sudo

The ALL command in sudoers now implies SETENV
permissions. The command search is now performed
using the target user's auxiliary group vector,
not just the target's primary group. When
determining if the PAM prompt is the default
"Password: ", the localized version is compared if
possible. The passprompt_override option was added
in sudoers to cause sudo's prompt to be used in
all cases (set when the -p flag is used).

This release fixes a bug where a sudoers entry with no runas user specified was treated differently from a line with the default runas user explicitly specified.

This release goes back to to using TCSAFLUSH instead of TCSADRAIN when turning off echo during password reading. A configure bug that was preventing the addition of -lutil for login.conf support on FreeBSD and NetBSD has been fixed. A configure check has been added for struct in6_addr, since some systems define AF_INET6 but have no real IPv6 support.

This release works around bugs in the session support of some PAM implementations. The full TTY path is now passed to PAM as well. Sudo now only prints a password prompt if the process is in the foreground.

This release fixes a bug in the IP address matching introduced by the IPV6 merge. It also fixes a bug that prevented sudoedit from creating new files. The visudo command, when used with the -f flag, will now use the permissions of the original file being edited, which makes it possible to use visudo with sudoers files kept under revision control. Groups and netgroups are now valid in an LDAP sudoRunas statement. The configure script has been updated to work with the latest autoconf and libtool.