: assignedclosed

Fixed at revision 22533.

Note: See TracTickets for help on using tickets.