2010年9月 9日

[installer 2490] sudo-1.7.4p4

sudo-1.7.4p4 出ています。

セキュリティホールの修正が含まれています。
http://www.sudo.ws/sudo/alerts/runas_group.html
参照のこと。

☆ sudo-1.7.4p4
http://www.sudo.ws/

http://www.sudo.ws/sudo/dist/sudo-1.7.4p4.tar.gz
ftp://ftp.sudo.ws/pub/sudo/sudo-1.7.4p4.tar.gz

2010-09-06 Todd C. Miller <Todd.Miller@xxxxx>

* match.c:
When matching the runas user and runas group (-u and -g command line
options), keep track of runas group and runas user matches
separately. Only return a positive match if we have a match for
both runas user and runas group (if specified).
[68d30216c13a]

2010-09-04 Todd C. Miller <Todd.Miller@xxxxx>

* ldap.c, parse.c:
Do not return -1 on error from the display functions; the call
expects a return value >= 0.
[e50e6ae4d06d]

* ldap.c:
display_bound_defaults now returns a count so make the stub return
0, not 1.
[97293ced4908]

2010-09-03 Todd C. Miller <Todd.Miller@xxxxx>

* get_pty.c:
It looks like AIX doesn't need to push STREAMS modules for ptys.
[62c281fcd4ad]

2010-08-30 Todd C. Miller <Todd.Miller@xxxxx>

* Makefile.in:
Install sudoers file from the build dir not hte src dir.
[a26afd8db531]

2010-08-26 Todd C. Miller <Todd.Miller@xxxxx>

* set_perms.c:
If runas_pw changes, reset the stashed runas aux group vector.
Otherwise, if runas_default is set in a per-command Defaults
statement, the command runs with root's aux group vector (i.e. the
one that was used when locating the command).
[24a695707b67]

* Makefile.in:
Add target to generate sudoers file Remove generated sudoers file as
part of distclean
[448627fc35b6]

2010-08-23 millert <millert@xxxxx>

* exec.c:
When not logging I/O install a handler for SIGCONT and deliver it to
the command upon resume. Fixes bugzilla #431
[e84690aa67bd]

2010-08-21 Todd C. Miller <Todd.Miller@xxxxx>

* sudo.c:
Don't need to fork and wait when compiled with --disable-pam-session
[2ae1bbe4437a]

2010-08-20 Todd C. Miller <Todd.Miller@xxxxx>

* lbuf.c:
Convert a remaining puts() and putchar() to use the output function.
[d68c213feb0f]

----
こがよういちろう


投稿者 xml-rpc : 2010年9月 9日 08:42
役に立ちました?:
過去のフィードバック 平均:(0) 総合:(0) 投票回数:(0)
本記事へのTrackback: http://hoop.euqset.org/blog/mt-tb2006.cgi/98253
トラックバック
コメント
コメントする




画像の中に見える文字を入力してください。