Differential D3625

Update sudo to 1.8.24
ClosedPublic
Actions

Authored by kyrios123 on Aug 18 2018, 6:58 PM.

Details

Reviewers

DataDrake

Group Reviewers

Triage Team

Commits

R2974:b2bcbd5ceb1a: Update sudo to 1.8.24

Summary

Major changes between version 1.8.24 and 1.8.23:

The LDAP and SSS back-ends now use the same rule evaluation code as the sudoers file backend. This builds on the work in sudo 1.8.23 where the formatting functions for sudo -l output were shared. The handling of negated commands in SSS and LDAP is unchanged.
Fixed a regression introduced in 1.8.23 where sudo -i could not be used in conjunction with --preserve-env=VARIABLE.
cvtsudoers can now parse base64-encoded attributes in LDIF files.
Random insults are now more random.
Added SUDO_CONV_PREFER_TTY flag for conversation function to tell sudo to try writing to /dev/tty first. Can be used in conjunction with SUDO_CONV_INFO_MSG and SUDO_CONV_ERROR_MSG.
Fixed typos in the OpenLDAP sudo schema.
Fixed a race condition when building with parallel make.
Fixed a duplicate free when netgroup_base in ldap.conf is set to an invalid value.
On systems using PAM, sudo now ignores the PAM_NEW_AUTHTOK_REQD and PAM_AUTHTOK_EXPIRED errors from PAM account management if authentication is disabled for the user. This fixes a regression introduced in sudo 1.8.23.
Fixed an ambiguity in the sudoers manual in the description and definition of User, Runas, Host, and Cmnd Aliases.
Fixed a bug that resulted in only the first window size change event being logged.
Fixed a compilation problem on systems that define O_PATH or O_SEARCH in fnctl.h but do not define O_DIRECTORY.

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

$ sudo --version
Sudo version 1.8.24
Sudoers policy plugin version 1.8.24
Sudoers file grammar version 46
Sudoers I/O plugin version 1.8.24
$ sudo su
root@budgie-vm /repo/sudo #