sudo
Sudo (su "do") allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root while logging all commands and arguments. Sudo operates on a per-command basis, it is not a replacement for the shell.
| Licenses | BSD Original BSD Revised |
|---|
Recent releases
- 19 Apr 2009 16:15
Changes: A bug in the glob() bundles with sudo has been fixed. Two NULL pointer dereference bugs have been fixed. An LDAP compatibility problem with AIX has been fixed. Two new default options, "pwfeedback" and "fast_glob", have been added. BSM audit support has been added for FreeBSD and Mac OS X. #include directives may now include a "%h" escape, for the hostname. The -k flag may now be used with a command to ignore the timestamp. Sudo now supports LDAP START_TLS and /etc/netsvc.conf on AIX. The unused alias checks in visudo now handle the case of an alias referring to another alias.
- 19 Dec 2008 21:16
Changes: This release includes a rewritten parser that eliminates ordering issues that affected previous versions. The new parser also supports an #include facility. A new flag, -g, allows the user to specify a group/gid to run the command as, and the -l (list) option can now be used by root to list other users' permissions. This release also adds support for /etc/nsswitch.conf, which allows vendors to ship an LDAP-enabled sudo without having LDAP on by default.
- 14 Nov 2008 14:42
Changes: A crash which occurred when the -i flag was used with a uid not in the password database has been fixed. Sudo now operates in the C locale again when doing a match against sudoers. A potential crash when a glob matches a large number of files has been fixed. A compilation problem with certain versions of Heimdal KerberosV has been fixed. When setting the umask, sudo will now use the union of the user's umask and the value set in sudoers. Sudo now stats fewer files when doing a wildcard match.
- 12 May 2008 10:35
Changes: There was missing whitespace before the LDAP libraries in the Makefile for some configurations. LDAP support now compiles on systems where LDAPS_PORT is not defined. Also fixes a bug introduced in sudo 1.6.9p14 if the LDAP server could not be contacted and the user was not present in the sudoers file, a syntax error in sudoers was incorrectly reported.
- 29 Mar 2008 23:19
Changes: The installation of sudo_noexec.so on AIX systems was fixed. libtool was updated to version 1.5.26. Printing of default SELinux role and type in -V mode was fixed. The HOME environment variable is once again preserved by default, as per the documentation.
