id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
8428	sudo-1.8.18p1	Douglas R. Reno	bdubbs@…	"New point release

{{{

    When sudo_noexec.so is used, the WRDE_NOCMD flag is now added if the wordexp() function is called. This prevents commands from being run via wordexp() without disabling it entirely.

    On Linux systems, sudo_noexec.so now uses a seccomp filter to disable execute access if the kernel supports seccomp. This is more robust than the traditional method of using stub functions that return an error. 


}}}
"	enhancement	closed	normal	8.0	BOOK	SVN	medium	fixed