+2011-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/Makefile.in:
+ check_addr needs to link with the network libraries on Solaris
+ [322bd70e316e]
+
+ * plugins/sudoers/match.c:
+ When matching a RunasAlias for a runas group, pass the alias in as
+ the group_list, not the user_list. From Daniel Kopecek.
+ [766545edf141]
+
+ * plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
+ We need to init the auth system regardless of whether we need a
+ password since we will be closing the PAM session in the monitor
+ process. Fixes a crash in the monitor on Solaris; bugzilla #518
+ [e82809f86fb3]
+
+2011-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * .hgtags:
+ Added tag SUDO_1_8_3 for changeset 82bec4d3a203
+ [6c953ef6f577] <1.8>
+
+ * Update Japanese sudoers translation from translationproject.org
+ [82bec4d3a203] [SUDO_1_8_3] <1.8>
+
+2011-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Override and ignore the --disable-static option. Sudo already runs
+ libtool with -tag=disable-static where applicable and we need non-
+ PIC objects to build the executables.
+ [dff177464029] <1.8>
+
+2011-10-10 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Add sudoedit fix
+ [3238dc7e4fb2] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot:
+ regen pot files
+ [7981d6cbf1ab] <1.8>
+
+ * Ignore set_logname (which is now the default) for sudoedit since we
+ want the LOGNAME, USER and USERNAME environment variables to refer
+ to the calling user since that is who the editor runs as. This
+ allows the editor to find the user's startup files. Fixes bugzilla
+ #515
+ [3b9486e5fddb] <1.8>
+
+ * Instead of trying to grow the buffer in make_grlist_item(), simply
+ increase the total length, free the old buffer and allocate a new
+ one. This is less error prone and saves us from having to adjust
+ all the pointers in the buffer. This code path is only taken when
+ there are groups longer than the length of the user field in struct
+ utmp or utmpx, which should be quite rare.
+ [cb7c5ac834b5] <1.8>
+
+ * Add Italian translation for sudo from translationproject.org
+ [c7876fccbc38] <1.8>
+
+ * NEWS:
+ Japanese translation for sudo and sudoers from
+ translationproject.org
+ [9945a3ef7ff7] <1.8>
+
+2011-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * sudoreplay depends on timestr.lo too; from Mike Frysinger
+ [ad9ae493205f] <1.8>
+
+2011-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/po/sudoers.pot:
+ Regen sudoers pot file.
+ [2c4d99361994] <1.8>
+
+ * NEWS:
+ Update with latest sudo 1.8.3 news
+ [4e7f59d339d4] <1.8>
+
+ * ldap_start_tls_s() on Debian (at least) sets the effective and saved
+ uids to the same value as the real uid. This prevents sudo from
+ setting the uid or gid later on. As a workaround, we now set perms
+ to root during sudoers_policy_open().
+ [eb4c4f15833a] <1.8>
+
+ * Better warning message on setuid() failure for the setreuid()
+ version of set_perms().
+ [308c72f601e4] <1.8>
+
+2011-10-02 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Combine new translations in NEWS item
+ [0aa07471a5e6] <1.8>
+
+2011-09-27 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Delref auth_pw at the end of check_user() instead of getting a ref
+ twice.
+ [1c882f2fb46c] <1.8>
+
+ * Make sudo_auth_{init,cleanup} return TRUE on success and check for
+ sudo_auth_init() return value in check_user().
+ [573bf35ecac9] <1.8>
+
+ * Do not return without restoring permissions.
+ [2444a0b96469] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ regen pot files
+ [d286bce8dbb1] <1.8>
+
+ * NEWS:
+ Update for latest release candidate
+ [63d184ba6263] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ regen pot files
+ [ac3ec1315df7] <1.8>
+
+ * Modify the authentication API such that the init and cleanup
+ functions are always called, regardless of whether or not we are
+ going to verify a password. This is needed for proper PAM session
+ support.
+ [ea281ca46d94] <1.8>
+
+ * Add missing dependency for getspwgen other depends.
+ [9c124272910d] <1.8>
+
+ * Fix a PAM_USER mismatch in session open/close. We update PAM_USER
+ to the target user immediately before setting resource limits, which
+ is after the monitor process has forked (so it has the old value).
+ Also, if the user did not authenticate, there is no pamh in the
+ monitor so we need to init pam here too. This means we end up
+ calling pam_start() twice, which should be fixed, but at least the
+ session is always properly closed now.
+ [d0866ee5f190] <1.8>
+
+ * Add check for old being NULL in utmp_setid(); from Steven McDonald
+ [30cc283ac2b4] <1.8>
+
+2011-09-25 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * If the invoking user cannot be resolved by uid fake the struct
+ passwd and store it in the cache so we can delref it on exit.
+ [19d44f44d45d] <1.8>
+
+2011-09-24 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Don't error out if the group plugin cannot be loaded, just warn.
+ [e91d9912c9a0] <1.8>
+
+2011-09-23 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Quiet a false positive found by several static analysis tools. These
+ tools don't know that log_error() does not return (it longjmps to
+ error_jmp which returns to the sudo front-end).
+ [3cc319e31ed6] <1.8>
+
+2011-09-22 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add Italian translation for sudo from translationproject.org Regen
+ .mo files
+ [c0b27f9d7e57] <1.8>
+
+ * .hgtags:
+ Added tag SUDO_1_8_2 for changeset 3682e51af1d0
+ [f0be566e9ea2] <1.8>
+
+2011-09-21 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Update to current reality and add bit about ssh auth
+ [48dcb86ce9be] <1.8>
+
+ * Make "verbose" static; fixes a namespace clash with
+ pam_ssh_agent_auth (and it doesn't need to be extern these days).
+ [b60fdd82de94] <1.8>
+
+ * configure, configure.in:
+ FreeBSD has libutil.h not util.h
+ [c03b121e0193] <1.8>
+
+ * configure, configure.in:
+ Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
+ [002e3e0bb173] <1.8>
+
+ * Update po files from translationproject.org
+ [2b36af902213] <1.8>
+
+2011-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Mention DEREF support
+ [dfeb152f1686] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot:
+ sync pot files
+ [1fba22e927a3] <1.8>
+
+ * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
+ Add support for DEREF in ldap.conf.
+ [fe1cf6ad0add] <1.8>
+
+ * Makefile.in:
+ install target should depend on ChangeLog too, not just install-doc
+ [f54e2ab633b8] <1.8>
+
+ * NEWS, configure.in, doc/sudoers.cat, doc/sudoers.man.in:
+ Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
+ [44a25099594e] <1.8>
+
+ * configure.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ regen pot files
+ [e14ee85cf49b] <1.8>
+
+ * configure, configure.in:
+ Fix some square brackets in case statements that needed to be
+ doubled up. While here, use $OSMAJOR when it makes sense.
+ [853c6e5f994c] <1.8>
+
+ * Fix a crash in make_grlist_item() on 64-bit machines with strict
+ alignment.
+ [e877c89ae32f] <1.8>
+
+ * Remove list_options() function that is no longer used now that "sudo
+ -L" is gone.
+ [f31543c80b98] <1.8>
+
+ * configure, configure.in:
+ Error message if user tries --with-CC
+ [0ed7558b8924] <1.8>
+
+ * configure, configure.in:
+ Check for -libmldap too when looking for ldap libs, which is the
+ Tivoli Directory Server client library.
+ [831e32d1453c] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ regen pot files for 1.8.3
+ [df2fb085cff2] <1.8>
+
+ * NEWS, configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
+ doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
+ doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+ doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
+ doc/visudo.man.in:
+ Update for version 1.8.3
+ [38cf153add0a] <1.8>
+
+2011-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Honor NOPASSWD tag for denied commands too.
+ [f473c443ad54] <1.8>
+
+ * INSTALL, configure, configure.in:
+ Remove --with-CC option; it doesn't work correctly now that we use
+ libtool. Users can get the same effect by setting the CC
+ environment variable when running configure.
+ [4f04869d74fd] <1.8>
+
+2011-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Assume all modern systems support fstat(2).
+ [0422b19dced3] <1.8>
+
+2011-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Add configure test for missing errno declaration and only declare it
+ ourselves if it is missing.
+ [6d26974f7e16] <1.8>
+
+ * Include errno.h before sudo.h to avoid conflicting with the system
+ definition of errno.
+ [8000bdc0968f] <1.8>
+
+2011-08-29 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Only print individual check status when there is a failure.
+ [bbdd669e7615] <1.8>
+
+ * Add calls to setprogname() for test programs.
+ [c721f3466a3a] <1.8>
+
+ * configure, configure.in:
+ Add -Wall and -Werror after all tests so they don't cause failures.
+ [20d75ce40086] <1.8>
+
+ * Actually run check_addr in the check target
+ [dcd96ef0dc57] <1.8>
+
+ * Split out address matching into its own file and add regression
+ tests for it.
+ [863f28589c24] <1.8>
+
+2011-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Fix matching a network number with netmask when the network number
+ is not the first address in the CIDR block.
+ [719942c986e9] <1.8>
+
+2011-08-26 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Don't assume all editors support the +linenumber command line
+ argument, use a whitelist of known good editors.
+ [d8d884af3b05] <1.8>
+
+2011-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Silence compiler warnings on Solaris with gcc 3.4.3
+ [8047cdb5d6a1] <1.8>
+
+ * Fix building on RHEL 3
+ [6bb0464a7450] <1.8>
+
+ * INSTALL, configure, configure.in:
+ Add --enable-werror configure option.
+ [aa40fd459836] <1.8>
+
+ * setgroups() proto lives in grp.h on RHEL4, perhaps others.
+ [92f98cbaebf0] <1.8>
+
+ * configure, configure.in:
+ Use PAM by default on AIX 6 and higher.
+ [7ef53d5ac819] <1.8>
+
+2011-08-22 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add new Esperanto translation from translationproject.org
+ [109ed683b885] <1.8>
+
+2011-08-19 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Quiet an innocuous valgrind warning.
+ [fc453e49f9dd] <1.8>
+
+2011-08-18 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Fix expansion of strftime() escapes in log_dir and add a regress
+ test that exhibited the problem.
+ [784e60d21f11] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ Fix "make check" return value.
+ [d3608efd8da6] <1.8>
+
+2011-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/po/sudoers.pot:
+ Regen pot files
+ [3682e51af1d0] [SUDO_1_8_2] <1.8>
+
+ * Makefile.in:
+ Fix logic inversion in pot file up to date check.
+ [343dbbca9422] <1.8>
+
+ * doc/sudo.cat, doc/sudo.man.in, doc/sudoers.cat,
+ doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
+ doc/visudo.cat, doc/visudo.man.in:
+ regen docs
+ [96234478bde2] <1.8>
+
+2011-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Add caching for gettext() checks.
+ [4039d21424c3] <1.8>
+
+ * configure, configure.in:
+ Better handling of libintl header and library mismatch.
+ [cc9faee8e486] <1.8>
+
+2011-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ sync
+ [73649a44d934] <1.8>
+
+2011-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Also check sudoers gid if sudoers is group writable.
+ [3d345347f6ac] <1.8>
+
+ * NEWS:
+ Update for 1.8.2 final
+ [441c22fea363] <1.8>
+
+2011-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ If dlopen is present but libtool doesn't find it, error out since it
+ probably means that libtool doesn't support the system.
+ [6fc7c0de4f6d] <1.8>
+
+ * configure args on the command line should override builtin defaults.
+ Disable NLS for non-Linux/Solaris unless explicitly enabled.
+ [0ef165f892c2] <1.8>
+
+ * Fix loop that calls authenticate(). If there was an error message
+ from authenticate(), display it.
+ [f0686011ff2e] <1.8>
+
+2011-08-11 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Update to autoconf 2.68 and libtool 2.4
+ [00df5f3647e1] <1.8>
+
+ * Fix typo; OPT should be OTP
+ [31da1f989740] <1.8>
+
+ * Rename libsudoers convenience library to libparsesudoers to avoid
+ libtool confusion.
+ [e9ae9d611dd5] <1.8>
+
+2011-08-10 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add Danish sudoers translation from translationproject.org
+ [fa9cd9758249] <1.8>
+
+ * Add dedicated callback function for runas_default sudoers setting
+ that only sets runas_pw if no runas user or group was specified by
+ the user.
+ [3fb4b18525de] <1.8>
+
+2011-08-09 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Update Finish, Polish, Russian and Ukrainian translations from
+ translationproject.org.
+ [0fcd8f6aff0a] <1.8>
+
+ * Makefile.in:
+ Go back to using a callback for runas_default to keep runas_pw in
+ sync. This is needed to make per-entry runas_default settings work
+ with LDAP-based sudoers. Instead of declaring it a callback in
+ def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a
+ bit naughty, but avoids requiring stub functions in visudo and the
+ tests.
+ [4e8e70832f06] <1.8>
+
+2011-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ Regen pot files
+ [ca5c58c599a6] <1.8>
+
+ * Makefile.in:
+ Add check for out of date message catalogs when doing "make dist".
+ [36414e5c762b] <1.8>
+
+2011-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Make sure compiler supports static-libgcc before using it.
+ [6c98e8809291] <1.8>
+
+2011-08-01 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc
+ [a0a3a3fa6470] <1.8>
+
+2011-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add new Russian sudo translation from translationproject.org and
+ rebuild the other translation files.
+ [e953d7d1ca6d] <1.8>
+
+2011-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Update Finish and Polish translations from translationproject.org
+ [17e408d73c85] <1.8>
+
+ * Go back to escaping the command args for "sudo -i" and "sudo -s"
+ before calling the plugin. Otherwise, spaces in the command args
+ are not treated properly. The sudoers plugin will unescape non-
+ spaces to make matching easier.
+ [f666191a4e80] <1.8>
+
+2011-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Fix some potential problems found by the clang static analyzer, none
+ serious.
+ [c1ab4b940980] <1.8>
+
+ * Updated Ukranian and Chinese (simplified) po files from
+ translationproject.org
+ [792a66672715] <1.8>
+
+2011-07-27 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Updated Polish translation from translationproject.org
+ [5f434cc04482] <1.8>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ Rebuild pot files
+ [639230dbd741] <1.8>
+
+ * Don't try to audit failure if the runas user does not exist. We
+ don't have the user's command at this point so there is nothing to
+ audit. Add a NULL check in audit_success() and audit_failure() just
+ to be on the safe side.
+ [2bfb96a32b00] <1.8>
+
+ * Add -g to CFLAG for PIE builds.
+ [e4c94977ca4e] <1.8>
+
+2011-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Remove fallback to per-group lookup when matching groups in sudoers.
+ The sudo front-end will now use getgrouplist() to get the user's
+ list of groups if getgroups() fails or returns zero groups so we
+ always have a list of the user's groups. For systems with
+ mbr_check_membership() which support more that NGROUPS_MAX groups
+ (Mac OS X), skip the call to getgroups() and use getgrouplist() so
+ we get all the groups.
+ [168d6d4a386b] <1.8>
+
+2011-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Fix setgroups() fallback code on EINVAL.
+ [dd1310945ab3] <1.8>
+
+ * Fix two PERM_INITIAL cases that were still using user_gids.
+ [d497d0d47a23] <1.8>
+
+ * Add Polish sudo message catalog
+ [1a0aa3f9f179] <1.8>
+
+ * user_group is no longer used, remove it
+ [379185a76094] <1.8>
+
+2011-07-21 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add Polish translation from translationproject.org
+ [2e7cdfe4ef41] <1.8>
+
+ * Add a wrapper for setgroups() that trims off extra groups and
+ retries if setgroups() fails. Also add some missing addrefs for
+ PERM_USER and PERM_FULL_USER.
+ [bacb4170a510] <1.8>
+
+ * configure, configure.in:
+ Instead of keeping separate groups and gids arrays, create struct
+ group_info and use it to store both, along with a count for each.
+ Cache group info on a per-user basis using getgrouplist() to get the
+ groups. We no longer need special to special case the user or list
+ user for user_in_group() and thus no longer need to reset the groups
+ list when listing another user.
+ [f1d8962821a0] <1.8>
+
+ * Don't rely on NULL since we don't include a header for it.
+ [ed46286f848b] <1.8>
+
+ * Fix typo
+ [a38b8fbb0e70] <1.8>
+
+ * Do not shadow global sudo_mode with a local variable in set_cmnd()
+ [8e462ebafea4] <1.8>
+
+2011-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * bash 2.x doesd not support the -l flag and exits with an error if it
+ is specified so use --login instead. This causes an error with bash
+ 1.x (which uses -login instead) but this version is hopefully less
+ used than 2.x.
+ [73020a67b9d5] <1.8>
+
+ * Add Polish translation from translationproject.org
+ [8cac0da9ffb1] <1.8>
+
+2011-07-13 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Make error strings translatable.
+ [d1ff594f27b5] <1.8>
+
+ * Only run configure with --with-pam-login for RHEL 5 and above.
+ [2f1a0ff5230e] <1.8>
+
+ * Fix typo in summary
+ [1e1d7dcae9ab] <1.8>
+
+2011-07-11 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add missing logwrap.c
+ [abcd28c194d2] <1.8>
+
+ * Split out log file word wrap code into its own file and add unit
+ tests. Fixes an off-by one in the word wrap when the log line
+ length matches loglinelen.
+ [0ae1c7aa9ef1] <1.8>
+
+2011-07-05 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * For SuSE, only use /usr/lib64 as libexec if generating 64-bit
+ binaries.
+ [4448fa1c639f] <1.8>
+
+ * Fix build error when --without-noexec configure option is used.
+ [f6bfd748ae45] <1.8>
+
+ * configure, configure.in:
+ Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX
+ 5.3 and above.
+ [9d957ae1840d] <1.8>
+
+2011-07-03 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS, doc/UPGRADE:
+ Document group lookup change and possible side effects.
+ [fe4b2d2701b2] <1.8>
+
+2011-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Resolve the list of gids passed in from the sudo frontend (the
+ result of getgroups()) to names and store both the group names and
+ ids in the sudo_user struct. When matching groups in the sudoers
+ file, match based on the names in the groups list first and only do
+ a gid-based match when we absolutely have to. By matching on the
+ group name (as it is listed in sudoers) instead of id (which we
+ would have to resolve) we save a lot of group lookups for sudoers
+ files with a lot of groups in them.
+ [c10d208bd7e5] <1.8>
+
+2011-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Update for 1.8.2rc5
+ [f6a3aa2edf7a] <1.8>
+
+2011-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Workaround for "sudo -i command" and newer versions of bash which
+ don't go into login mode when -c is specified unless -l is too.
+ [381e74d35006] <1.8>
+
+2011-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Rewrite logfile word wrapping code to be more straight-forward and
+ actually wrap at the correct place.
+ [8a7862d6a82f] <1.8>
+
+2011-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Fix typo
+ [2456ad2ad3e3] <1.8>
+
+ * NEWS:
+ Mention use_pty bug fix
+ [f4eab5193452] <1.8>
+
+ * Set use_pty=true in command details when use_pty is set in sudoers.
+ From Ludwig Nussel
+ [abaafc5793d9] <1.8>
+
+2011-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Sync Chinese (simplified) PO files from translationproject.org
+ [a4cf84dd9ddf] <1.8>
+
+2011-06-18 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add Danish translation from translationproject.org and add missing
+ Basque mo files.
+ [672b88adcc34] <1.8>
+
+ * Makefile.in, configure, configure.in:
+ No longer need to specify LINGUAS in configure, "make install-nls"
+ now just installs all the .mo files it finds.
+ [c226a39ece48] <1.8>
+
+2011-06-17 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Build CONTRIBUTORS from newly-added contributors.pod
+ [b8871dd293ff] <1.8>
+
+ * Rework the wording in the leading paragraph
+ [d8b081dedeb3] <1.8>
+
+2011-06-16 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Add a CONTRIBUTORS file with the names of folks who have contributed
+ code or patches to sudo since I started maintaining it (plus the
+ original authors).
+ [8b064e8996af] <1.8>
+
+2011-06-13 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Preserve SHELL variable for "sudo -s". Otherwise we can end up with
+ a situation where the SHELL variable and the actual shell being run
+ do not match.
+ [8f5bb61a8b76] <1.8>
+
+2011-06-10 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Only enable Solaris project support when setproject() is present in
+ libproject.
+ [bf370ff3c194] <1.8>
+
+ * Explicitly set mode and owner of /etc/sudoers instead of relying on
+ "cp -p" to work in the postinstall script. On AIX 6.1 at least the
+ postinstall script runs before the final file permissions are set.
+ [7a4a87405349] <1.8>
+
+ * Refer the user to the "Command Environment" section in description
+ of sudo's -i option.
+ [1a063eaf9670] <1.8>
+
+ * Fix typo
+ [442c50370c44] <1.8>
+
+ * If there is no old dependency for an object file, use the MANIFEST
+ to find its source.
+ [d95c77ad283f] <1.8>
+
+ * Remove dependency for getgrouplist.lo as we don't ship that source
+ file.
+ [bbede77e6256] <1.8>
+
+ * Do not declare yyparse() static as the actual function generated by
+ yacc is extern.
+ [8e615bd15a4c] <1.8>
+
+ * Makefile.in:
+ Remove locale files in "make uninstall"
+ [9791be90d5ac] <1.8>
+
+2011-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure.in:
+ Add Basque translation and sync Finish and Ukranian translations.
+ [64af34789164] <1.8>
+
+ * NEWS:
+ Update PAM change to reflect latest checkin.
+ [657cddf2077a] <1.8>
+
+ * configure, configure.in:
+ FreeBSD no longer needs the main sudo binary to link with -lpam now
+ that plug-ins are loaded with RTLD_GLOBAL.
+ [573a6f4b29af] <1.8>
+
+ * Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
+ problems with pam modules not having access to symbols provided by
+ libpam on some platforms. Affects FreeBSD and SLES 10 at least.
+ [4ec864fdba46] <1.8>
+
+ * Makefile.in:
+ Move xgettext invocation out of update-po target into update-pot
+ [421ac1a073ea] <1.8>
+
+2011-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ Regenerate .pot files for 1.8.2rc2
+ [d2a891e3d3dd] <1.8>
+
+ * Makefile.in:
+ Move nls targets to the top level Makefile so the paths in the pot
+ file are saner
+ [6c256cb77f78] <1.8>
+
+ * NEWS:
+ Update 1.8.2 news
+ [17bd04278b04] <1.8>
+
+ * Add compiled version of sudo Finish translation
+ [ff9d20a02aa0] <1.8>
+
+ * Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo
+ files
+ [60c4f3b3829c] <1.8>
+
+ * configure, configure.in:
+ Add Finish translation from translationproject.org
+ [ade788a35521] <1.8>
+
+ * The group named by exempt_group should not have a % prefix.
+ [1f74c691c1e1] <1.8>
+
+ * Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin"
+ [58d36c0e76f9] <1.8>
+
+ * Fix compressed io log corruption in background mode by using _exit()
+ instead of exit() to avoid flushing buffers twice.
+
+ Improved background mode support. When not allocating a pty, the
+ command is run in its own process group. This prevents write access
+ to the tty. When running in a pty, stdin is not hooked up and we
+ never read from /dev/tty, which results in similar behavior.
+ [fe50d6a5c5b9] <1.8>
+
+2011-05-31 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Clean up regress files Generate proper dependencies for regress objs
+ in compat
+ [264196584549] <1.8>
+
+ * Add missing dependency for check_fill.o.
+ [c41f4e6ff078] <1.8>
+
+2011-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * INSTALL, configure, configure.in:
+ Add support for --enable-nls[=location]
+ [0ea8e7bd1739] <1.8>
+
+2011-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Include gettext.h
+ [fe8bab6403c6] <1.8>
+
+ * Quiet gcc warnings.
+ [aa16d09710a7] <1.8>
+
+ * configure, configure.in:
+ Don't install .mo files if gettext was not found.
+ [c6b233e829aa] <1.8>
+
+2011-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Always allocate a pty when running a command in the background but
+ call setsid() after forking to make sure we don't end up with a
+ controlling tty.
+ [77c6b2923714] <1.8>
+
+ * Add missing space between command name and the first command line
+ argument.
+ [d0a36b9c0f38] <1.8>
+
+ * Quiet a compiler warning on some platforms.
+ [654e76cf0574] <1.8>
+
+ * README file that directs people to translationproject.org
+ [5545e9a5ae37] <1.8>
+
+ * Sync translations with TP
+ [b054ce577022] <1.8>
+
+ * Makefile.in:
+ Add 'sync-po' target to top-level Makefile to rsync the po files
+ from translationproject.org.
+ [87a5011b0410] <1.8>
+
+ * install nls files from install target
+ [a3feba9ef323] <1.8>
+
+ * Makefile.in:
+ Include .mo files in sudo binary packags.
+ [bc3ee7e7fb44] <1.8>
+
+ * configure, configure.in:
+ Add simplified chinese translation
+ [c22e6842c766] <1.8>
+
+2011-05-26 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * configure, configure.in:
+ Add ukranian translation
+ [0bb9e6437f0f] <1.8>
+
+ * refer to siglist.c, not ./siglist.c since not all makes will treat
+ foo and ./foo the same.
+ [909051ff6061] <1.8>
+
+ * Set def_preserve_groups before searching for the command when the -P
+ flag is specified.
+ [08e9378f50e4] <1.8>
+
+ * Makefile.in:
+ Add dependency for siglist.lo in compat. This is a generated file
+ so "make depend" needs to depend on it.
+ [e6c0daf36af0] <1.8>
+
+ * More dependency fixes.
+ [7fed03624689] <1.8>
+
+ * Fix a few dependencies.
+ [7cb86c721961] <1.8>
+
+ * Place compiled mo files in the src dir, not the build dir. When
+ installing compiled mo files, display a status message.
+ [b87aa18a9968] <1.8>
+
+2011-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * Tivoli Directory Server requires that seconds be present in a
+ timestamp, even though RFC 4517 states that they are optional.
+ [47ebf110ea7a] <1.8>
+
+ * Add missing bit of copyright
+ [d05d28a91bc4] <1.8>
+
+ * Mention cycle detection warnings
+ [ee8231aa1aed] <1.8>
+
+ * When checking aliases, also check the contents of the alias in case
+ there are problems with an alias that is referenced inside another.
+ Replace the self reference check with real alias cycle detection.
+ [abcfe1bc95d8] <1.8>
+
+ * Set errno to ELOOP in alias_find() if there is a cycle. Set errno to
+ ENOENT in alias_find() and alias_remove() if the entry could not be
+ found.
+ [e73d169f4e9b] <1.8>
+
+ * Increment alias_seqno before calls to alias_remove_recursive() to
+ avoid false positives with the alias loop detection. Fixes spurious
+ warnings about unused aliases when they are nested.
+ [ac094820ef19] <1.8>
+
+ * add mkdep.pl
+ [3721e9654ba6] <1.8>
+
+ * Add dependency on convenience libs to binaries
+ [8a4db8226dfe] <1.8>
+
+ * Makefile.in:
+ mkdep.pl only works when run from the src dir
+ [2480427a0680] <1.8>
+
+ * Makefile.in:
+ Auto-generate Makefile dependencies with a perl script.
+ [ef5f56907d97] <1.8>
+
+2011-05-23 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * If the user specifies a runas group via sudo's -g option that
+ matches the runas user's group in the passwd database and that group
+ is not denied in the Runas_Spec, allow it. Thus, if user root's gid
+ in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if
+ no groups are present in the Runas_Spec.
+ [942e1e7c5090] <1.8>
+
+2011-05-22 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * NEWS:
+ Mention what is new in 1.8.2 (for now)
+ [d44b26eceee5] <1.8>
+
+ * Add dependencies on gettext.h
+ [32c61c6af852] <1.8>
+
+ * Fix install-nls target with HP-UX sh when gettext is not present.
+ [3441cece9638] <1.8>
+
+ * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
+ doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
+ doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
+ doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
+ Regen for sudo 1.8.2
+ [9ea124b542cc] <1.8>
+
+2011-05-20 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
+ regenerate .pot files for lbuf changes
+ [a8a9cc62c3a5] <1.8>
+
+ * configure, configure.in:
+ Add missing "checking" message for gettext when using the cache.
+ [4136bc346576] <1.8>
+
+ * Add primitive format string support to the lbuf code to make
+ translations simpler.
+ [22fc74618d09] <1.8>
+
+ * configure, configure.in, plugins/sudoers/po/sudoers.pot,
+ src/po/sudo.pot:
+ Bump version to 1.8.2
+ [999de1ac5b3e] <1.8>
+
+ * Add message catalog template files for sudo and the sudoers module.
+ [6afad75e7afa] <1.8>
+
+ * configure.in:
+ Add gettext.h convenience header. This is similar to but distinct
+ from the one included with the gettext package.
+ [5ae5a86e0d06] <1.8>
+
+ * configure, configure.in:
+ Add checks for nroff -c and -Tascii flags
+ [580c21905280] <1.8>
+
+ * configure, configure.in:
+ Add check for HP bundled C Compiler (which cannot create shared
+ libs)
+ [34f616cbb0f3] <1.8>
+
+ * Fix C format warnings.
+ [f20a43a817f0] <1.8>
+
+ * Add __printflike
+ [76bf8a4bf075] <1.8>
+
+ * Translate help / usage strings.
+ [16c5b7902d4c] <1.8>
+
+ * Set --msgid-bugs-address to the bugzilla url
+ [3e3cfa7b4ceb] <1.8>
+
+ * INSTALL, Makefile.in, README, configure, configure.in:
+ Add scaffolding to update .po files and install .mo files.
+ [a51e60b35e47] <1.8>
+
+ * Minor warning/error cleanup
+ [593144ac87ff] <1.8>
+
+ * configure.in:
+ Emulate ngettext for the non-nls case
+ [7cdf82de4dee] <1.8>
+
+ * Do not mark untranslatable strings for translation
+ [088271ed02d0] <1.8>
+
+ * Use ROOT_UID not 0.
+ [f901fa2fdaf2] <1.8>
+
+ * Minor warning/error message cleanup
+ [b99c7ef46236] <1.8>
+
+ * cannot -> "unable to" in warning/error messages can't -> "unable to"
+ in warning/error messages
+ [5119140fabc7] <1.8>
+
+ * configure, configure.in:
+ FreeBSD needs the main sudo executable to link with -lpam when
+ loading dynaic pam modules for some reason.
+ [738b6778a505] <1.8>
+
+ * We don't want to translate debugging messages.
+ [357a575c2dfd] <1.8>
+
+ * configure, configure.in:
+ Add calls to bindtextdomain() and textdomain() Currently there are
+ two domains, one for the sudo front-end and one for the sudoers
+ plugin and its associated utilities.
+ [907f39439d80] <1.8>
+
+ * configure, configure.in:
+ Fix caching of libc gettext check.
+ [e229c21f412f] <1.8>
+
+ * Mark defaults descriptions for translation
+ [65e03d1f8203] <1.8>
+
+ * NEWS:
+ Update for sudo 1.8.1p2
+ [89c31f2aa11e] <1.8>
+
+ * Quiet compiler warning when SELinux is enabled.
+ [51b1d7c8aa86] <1.8>
+
+ * dd missing includes of libintl.h.
+ [25662143d36d] <1.8>
+
+ * Fix gettext marker.
+ [7618856ba5de] <1.8>
+
+ * Include libint.h where needed.
+ [cc256b297b9d] <1.8>
+
+ * Prepare sudoers module messages for translation.
+ [1b7f0bbaa55f] <1.8>
+
+ * Only check gid of sudoers file if it is group-readable.
+ [f3cae943f35a] <1.8>
+
+ * For AIX, keep calling authenticate() until reenter reaches 0.
+ [e412676bac73] <1.8>
+
+ * configure, configure.in:
+ Cache the status of the initial gettext() check.
+ [c32281768c0f] <1.8>
+
+ * INSTALL, configure, configure.in:
+ Add --disable-nls flag and improve checks for gettext.
+ [b39674c1e538] <1.8>
+
+ * configure, configure.in:
+ When building with gcc on HP-UX, use -march=1.1 to produce portable
+ binaries on a pa-risc2 host. Previously, the +Dportable option was
+ used for the HP-UX C compiler but gcc always produced native
+ binaries.
+ [41351c23ad41] <1.8>
+
+ * Prepare sudo front end messages for translation.
+ [7807d6f74dac] <1.8>
+
+ * configure, configure.in:
+ Add initial scaffolding to support localization via gettext()
+ [cdbbff7e6376] <1.8>
+
+2011-05-19 Todd C. Miller <Todd.Miller@courtesan.com>
+
+ * doc/license.pod:
+ update copyright year
+ [d681661f03cc] <1.8>
+
+ * INSTALL, README:
+ No need to include version number at the top of these files.
+ [7e11f673f773] <1.8>
+
+ * README:
+ This is sudo 1.8.1 not 1.8.0
+ [4d674f230d8a] <1.8>
+
2011-05-04 Todd C. Miller <Todd.Miller@courtesan.com>
* Don't let the fnmatch/glob macros expand the function prototype.