sudo 1.9.8rc2 released

--===============1063823018614140464==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="94600_Wed_Sep__8_15_14_11_MDT_2021"

--94600_Wed_Sep__8_15_14_11_MDT_2021
Content-Type: text/plain; charset=us-ascii

The second (hopefully final) release candidate for sudo 1.9.8 is
now available.

In addition to bug fixes, sudo 1.9.8 adds a new "intercept" mode
that can be used to intercept the execve() system call in the command
run by sudo and do a policy check on sub-commands before they are
executed.  Intercept mode uses LD_PRELOAD to communicate with the
main sudo process to perform the sudoers check.  As such, there are
some limitations.  See the sudoers man page for details.

Sudo 1.9.8 also includes a new sudoers setting, log_subcmds, which
works like intercept mode but only logs the command that was run
and does not validate it against the sudoers file.

Source:
    https://www.sudo.ws/dist/beta/sudo-1.9.8rc2.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.9.8rc2.tar.gz

SHA256 checksum:
    8c29e554d081afb68fbb1a709c86e3a9e02fe0e2c9abb558a33278d8c378cc44

MD5 checksum:
    62db8ba23d44fd21bf45e1e0b0e740f4

Binary packages:
    https://www.sudo.ws/dist/beta/packages/index.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.9.8rc2 and 1.9.8rc1:

 * Added intercept support for the execl(), execle(), execlp(),
   execvp(), and execvpe() functions.

Major changes between sudo 1.9.8rc1 and 1.9.8b4:

 * Fixed a bug introduced in 1.9.8b4 that could result in a buffer
   overflow if the intercept token is not read all at once.

 * Updated translations from translationproject.org.

Major changes between sudo 1.9.8b4 and 1.9.8b3:

 * The runcwd entry in the event log is now updated when the intercept
   or log_runcmds settings are enabled in sudoers.

 * Sudo is now built with the -fstack-clash-protection and
   -Wl,-z,noexecstack options by default if they are supported.

 * The random token shared between sudo and sudo_intercept.so
   has been increased to 128 bits and is now tranferred before the
   actual protocol begins.  Connections that don't start with the
   proper token are dropped immediately.

 * Fixed sudo's UUID generation and added a regression test.

 * SELinux RBAC cannot be used with the intercept or log_subcmds
   sudoers settings.  They are fundamentally incompatible and are
   now documented as such.

 * When configure is run with the --disable-intercept option, the
   intercept support code is no longer compiled.

Major changes between sudo 1.9.8b3 and 1.9.8b2:

 * The log_children sudoers setting has been renamed to log_subcmds.

 * The execv() function can now be intercepted as well as execve.

 * Rewrote the sudo_intercept.so <-> sudo interprocess communication.
   It now uses a localhost TCP socket instead of an inherited file
   descriptor.  Some shells close all open file descriptors greater
   than 2 when they start up which did not work with the old scheme.
   In the new scheme, the inherited file descriptor is only used
   to retrieve a shared secret and port number, after which is is
   closed.  The actual policy decision is made over a new TCP
   connection in the intercepted execve() call.

 * Fixed formatting for bound defaults with multiple entries in the
   binding. The entries in the binding were separated with " ,"
   instead of ", ".

 * Fixed logging of the command name for "log_children".  Previously,
   the parent process name was logged (though the logged argv was
   correct).

 * Updated translations from translationproject.org.

Major changes between sudo 1.9.8b2 and 1.9.8b1:

 * Sudo will no longer permit a set-user-ID or set-group-ID program
   to be run in intercept mode unless the new "intercept_allow_setid"
   sudoers setting is enabled.

 * The mksigname and mksiglist helper programs are now built with
   the host compiler, not the target compiler, when cross-compiling.
   Bug #989.

Major changes between sudo 1.9.8b1 and 1.9.7p2:

 * It is now possible to transparently intercepting sub-commands
   executed by the original command run via sudo.  Intercept support
   is implemented using LD_PRELOAD (or the equivalent supported by
   the system) and so has some limitations.  The two main limitations
   are that only dynamic executables are supported and only the
   execve() system call is currently intercepted.  Its main use
   case is to support restricting privileged shells run via sudo.

   To support this, there is a new "intercept" Defaults setting and
   an INTERCEPT command tag that can be used in sudoers.  For example:

    Cmnd_Alias SHELLS=/bin/bash, /bin/sh, /bin/csh, /bin/ksh, /bin/zsh
    Defaults!SHELLS intercept

   would cause sudo to run the listed shells in intercept mode.
   This can also be set on a per-rule basis.  For example:

    Cmnd_Alias SHELLS=/bin/bash, /bin/sh, /bin/csh, /bin/ksh, /bin/zsh
    chuck ALL = INTERCEPT: SHELLS

   would only apply intercept mode to user "chuck" when running one
   of the listed shells.

 * The new "log_children" sudoers setting can be used to log commands
   run in a privileged shell.  It uses the same mechanism as the
   intercept support described above and has the same limitations.

 * Support for logging sudo_logsrvd errors via syslog or to a file.
   Previously, most sudo_logsrvd errors were only visible in the
   debug log.

 * Better diagnostics when there is a TLS certificate validation error.

 * Using the "+=" or "-=" operators in a Defaults setting that takes
   a string, not a list, now produces a warning from sudo and a
   syntax error from inside visudo.

 * Fixed a bug where the "iolog_mode" setting in sudoers and sudo_logsrvd
   had no effect when creating I/O log parent directories if the I/O log
   file name ended with the string "XXXXXX".

 * Fixed a bug in the sudoers custom prompt code where the size
   parameter that was passed to the strlcpy() function was incorrect.
   No overflow was possible since the correct amount of memory was
   already pre-allocated.

--94600_Wed_Sep__8_15_14_11_MDT_2021
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEWdHpzLorN2cE/dNbqfTAIc6kcPsFAmE5J6MACgkQqfTAIc6k
cPtuChAAkZS/hwqEHjs4/5LpSU+pMjaJhnwFOXlMkxNBnp3BG84lSlQNjnSVge60
xpoifnzmXVzqNALV56huBcf0Rem7uC85FsW8Z5Pp9dRQb3Z4RoWxfiAlnMa5UuPm
8tjLFCHn4eAqXvXA6zPRSSq+2tY3CIAt3K4iQpYGzi7KqxeG7MRCMLlS8q7CpzAH
yq/sx9u/gmgFGVWei5d7FAqzYvhlSEfCnBa1anQXsN8Yvm+EsgCnlI790o/Y8hG0
nkqioUQ37kUDiCj1oPOSG63kLS49LUHpnm7KoBUzrTZZRxnkOe518VoaJ483BmOt
swXqN9WTJJZg8J94TfRsv6hsJkaw2eoJdd6VYh27nxom1iNjoGvEeijU3KDkHPCZ
eY8CSACM+RRJ141tGtZ9fwC6HFhHz3w3lzAV/t0HbJMsiEJP3QykLFFAYH7whQjO
OhM23rBj5kqBaZ3oH/nBbeTj/hMLeCKivUay4kBF2sQsXglkm7AMvL/PTWH/gnzM
mH0bahQnXAUHwkGIY5uZmy5Z25QGOQCpYZDnTXUl+asX3PXLqwmyLurZPidNOvD/
iduXU3D6aTNEvpw3HWQ5H+sxNthzgPOx+WywDzxBO5OA6fkuiqBp3UmWwmJWlmNX
zjBxRGrwzOoQcWbtrojKOye5uW3vQpFEkmo7Sc2txFbJ5JOaW60=
=La56
-----END PGP SIGNATURE-----

--94600_Wed_Sep__8_15_14_11_MDT_2021--


--===============1063823018614140464==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers

--===============1063823018614140464==--