The fix for bug #989 will make sudo 1.9.8.

Also mention intercept_authenticate and intercept_allow_setid.
This commit is contained in:
Todd C. Miller
2021-08-19 09:54:18 -06:00
parent 90aee138ba
commit 09f160779b

10
NEWS
View File

@@ -23,6 +23,12 @@ What's new in Sudo 1.9.8
would only apply intercept mode to user "chuck" when running one would only apply intercept mode to user "chuck" when running one
of the listed shells. of the listed shells.
In intercept mode, sudo will not prompt for a password before
running a sub-command and will not allow a set-user-ID or
set-group-ID program to be run by default. The new
intercept_authenticate and intercept_allow_setid sudoers settings
can be used to change this behavior.
* The new "log_children" sudoers setting can be used to log commands * The new "log_children" sudoers setting can be used to log commands
run in a privileged shell. It uses the same mechanism as the run in a privileged shell. It uses the same mechanism as the
intercept support described above and has the same limitations. intercept support described above and has the same limitations.
@@ -46,6 +52,10 @@ What's new in Sudo 1.9.8
No overflow was possible since the correct amount of memory was No overflow was possible since the correct amount of memory was
already pre-allocated. already pre-allocated.
* The mksigname and mksiglist helper programs are now built with
the host compiler, not the target compiler, when cross-compiling.
Bug #989.
What's new in Sudo 1.9.7p2 What's new in Sudo 1.9.7p2
* When formatting JSON output, octal numbers are now stored as * When formatting JSON output, octal numbers are now stored as